debjit604/PHP2Shell-CVE-2026-109618-CVE-2026-109619 Create: 2026-10-23 12:09:48 +0000 UTC Push: 2026-10-23 12:09:50 +0000 UTC |

skydwn/CVE-2026-109618 Use-After-Free on PHP 8.4.26, Apache 2.4.69. RCE pre-auth PoC made for educational purposes Create: 2026-10-23 11:58:24 +0000 UTC Push: 2026-10-23 11:58:26 +0000 UTC |

0xTerror/CVE-2026-83548 Create: 2026-10-23 11:52:44 +0000 UTC Push: 2026-10-23 11:52:45 +0000 UTC |

Andrew2142/php73-backport PHP 7.3.33-35 (php2shell fix, CVE-2026-109618/109619) rebuilt for Ubuntu 18.04, 20.04 and Debian 10 Create: 2026-10-23 11:36:57 +0000 UTC Push: 2026-10-23 11:37:03 +0000 UTC |

whxylm/tdoa-php-cve-2026-109618-109619-patch-package 通达OAV11 PHP5.45.0 补丁包 Create: 2026-10-23 11:06:22 +0000 UTC Push: 2026-10-23 11:06:23 +0000 UTC |

Ethen1212/php2shell-CVE-2026-109618 Create: 2026-10-23 10:56:40 +0000 UTC Push: 2026-10-23 11:01:47 +0000 UTC |

raivenLockdown/CVE-2026-107092 Create: 2026-10-23 10:46:24 +0000 UTC Push: 2026-10-23 10:46:26 +0000 UTC |

c0gnit00/CVE-2022-24707 POC for CVE-2022-24707, an authenticated SQL injection in Anuko Time Tracker’s Puncher plugin before 1.20.0.5642, caused by an unsanitized date POST parameter. It allows UNION-based and time-based blind SQL injection, enabling a logged-in user to dump the database Create: 2026-10-23 10:21:57 +0000 UTC Push: 2026-10-23 10:21:59 +0000 UTC |

al4n4n/CVE-2026-112403 CVE-2026-112403: Pillow heap buffer overflow in ImagingJpegDecode via lossless JPEG thumbnail. One POST, 100% crash rate. Create: 2026-10-23 09:49:47 +0000 UTC Push: 2026-10-23 09:49:52 +0000 UTC |

quyicheng03-boop/CVE-2026-98260-popsicle-android Target-specific Android CVE-2026-98260 research port for Xiaomi popsicle Create: 2026-10-23 08:56:37 +0000 UTC Push: 2026-10-23 09:18:13 +0000 UTC |

Chr1s-T/php2shell-cve-2026-109618 PHP2Shell (CVE-2026-109618/109619): mod_php pre-auth heap-corruption RCE — working PoC, non-destructive checker, per-build offset recovery for stripped distro packages, lab harness Create: 2026-10-23 08:27:31 +0000 UTC Push: 2026-10-23 08:53:02 +0000 UTC |

yifengchen-cc/CVE-2026-8933 Create: 2026-10-23 08:24:27 +0000 UTC Push: 2026-10-23 08:24:28 +0000 UTC |

EQSTLab/CVE-2026-109619 PHP2Shell Create: 2026-10-23 08:22:09 +0000 UTC Push: 2026-10-23 08:22:10 +0000 UTC |

StackOverflowExcept1on/CVE-2026-31431 Copy Fail exploit for Ubuntu 20.04 with legacy Python versions, including script to hide Copy Fail. Create: 2026-10-23 08:21:40 +0000 UTC Push: 2026-10-23 08:24:47 +0000 UTC |

tuanhoma/CVE-2026-109618 Create: 2026-10-23 07:49:04 +0000 UTC Push: 2026-10-23 07:49:29 +0000 UTC |

tuanhoma/CVE-2016-109618--TryHackMe- Create: 2026-10-23 07:45:15 +0000 UTC Push: 2026-10-23 07:45:17 +0000 UTC |

Ibonok/CVE-2026-94300 CVE-2026-94300: This analysis and PoC were produced substantially with AI assistance ("AI patchwork"). Every code, diff and measurement claim should be verified against the cited sources before being relied upon. Create: 2026-10-23 07:27:15 +0000 UTC Push: 2026-10-23 07:27:16 +0000 UTC |

xushihushuo-art/cve-2019-2215-skyworth Temproot for Skyworth 65G60 / Coocaa 9S60 (Android 8.0, kernel 4.9.44) via CVE-2019-2215 - port notes for the archived Bravia PoC Create: 2026-10-23 06:44:04 +0000 UTC Push: 2026-10-23 06:44:05 +0000 UTC |

MorphingYU/CVE-2026-109618 CVE-2026-109618 docker本地复现环境+Poc Create: 2026-10-23 06:28:50 +0000 UTC Push: 2026-10-23 06:28:51 +0000 UTC |

WJNKAC/CVE-2026-43499-OPPO-A5-PBBT30 利用 ghostlock 提权 oppo a5 pbbt30 root Create: 2026-10-23 06:09:52 +0000 UTC Push: 2026-10-23 06:09:53 +0000 UTC |