ghoxtbyte/CVE-2026-16265 Security advisory and research notes for CVE-2026-16265 affecting the WP Maps WordPress plugin. Create: 2026-09-18 16:44:59 +0000 UTC Push: 2026-09-18 16:45:00 +0000 UTC |

abraxas/CVE-2026-77991 CVE-2026-77991 - joomlaeventmanager.net - Critical - Privileged POST /administrator/index.php - Remote Code Execution Create: 2026-09-18 16:25:53 +0000 UTC Push: 2026-09-18 16:25:57 +0000 UTC |

Hasyros/CVE-2026-76555 WP Import Export Lite < 3.9.33 - Authenticated Path Traversal to Sensitive File Disclosure Create: 2026-09-18 14:23:26 +0000 UTC Push: 2026-10-07 16:15:19 +0000 UTC |

Hasyros/CVE-2026-76555-path-traversal-wp-import-export-lite WP Import Export Lite < 3.9.33 - Authenticated Path Traversal to Sensitive File Disclosure Create: 2026-09-18 14:23:26 +0000 UTC Push: 2026-10-07 17:03:55 +0000 UTC |

RMDycz/K80Pro-miro-CVE-2026-64560 Device-bound CVE-2026-64560 adaptation for RedMi K80pro miro OS 3.0.304.0 Create: 2026-09-18 06:54:32 +0000 UTC Push: 2026-09-18 06:54:33 +0000 UTC |

Faceless0x7/CVE-2026-93453 Create: 2026-09-18 06:40:15 +0000 UTC Push: 2026-09-18 06:40:16 +0000 UTC |

suominen/CVE-2026-81642 Create: 2026-09-18 04:22:42 +0000 UTC Push: 2026-09-18 04:22:43 +0000 UTC |

Squ1shification/Grafana-Plugin-Enumerator-CVE-2021-43798 Enumerate Grafana plugin enumeration PoC for CVE-2021-43798 Create: 2026-09-18 03:45:53 +0000 UTC Push: 2026-09-18 03:59:59 +0000 UTC |

HORKimhab/CVE-2026-18574 CVE-2026-18574 - Draft or TODO Create: 2026-09-18 01:58:06 +0000 UTC Push: 2026-09-18 01:58:10 +0000 UTC |

HORKimhab/CVE-2026-91843 CVE-2026-91843 - Draft or TODO Create: 2026-09-18 01:56:24 +0000 UTC Push: 2026-09-18 01:56:28 +0000 UTC |

HORKimhab/CVE-2026-77179 CVE-2026-77179 - Draft or TODO Create: 2026-09-18 01:55:38 +0000 UTC Push: 2026-09-18 01:55:42 +0000 UTC |

hacbs-release-tests/collectors-no-cve-ee206206 Create: 2026-09-18 00:59:48 +0000 UTC Push: 2026-09-18 00:59:51 +0000 UTC |

abraxas/CVE-2026-87796 CVE-2026-87796 - Multi Uploader for Gravity Forms <= 1.1.9 Create: 2026-09-17 23:28:23 +0000 UTC Push: 2026-09-17 23:28:27 +0000 UTC |

duranereloise-hash/cve20687-ipa Create: 2026-09-17 21:35:48 +0000 UTC Push: 2026-09-17 21:35:53 +0000 UTC |

K3ysTr0K3R/CVE-2026-32604 Create: 2026-09-17 20:48:21 +0000 UTC Push: 2026-09-17 20:48:23 +0000 UTC |

duranereloise-hash/cve20637-ipa Create: 2026-09-17 20:43:23 +0000 UTC Push: 2026-09-17 20:43:28 +0000 UTC |

kalnux/CVE-2026-1961-foreman-poc PoC for CVE-2026-1961 — command injection in Foreman's WebSocket proxy (lib/ws_proxy.rb) via unsanitized compute resource hostname, leading to RCE as the foreman user. Responsibly disclosed and patched. Create: 2026-09-17 19:16:49 +0000 UTC Push: 2026-09-17 19:16:50 +0000 UTC |

winrarzipsexploit/CVE-2026-87930 CVE-2026-87930 Joomla Multi-CVE RCE suite — authorized testing only Create: 2026-09-17 18:44:27 +0000 UTC Push: 2026-09-17 18:44:31 +0000 UTC |

winrarzipsexploit/CVE-2026-27540 CVE-2026-27540 WWLC WordPress unauth upload RCE suite — authorized testing only Create: 2026-09-17 18:44:20 +0000 UTC Push: 2026-09-17 18:44:25 +0000 UTC |

tc4dy/CVE-2026-85706-PoC-Toolkit 🪬 CVE-2026-85706 – GitLab Unauth File Read Toolkit (CVSS 10.0) | Red/Blue Team suite for self-managed GitLab CE/EE 18.7–19.3.1. 2 tools: Full Exploit (unauth file read, admin token, mass scan, loot, shell, stealth, SQLite/HTML/JSON output) etc., SafeChecker (version detect, audit, security headers, TLS check, MITRE). Only Use Ethically, Educ. <3 Create: 2026-09-17 18:06:48 +0000 UTC Push: 2026-09-17 18:07:45 +0000 UTC |