Resolvdd/CVE-2026-38526-PoC-htb-nexus- A PoC script for CVE-2026-38526, RCE via a file upload vulnerability in the /admin/tinymce/upload endpoint of webkul krayin 2.2.x Create: 2026-07-11 10:57:04 +0000 UTC Push: 2026-07-11 10:57:05 +0000 UTC |

Resolvdd/CVE-2026-38526-PoC-htb-nexus A PoC script for CVE-2026-38526, RCE via a file upload vulnerability in the /admin/tinymce/upload endpoint of webkul krayin 2.2.x Create: 2026-07-11 10:57:04 +0000 UTC Push: 2026-07-11 12:18:59 +0000 UTC |

shinthink/CVE-2026-56291 Create: 2026-07-11 10:50:54 +0000 UTC Push: 2026-07-11 10:50:55 +0000 UTC |

shinthink/CVE-2026-15282 CVE-2026-15282 — Instant Appointment <= 1.2 Unauthenticated File Upload RCE | file_get_contents() + file_put_contents() no validation | wp_ajax_nopriv_ Create: 2026-07-11 10:24:54 +0000 UTC Push: 2026-07-11 10:25:04 +0000 UTC |

gkdgkd123/CVE-2026-29145-Everything Create: 2026-07-11 08:39:29 +0000 UTC Push: 2026-07-11 08:39:29 +0000 UTC |

cybertechajju/CVE-2026-59734-POC OS Command Injection in Health Check → Remote Code Execution Create: 2026-07-11 08:27:52 +0000 UTC Push: 2026-07-11 08:27:53 +0000 UTC |

yanxinwu946/CVE-2026-46331 CVE-2026-46331 act_pedit page-cache corruption exploit, with Alpine PIE fix Create: 2026-07-11 06:42:33 +0000 UTC Push: 2026-07-11 06:42:49 +0000 UTC |

CrimsonfiedOfficial/CVE-2024-13985 Dahua CVE-2024-13985 Create: 2026-07-11 06:19:18 +0000 UTC Push: 2026-07-11 06:19:18 +0000 UTC |

CrimsonfiedOfficial/CVE-2026-29114 Dahua CVE-2026-29114 Create: 2026-07-11 06:14:23 +0000 UTC Push: 2026-07-11 06:14:24 +0000 UTC |

CrimsonfiedOfficial/CVE-2026-29115 Dahua CVE-2026-29115 Create: 2026-07-11 06:09:49 +0000 UTC Push: 2026-07-11 06:09:50 +0000 UTC |

CrimsonfiedOfficial/CVE-2026-29116 Dahua CVE-2026-29116 Create: 2026-07-11 06:03:27 +0000 UTC Push: 2026-07-11 06:04:03 +0000 UTC |

MW-HF/Drupal-CVE-2026-9082 Create: 2026-07-11 05:23:28 +0000 UTC Push: 2026-07-11 05:23:29 +0000 UTC |

swimmmmy/CVE-2024-27198-teamcity-auth-bypass Create: 2026-07-11 04:32:04 +0000 UTC Push: 2026-07-11 04:32:05 +0000 UTC |

Baba01hacker666/CVE-2026-46242 CVE-2026-46242 Create: 2026-07-11 03:26:58 +0000 UTC Push: 2026-07-11 03:26:58 +0000 UTC |

endgtryna/lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195 Create: 2026-07-11 03:10:51 +0000 UTC Push: 2026-07-11 03:11:39 +0000 UTC |

thecodeb0ss/CVE-2026-40887 An unauthenticated SQL injection vulnerability exists in the Vendure Shop API. A user-controlled query string parameter is interpolated directly into a raw SQL expression without parameterization or validation, allowing an attacker to execute arbitrary SQL against the database. Create: 2026-07-11 02:47:52 +0000 UTC Push: 2026-07-11 02:47:53 +0000 UTC |

caspy123/CVE-2026-43499 Create: 2026-07-10 21:15:28 +0000 UTC Push: 2026-07-10 21:15:29 +0000 UTC |

sudoand3rs0n/CVE-2025-5548 Create: 2026-07-10 21:06:25 +0000 UTC Push: 2026-07-10 21:06:29 +0000 UTC |

h3ck13r/CVE-2021-28235 CVE-2021-28235 PoC Create: 2026-07-10 18:45:06 +0000 UTC Push: 2026-07-10 18:45:07 +0000 UTC |

Cobrastrike62/CVE-2026-27626-POC Create: 2026-07-10 18:25:20 +0000 UTC Push: 2026-07-10 18:25:21 +0000 UTC |