syrex1013/CVE-2026-111497-node2shell CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2) Create: 2026-10-24 23:03:18 +0000 UTC Push: 2026-10-24 23:03:24 +0000 UTC |

danarhirany300-ctrl/CVE-2026-56190-Windows-Server-2022-RDP Unauthenticated RDP vulnerability in termsrv.dll (Windows Server 2022). Proof of Concept for heap spray, XFG bypass, Instruction Pointer control, and reliable Denial of Service (Event ID 7031). Create: 2026-10-24 22:46:37 +0000 UTC Push: 2026-10-24 22:46:39 +0000 UTC |

mnk-works/cve-2026-111497-rce-checker Lab-only exact-profile RCE/DoS validator for CVE-2026-111497; refuses non-loopback targets Create: 2026-10-24 22:05:21 +0000 UTC Push: 2026-10-24 22:05:25 +0000 UTC |

rehanedly/PHP-CVE-2026-Patches Create: 2026-10-24 21:22:28 +0000 UTC Push: 2026-10-24 21:22:30 +0000 UTC |

mnk-works/portainer-cve-2026-44848-checker Non-destructive checker for CVE-2026-44848: Portainer missing authorization on Docker plugin endpoints Create: 2026-10-24 21:17:38 +0000 UTC Push: 2026-10-24 21:17:42 +0000 UTC |

RAMI-WB/CVE-2019-9053 Create: 2026-10-24 20:48:18 +0000 UTC Push: 2026-10-24 20:48:19 +0000 UTC |

testerxma/cve-2021-31166-poc Create: 2026-10-24 20:23:59 +0000 UTC Push: 2026-10-24 20:24:00 +0000 UTC |

sh3llc0d3-0x15/CVE-2026-38526-Exploit my version of an exploit for Krayin CRM v2.2.x - CVE-2026-38526 Create: 2026-10-24 19:44:50 +0000 UTC Push: 2026-10-24 19:44:51 +0000 UTC |

joedayz/cve-2026-114820-java-scan Read-only Ansible playbook that finds Java truststores still anchoring the eMudhra and AAA roots removed for CVE-2026-114820. Create: 2026-10-24 19:33:38 +0000 UTC Push: 2026-10-24 19:33:40 +0000 UTC |

akamor2800/php-5.4-cve-2026-php2shell-patch Patch for old php 5.4.23 version from CVE-2026-109618 и CVE-2026-109619 vulnerabilities Create: 2026-10-24 19:32:31 +0000 UTC Push: 2026-10-24 19:32:33 +0000 UTC |

D7EAD/CVE-2026-116012 NSA Ghidra contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in marshal.cc. Create: 2026-10-24 19:13:32 +0000 UTC Push: 2026-10-24 19:13:34 +0000 UTC |

emirwtz/cve-2026-114509 Python detector for Laravel TokenGuard CVE-2026-114509 with local dependency analysis, remote authentication checks, and JSON reporting. Create: 2026-10-24 19:13:31 +0000 UTC Push: 2026-10-24 19:13:33 +0000 UTC |

D7EAD/CVE-2026-116011 A remote denial of service vulnerability in CrowCPP due to uncontrolled recursion. Create: 2026-10-24 19:12:03 +0000 UTC Push: 2026-10-24 19:12:16 +0000 UTC |

FreemanHack/CVE-2025-5548 Entorno y explotación de la vulnerabilidad CVE-2025-5548 (buffer overflow en FreeFloat FTP Server 1.0) Create: 2026-10-24 19:09:24 +0000 UTC Push: 2026-10-26 03:00:11 +0000 UTC |

emirwtz/CVE-2026-110264 Non-invasive Python detector for CVE-2026-110264 in GitLab, featuring version checks, offline log analysis, and JSON reporting. Create: 2026-10-24 19:06:47 +0000 UTC Push: 2026-10-24 19:06:49 +0000 UTC |

devzyai/CVE-2026-109618-POC A PHP app that ships an unpatched PHP runtime (PHP2Shell), for the Devzy scan to flag. No exploit code. Create: 2026-10-24 18:44:44 +0000 UTC Push: 2026-10-24 18:44:49 +0000 UTC |

sganggs/CVE-2026-98260-BRM-AN00 CVE-2026-98260 temporary root for HONOR Win2 BRM-AN00, handed to BakaSU. No flashing. Create: 2026-10-24 18:14:12 +0000 UTC Push: 2026-10-24 18:14:19 +0000 UTC |

utkarsssh17/cve-2026-110152-chrome-ngle-rce-poc PoC: CVE-2026-110152 Chrome ANGLE vertex-attribute translation heap buffer overflow (CVSS 9.6) Create: 2026-10-24 17:21:47 +0000 UTC Push: 2026-10-24 17:21:52 +0000 UTC |

utkarsssh17/cve-2026-nextjs-use-cache-rce-poc Create: 2026-10-24 16:39:07 +0000 UTC Push: 2026-10-24 16:39:12 +0000 UTC |

pedrose-99/CVE-2025-5548 Proyecto de explotación. Create: 2026-10-24 16:08:45 +0000 UTC Push: 2026-10-24 16:08:46 +0000 UTC |