InertFluid/cve-2026-77521-lab Benign, self-contained reproduction of CVE-2026-77521 (MaxKB prompt-injectable command execution) Create: 2026-10-15 11:14:53 +0000 UTC Push: 2026-10-15 11:14:59 +0000 UTC |

orevim/CVE-2026-18963-PoC Proof of concept and vulnerability checker for CVE-2026-18963, the Keycloak reset-credentials flow bypass Create: 2026-10-15 11:12:41 +0000 UTC Push: 2026-10-15 11:14:45 +0000 UTC |

suominen/CVE-2026-97205 Create: 2026-10-15 10:48:17 +0000 UTC Push: 2026-10-15 10:48:18 +0000 UTC |

prokeon5991-wq/cve-2025-66645 NiceGUI Path Traversal CTF Challenge Create: 2026-10-15 10:18:26 +0000 UTC Push: 2026-10-15 10:18:27 +0000 UTC |

Raincombat/CVE-2026-20896-Gitea-CTF CVE-2026-20896 Gitea Docker CTF Challenge Create: 2026-10-15 09:49:48 +0000 UTC Push: 2026-10-15 09:49:49 +0000 UTC |

uday952/CVE-2026-12118-POC- CVE-2026-12118 POC Create: 2026-10-15 08:06:44 +0000 UTC Push: 2026-10-15 08:06:46 +0000 UTC |

dreamfast/CVE-2026-110912 A PoC for CVE-2026-110912 'arpbleed' Create: 2026-10-15 07:43:45 +0000 UTC Push: 2026-10-15 07:43:46 +0000 UTC |

uday952/CVE-2026-104711-POC-NEW-VARIANT POC for the CVE-2026-104711 - New Variant Create: 2026-10-15 07:13:00 +0000 UTC Push: 2026-10-15 07:13:03 +0000 UTC |

ekacs/predicted-CVE-2026-20329 Create: 2026-10-15 07:08:57 +0000 UTC Push: 2026-10-15 07:08:59 +0000 UTC |

songjianyang/CVE-2026-47644 CVE-2026-47644 ($12,000): Edge Copilot Prompt Injection Leads to Cross-Tab Data Exfiltration - PoC & full writeup Create: 2026-10-15 05:22:05 +0000 UTC Push: 2026-10-15 05:22:25 +0000 UTC |

Sidesploitx/CVE-2026-108598 Unauthenticated RCE via Velocity Template Language (VTL) injection in Floci API Gateway mapping templates (versions 1.1.0–2.2.0). CVSS 9.8 Critical. Create: 2026-10-15 05:12:52 +0000 UTC Push: 2026-10-15 05:12:54 +0000 UTC |

q0524/CVE-2026-44825_CTF Create: 2026-10-15 01:01:16 +0000 UTC Push: 2026-10-15 01:01:17 +0000 UTC |

0x45dd/ivanti-cve-2026-104935-check Detection-only check for the Ivanti Connect Secure authentication bypass (CVE-2026-104935) Create: 2026-10-15 00:10:34 +0000 UTC Push: 2026-10-15 00:10:38 +0000 UTC |

Primandito/CVE-2026-107081 SQL Injection via identifier injection in SLiMS 9.8.0 admin AJAX endpoints (tableName/tableFields). Any authenticated staff can dump password hashes. Create: 2026-10-14 22:25:02 +0000 UTC Push: 2026-10-14 22:30:58 +0000 UTC |

MX-Qulin/CVE-2026-106991 Create: 2026-10-14 22:01:53 +0000 UTC Push: 2026-10-22 17:57:10 +0000 UTC |

SerhiiMaruniak/CVE-2021-4034 CVE-2021-4034 (PwnKit) - Python PoC Create: 2026-10-14 21:20:36 +0000 UTC Push: 2026-10-14 21:24:09 +0000 UTC |

Mickysalivan/CVE-2026-76519-POC Unauthenticated remote code execution on Cisco Secure Email Gateway via crafted email attachment. Path traversal in AMP File Reputation handling allows arbitrary file write as root when the service is enabled on a mail policy. Create: 2026-10-14 20:06:47 +0000 UTC Push: 2026-10-14 20:35:56 +0000 UTC |

Mickysalivan/CVE-2026-76519-Proof-of-concept Unauthenticated remote code execution on Cisco Secure Email Gateway via crafted email attachment. Path traversal in AMP File Reputation handling allows arbitrary file write as root when the service is enabled on a mail policy. Create: 2026-10-14 20:06:47 +0000 UTC Push: 2026-10-14 20:35:56 +0000 UTC |

lukaspalm/CVE-2026-109506 Technical writeup of CVE-2026-109506, a vulnerability I found in multiple TP-Link Wi-Fi Range Extenders Create: 2026-10-14 19:55:35 +0000 UTC Push: 2026-10-14 20:29:29 +0000 UTC |

adriyansyah-mf/cve-2026-110447 Create: 2026-10-14 19:22:35 +0000 UTC Push: 2026-10-14 19:22:36 +0000 UTC |