dichen-L/CVE-2026-16723-vul CVE-2026-16723漏洞环境与poc Create: 2026-10-27 15:14:31 +0000 UTC Push: 2026-10-27 15:14:32 +0000 UTC |

lflare/php2shell-cve-2026-109618 just an experiment Create: 2026-10-27 14:58:04 +0000 UTC Push: 2026-10-27 14:58:06 +0000 UTC |

piecar21/CVE-2026-96760 PoC / exploit archive for CVE-2026-96760 Create: 2026-10-27 14:52:48 +0000 UTC Push: 2026-10-27 14:52:56 +0000 UTC |

Ghost-Bx1/ConsulK8s-CVE-2026-110720 CVE-2026-110720 - HashiCorp consul-k8s Cross-Namespace ACL Bypass PoC & Exploit Create: 2026-10-27 14:28:41 +0000 UTC Push: 2026-10-27 14:28:42 +0000 UTC |

Ghost-Bx1/AuthenticatorFlaw-CVE-2026-80097 CVE-2026-80097 - Microsoft Authenticator Android Token Theft PoC & Exploit Create: 2026-10-27 14:28:35 +0000 UTC Push: 2026-10-27 14:28:37 +0000 UTC |

Ghost-Bx1/DotNet-Tarball-CVE-2026-114148 CVE-2026-114148 - .NET Linux Tarball Local Privilege Escalation PoC & Exploit Create: 2026-10-27 14:27:57 +0000 UTC Push: 2026-10-27 14:27:59 +0000 UTC |

piecar21/CVE-2024-47167 PoC / exploit archive for CVE-2024-47167 Create: 2026-10-27 13:56:04 +0000 UTC Push: 2026-10-27 13:56:13 +0000 UTC |

Sadaqaty/CVE-2026-1277 The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to insufficient validation on the 'redirect_to' parameter in the promotional dismissal handler. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites via a crafted link. Create: 2026-10-27 13:53:58 +0000 UTC Push: 2026-10-27 13:53:59 +0000 UTC |

SecureNet-Dynamics/CVE-2026-1306 The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type and file extension validation in the 'export' AJAX action in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution Create: 2026-10-27 13:43:31 +0000 UTC Push: 2026-10-27 13:49:51 +0000 UTC |

FranklinF25/cve-2026-15176 CVE-2026-15176 — NGINX alias+rewrite heap overflow: analysis, differential lab, PoC (WIP) Create: 2026-10-27 13:36:49 +0000 UTC Push: 2026-10-27 13:36:55 +0000 UTC |

Sadaqaty/CVE-2026-1296 Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Open Redirection in all versions up to, and including, 1.2.7 due to insufficient validation on the 'requested_page' POST parameter in the verify_username_password function. This makes it possible for unauthenticated attackers to redirect users to potentially malicious site Create: 2026-10-27 13:25:47 +0000 UTC Push: 2026-10-27 13:25:48 +0000 UTC |

YuKongA/CVE-2026-98260 Create: 2026-10-27 12:53:47 +0000 UTC Push: 2026-10-27 12:53:58 +0000 UTC |

emirwtz/CVE-2023-7356 Offline Python detector for CVE-2023-7356 exposure in upstream Linux kernels, with CSV/JSON inventories and auditable reports. Create: 2026-10-27 12:51:04 +0000 UTC Push: 2026-10-27 12:51:23 +0000 UTC |

emirwtz/CVE-2026-113870 Offline Python detector for CVE-2026-113870 exposure in MongoDB Compass inventories, with CSV/JSON input and auditable reports. Create: 2026-10-27 12:48:24 +0000 UTC Push: 2026-10-27 12:48:48 +0000 UTC |

ADWMC/CVE-2026-98260-PLC110-6.6.66 CVE-2026-98260 (Linux exec / POSIX CPU timer UAF) on OnePlus PLC110, GKI 6.6.66 — measurement record, deterministic kretprobe oracle (head != 0), offsets and trigger-window analysis. No exploit primitives. Create: 2026-10-27 12:43:42 +0000 UTC Push: 2026-10-27 12:43:49 +0000 UTC |

emirwtz/CVE-2026-89035 Offline Python detector for CVE-2026-89035 exposure in MikroTik RouterOS inventories, with CSV/JSON input and auditable reports. Create: 2026-10-27 12:19:37 +0000 UTC Push: 2026-10-27 12:19:39 +0000 UTC |

emirwtz/CVE-2026-76475 Offline Python detector for CVE-2026-76475 exposure in Cisco UC inventories, with CSV/JSON input, versioned rules, and auditable reports. Create: 2026-10-27 12:11:33 +0000 UTC Push: 2026-10-27 12:12:16 +0000 UTC |

emirwtz/CVE-2026-76474 Offline Python detector for CVE-2026-76474 exposure in Cisco UC inventories, with CSV/JSON input, versioned rules, and auditable reports. Create: 2026-10-27 12:08:21 +0000 UTC Push: 2026-10-27 12:08:22 +0000 UTC |

emirwtz/CVE-2026-76473 Offline Python detector for CVE-2026-76473 release exposure in Cisco UC inventories, with CSV/JSON input and auditable reports. Create: 2026-10-27 11:59:30 +0000 UTC Push: 2026-10-27 11:59:31 +0000 UTC |

cyb3r-w0lf/CVE-2026-49881 Create: 2026-10-27 11:35:52 +0000 UTC Push: 2026-10-27 11:35:53 +0000 UTC |