Hunt-Benito/one-salt-to-forge-them-all-cve-2026-114612-forged-admin-session-in-litellm Create: 2026-10-24 15:18:04 +0000 UTC Push: 2026-10-24 15:18:06 +0000 UTC |

tc4dy/CVE-2026-111497-Toolkit CVE-2026-111497 – Node.js Brotli Decoder OOB Write (CVSS 9.2) | Red/Blue Team suite for unpatched Node.js 22.x, 24.x, 26.x. 2 tools: Full Exploit (patch detection, remote DoS, Brotli bomb, lab RCE), Blue Team Checker (errno differential, version fingerprint, WAF detection, reporting) Only Use Ethically Only <3 Create: 2026-10-24 15:09:54 +0000 UTC Push: 2026-10-24 15:09:56 +0000 UTC |

benzeng/php-cve-2026-1096-research Create: 2026-10-24 14:56:25 +0000 UTC Push: 2026-10-24 14:56:26 +0000 UTC |

jstjep00/CVE-2024-45490-libexpat-poc PoC + Docker test harness for CVE-2024-45490 (libexpat XML_ParseBuffer negative length integer handling issue) Create: 2026-10-24 14:36:40 +0000 UTC Push: 2026-10-24 14:36:45 +0000 UTC |

Masriyan/Exploit---CVE-2026-110264---GitLab-CE-EE-RCE- Create: 2026-10-24 14:23:32 +0000 UTC Push: 2026-10-24 14:23:34 +0000 UTC |

Masriyan/Exploit-CVE-2026-110264-GitLab-CE-EE-RCE Create: 2026-10-24 14:23:32 +0000 UTC Push: 2026-10-24 14:24:22 +0000 UTC |

s1ko/poc-cve-2026-111497 CVE-2026-111497 (Node2Shell): deteccion del decoder Brotli vulnerable en Python y Node por el codigo de error real del decoder, con laboratorio HTTP local Create: 2026-10-24 10:43:18 +0000 UTC Push: 2026-10-24 10:43:20 +0000 UTC |

ArioVeisa/cve-2026-114509-laravel-tokenguard CVE-2026-114509 — Laravel TokenGuard authentication bypass (CVSS 9.2): PoC, root-cause analysis, Docker lab, and reproduction guide Create: 2026-10-24 10:39:10 +0000 UTC Push: 2026-10-24 10:39:18 +0000 UTC |

pt-act/node2shell-cve-2026-111497 Node2Shell / HTTP2Shell (CVE-2026-111497) exposure-audit kit — read-only scanner + agent prompts. macOS bash 3.2 / Linux portable. Create: 2026-10-24 10:02:46 +0000 UTC Push: 2026-10-24 10:02:53 +0000 UTC |

Ly0kha/CVE-2026-59774 Gitea LFI to RCE exploit (CVE-2026-59774) — arbitrary file read via Org-mode #+INCLUDE, chained to remote code execution through git hook injection Create: 2026-10-24 08:30:16 +0000 UTC Push: 2026-10-24 08:30:31 +0000 UTC |

googlesky/CVE-2026-111497 PoC, Docker lab, and technical report for CVE-2026-111497 (Node2Shell) — Node.js Brotli decoder invalid block-switch OOB write; validated errno differential and weaponized remote DoS, RCE analysis included. Create: 2026-10-24 07:11:16 +0000 UTC Push: 2026-10-24 07:11:22 +0000 UTC |

googlesky/CVE-2026-110264 PoC, reproducible labs, live evidence, Nuclei fingerprint, and technical report for CVE-2026-110264 — GitLab Org-mode/Onigmo unauthenticated RCE (CVSS 10.0); render oracle validated on GitLab CE 19.3.1. Create: 2026-10-24 07:11:16 +0000 UTC Push: 2026-10-24 07:11:21 +0000 UTC |

googlesky/CVE-2026-115560 PoC and Docker lab for CVE-2026-115560 — PHP session upload-progress serialize_handler mismatch to unauthenticated object injection / RCE. Validated end-to-end on php:8.4.27-apache with mitigation and no-switch controls. Create: 2026-10-24 07:11:16 +0000 UTC Push: 2026-10-24 07:11:21 +0000 UTC |

vintage-alt/CVE-2026-109618-and-CVE-2026-109619-php2shell-burpproxy Create: 2026-10-24 06:50:02 +0000 UTC Push: 2026-10-24 06:50:04 +0000 UTC |

lunacysoft/CVE-2026-39987-POC-Marimo CVE-2026-39987 POC Marimo Create: 2026-10-24 06:04:58 +0000 UTC Push: 2026-10-24 06:04:59 +0000 UTC |

lmoyacarias/nodejs-cve-2026-111497-checker Python 3 security auditing tool for CVE-2026-111497. Checks Node.js version thresholds and provides basic HTTP header inspection and SSH-based runtime version verification. Designed for non-destructive security assessments without sending exploit payloads. Create: 2026-10-24 05:12:21 +0000 UTC Push: 2026-10-24 05:12:23 +0000 UTC |

ncbtn/CVE-2026-PHP-Fix PHP2Shell CVE-2026-109618 and CVE-2026-109619 Fix Create: 2026-10-24 05:06:54 +0000 UTC Push: 2026-10-27 09:15:35 +0000 UTC |

longltse/php-cve-2026-115560-poc Create: 2026-10-24 03:38:13 +0000 UTC Push: 2026-10-24 03:38:15 +0000 UTC |

mahumadad/CVE-2026-111497-assessment Defensive assessment toolkit for CVE-2026-111497 (Brotli OOB write): ecosystem scanner, Python outbound PoC, canary server, CDN amplification analysis, framework defense matrix Create: 2026-10-24 03:17:24 +0000 UTC Push: 2026-10-24 03:17:31 +0000 UTC |

Taz1920/cve-2026-109619 CVE-2026-109619 PoC lab Create: 2026-10-24 02:50:01 +0000 UTC Push: 2026-10-24 02:50:02 +0000 UTC |