HORKimhab/CVE-2026-54121 CVE-2026-54121 - Draft Create: 2026-07-25 16:20:29 +0000 UTC Push: 2026-07-25 16:20:32 +0000 UTC |

1337Skid/CVE-2026-51565 Security Advisory for CVE-2026-51565 Create: 2026-07-25 16:16:22 +0000 UTC Push: 2026-07-25 16:16:24 +0000 UTC |

Debajyoti0-0/CVE-2026-60206 Create: 2026-07-25 15:13:41 +0000 UTC Push: 2026-07-25 15:13:42 +0000 UTC |

HORKimhab/CVE-2026-16723 CVE-2026-16723 - Draft Create: 2026-07-25 14:53:15 +0000 UTC Push: 2026-07-25 14:53:18 +0000 UTC |

imXur/CVE-2026-48908-Joomla-SP-Page-Builder-RCE Technical analysis and advisory for CVE-2026-48908: Unauthenticated Arbitrary File Upload to RCE in JoomShaper SP Page Builder. Create: 2026-07-25 12:53:41 +0000 UTC Push: 2026-07-25 12:54:02 +0000 UTC |

imXur/WordPress-CVE-2026-63030-Analysis Technical analysis, root cause breakdown, and non-destructive detection methodology for CVE-2026-63030. Create: 2026-07-25 12:29:46 +0000 UTC Push: 2026-07-25 12:29:47 +0000 UTC |

liyuxuan504-byte/CVE-2026-14266 7-Zip XZ Decoder Heap Buffer Overflow - Full analysis, root cause, PoC, and RCE exploitation roadmap Create: 2026-07-25 12:13:30 +0000 UTC Push: 2026-07-25 12:13:31 +0000 UTC |

0xBlackash/CVE-2026-54121 CVE-2026-54121 Create: 2026-07-25 11:50:21 +0000 UTC Push: 2026-07-25 11:50:22 +0000 UTC |

abdugafforov-bobur/CVE-2026-65694-PoC PoC for CVE-2026-65694 — Microweber CMS (<=2.0.20) unauthenticated path traversal → arbitrary file read (.env / secrets) Create: 2026-07-25 11:21:00 +0000 UTC Push: 2026-07-25 11:21:04 +0000 UTC |

cyberupdates365/2026-cve-and-zero-day-patch-database Enterprise infrastructure vulnerability registry tracking actively exploited CVEs, PoC releases, and vendor patch advisories. Create: 2026-07-25 08:56:36 +0000 UTC Push: 2026-07-25 08:56:39 +0000 UTC |

cyberupdates365/ai-cyber-threats-and-cve-mitigation-tracker-2026 Master repository tracking 2026 Enterprise Cybersecurity CVEs, Zero-Day Vulnerabilities, and Agentic AI Threats with actionable fix guides. Create: 2026-07-25 08:51:18 +0000 UTC Push: 2026-07-25 08:51:20 +0000 UTC |

HORKimhab/CVE-2026-54900 CVE-2026-54900 - Draft Create: 2026-07-25 08:42:47 +0000 UTC Push: 2026-07-25 08:42:51 +0000 UTC |

4minx/CVE-2026-50522 CVE-2026-50522 PoC Create: 2026-07-25 08:23:28 +0000 UTC Push: 2026-07-25 08:23:28 +0000 UTC |

0xDVRK/CVE-2026-41651 Create: 2026-07-25 08:13:21 +0000 UTC Push: 2026-07-25 08:13:22 +0000 UTC |

l0lsec/CVE-2020-5148 CVE-2020-5148 - Forced Authentication in the SonicWall UTM SSO Agent. The agent probes unvalidated workstations as Domain Admin, so one outbound web request yields a privileged NTLMv2 hash. Advisory SNWLID-2021-0003. Create: 2026-07-25 07:33:26 +0000 UTC Push: 2026-07-25 07:33:29 +0000 UTC |

l0lsec/CVE-2021-3262 CVE-2021-3262 - Blind SQL Injection in the editOEN parameter of TripSpark VEO Transportation / NovusEDU. Unauthenticated, internet-facing. Payloads, annotated requests, and evidence. Create: 2026-07-25 07:33:14 +0000 UTC Push: 2026-07-25 07:33:15 +0000 UTC |

l0lsec/CVE-2021-26837 CVE-2021-26837 - SQL Injection in the SearchTextbox parameter of HelpSystems/Fortra DeliverNow. Payloads, annotated requests, and evidence. Fixed in 1.2.18. Create: 2026-07-25 07:32:51 +0000 UTC Push: 2026-07-25 07:32:55 +0000 UTC |

l0lsec/CVE-2026-12960 CVE-2026-12960 - Improper Export of Android Application Components in the ASUS Router app (com.asus.aihome). PoC, exploit APK, video, and vendor report. Fixed in 1.0.0.9.74. Create: 2026-07-25 07:07:51 +0000 UTC Push: 2026-07-25 07:07:58 +0000 UTC |

LeoxSoft/CVE-2026-31431 🚀 CVE-2026-31431 - Linux Kernel AF_ALG + splice() Privilege Escalation Exploit (Zero-Day → Root Persistence) Create: 2026-07-25 06:47:57 +0000 UTC Push: 2026-07-25 06:48:34 +0000 UTC |

Rat5ak/CVE-2026-61946-Easy-Appointments-IDOR CVE-2026-61946: Unauthenticated IDOR in Easy Appointments <= 3.12.27 Create: 2026-07-25 05:39:09 +0000 UTC Push: 2026-07-25 05:39:13 +0000 UTC |