axisops/CVE-2025-29927 Next.js Middleware Bypass CVE-2025-29927 Mitigation work (Ansible Role) Create: 2026-10-26 15:47:12 +0000 UTC Push: 2026-10-26 16:00:55 +0000 UTC |

axisops/CVE-2024-6387 regreSSHion CVE-2024-6387 Mitigation work (Ansible Role) Create: 2026-10-26 15:46:36 +0000 UTC Push: 2026-10-26 16:00:53 +0000 UTC |

axisops/CVE-2024-3094 xz Backdoor CVE-2024-3094 Detection and Mitigation work (Ansible Role) Create: 2026-10-26 15:45:56 +0000 UTC Push: 2026-10-26 16:00:52 +0000 UTC |

axisops/CVE-2021-4034 PwnKit CVE-2021-4034 Mitigation work (Ansible Role) Create: 2026-10-26 15:45:24 +0000 UTC Push: 2026-10-26 16:00:47 +0000 UTC |

emirwtz/cve-2026-76466 Offline Python detector for CVE-2026-76466 in Cisco Expressway, using version and clustering evidence with JSON reporting. Create: 2026-10-26 15:37:13 +0000 UTC Push: 2026-10-26 15:37:15 +0000 UTC |

jessoan/CVE-2025-5548 CVE-2025-5548 Create: 2026-10-26 15:33:53 +0000 UTC Push: 2026-10-26 15:33:55 +0000 UTC |

Noshadi-sec/CVE-2026-97229 CVE-2026-97229 an external exploit for GitLab CI lint regex RCE. It is used only against a live GitLab target with permission. It creates a project, pushes a malicious CI configuration, triggers the CI lint endpoint, and receives command output through an HTTP callback. This is for authorized security research only. Create: 2026-10-26 15:14:45 +0000 UTC Push: 2026-10-26 15:14:47 +0000 UTC |

piecar21/CVE-2026-21902 PoC / exploit archive for CVE-2026-21902 Create: 2026-10-26 14:53:20 +0000 UTC Push: 2026-10-26 14:53:22 +0000 UTC |

piecar21/CVE-2026-0303 PoC / exploit archive for CVE-2026-0303 Create: 2026-10-26 14:47:26 +0000 UTC Push: 2026-10-26 14:47:28 +0000 UTC |

ChaYeWuu/violin-CVE-2026-98260-OS4.0 Xiaomi Pad7S Pro12.5在OS4.0.0.14.XOTCNXM利用CVE-2026-98260获取ROOT权限并加载KernelSU。 Create: 2026-10-26 14:44:21 +0000 UTC Push: 2026-10-26 14:44:22 +0000 UTC |

ChaYeWuu/xring-CVE-2026-98260-OS4.0 Xiaomi Pad7S Pro12.5在OS4.0.0.14.XOTCNXM利用CVE-2026-98260获取ROOT权限并加载KernelSU。 Create: 2026-10-26 14:44:21 +0000 UTC Push: 2026-10-31 09:49:51 +0000 UTC |

D7EAD/CVE-2026-116487 NXP Semiconductors USB middleware <2.13.0 contains an out-of-bounds read vulnerability in USB_DeviceCdcRndisSetCommand() that trusts a host-supplied informationBufferOffset. Create: 2026-10-26 13:13:32 +0000 UTC Push: 2026-10-26 13:13:45 +0000 UTC |

D7EAD/CVE-2026-116488 NXP Semiconductors USB middleware <2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. Create: 2026-10-26 13:12:19 +0000 UTC Push: 2026-10-26 13:12:31 +0000 UTC |

AdapptOnAzure/CVE-2026-111497-DotNetBrotliScan Cross-platform scanner that finds .NET apps, runtimes and Azure App Service / Functions deployments exposed to CVE-2026-111497 (brotli decoder) Create: 2026-10-26 13:10:47 +0000 UTC Push: 2026-10-26 13:45:39 +0000 UTC |

piecar21/CVE-2023-28771 PoC / exploit archive for CVE-2023-28771 Create: 2026-10-26 13:08:48 +0000 UTC Push: 2026-10-26 13:08:50 +0000 UTC |

piecar21/CVE-2023-37569 PoC / exploit archive for CVE-2023-37569 Create: 2026-10-26 13:08:37 +0000 UTC Push: 2026-10-26 13:08:40 +0000 UTC |

piecar21/CVE-2024-13985 PoC / exploit archive for CVE-2024-13985 Create: 2026-10-26 13:08:19 +0000 UTC Push: 2026-10-26 13:08:21 +0000 UTC |

piecar21/CVE-2026-1281 PoC / exploit archive for CVE-2026-1281 Create: 2026-10-26 13:07:07 +0000 UTC Push: 2026-10-26 13:07:10 +0000 UTC |

piecar21/CVE-2026-22679 PoC / exploit archive for CVE-2026-22679 Create: 2026-10-26 13:05:36 +0000 UTC Push: 2026-10-26 13:05:38 +0000 UTC |

gorgeoushos/CVE-2026-109618-research Unauthenticated RCE in PHP via session.upload_progress use-after-free (CVE-2026-109618 / CVE-2026-109619) Create: 2026-10-26 12:43:29 +0000 UTC Push: 2026-10-26 12:43:31 +0000 UTC |