sm1ee/CVE-2026-91733 CVE-2026-91733 Create: 2026-10-12 13:54:09 +0000 UTC Push: 2026-10-12 13:54:11 +0000 UTC |

sm1ee/CVE-2026-91737 CVE-2026-91733 Create: 2026-10-12 13:54:09 +0000 UTC Push: 2026-10-12 13:54:11 +0000 UTC |

HORKimhab/CVE-2026-102255 CVE-2026-102255 - Draft or TODO Create: 2026-10-12 13:43:16 +0000 UTC Push: 2026-10-12 13:43:21 +0000 UTC |

y3g1/CraftCMS-CVE-2026-79987 Authenticated RCE exploit for Craft CMS 5.9.0–5.10.12 (CVE-2026-79987). Time-based save-action oracle + raw-TCP exfil. Verified on vanilla lab. Create: 2026-10-12 11:23:39 +0000 UTC Push: 2026-10-12 11:23:40 +0000 UTC |

ghs053020-stack/cve-2024-21626 Create: 2026-10-12 10:11:24 +0000 UTC Push: 2026-10-12 10:17:04 +0000 UTC |

harisandhusingh-cmyk/cs50-cve-2025-31324-analysis Create: 2026-10-12 09:53:20 +0000 UTC Push: 2026-10-12 09:58:24 +0000 UTC |

0xad3m/CVE-2026-13078-POC Create: 2026-10-12 09:42:44 +0000 UTC Push: 2026-10-12 09:42:50 +0000 UTC |

thewhatdohe/CVE-2026-107692 Create: 2026-10-12 08:28:00 +0000 UTC Push: 2026-10-14 08:57:48 +0000 UTC |

honghyewon29/CVE-2026-66066 kinda-rails2shell-lab Create: 2026-10-12 04:29:33 +0000 UTC Push: 2026-10-12 04:29:34 +0000 UTC |

kayes817/CVE-2026-103889 Proof of concept and isolated Docker lab for CVE-2026-103889, an unauthenticated RCE vulnerability in Expivi 3D Product Configurator for WooCommerce ≤ 2.16.2. Create: 2026-10-12 02:43:06 +0000 UTC Push: 2026-10-12 02:43:08 +0000 UTC |

fromABUV/CVE-2026-9586_POC_EXPLOIT For new CVEs without existing/working/non-mangled POCs Create: 2026-10-12 02:17:17 +0000 UTC Push: 2026-10-12 03:04:57 +0000 UTC |

fl0ydsec/CVE-2026-91136 0DAY - CVE-2026-91136 Divi Plus <= 2.4.0 unauthenticated arbitrary file read (mass scanner + exploit) Create: 2026-10-12 01:46:17 +0000 UTC Push: 2026-10-12 01:46:23 +0000 UTC |

Riftweld/langflow-cve-2026-9198 Independent reconstruction, lab validation, and PoC for CVE-2026-9198, the Langflow unauthenticated RCE (fixed in 1.10.1) Create: 2026-10-12 01:38:04 +0000 UTC Push: 2026-10-12 01:38:10 +0000 UTC |

Riftweld/metabase-cve-2026-72898 Independent reconstruction, lab validation, and PoC for CVE-2026-72898 — Metabase unauthenticated SQLi (patched in 0.63.5) Create: 2026-10-12 00:18:03 +0000 UTC Push: 2026-10-12 00:18:09 +0000 UTC |

1xPwn/CVE-2026-102489 CVE-2026-102489 exploit in golang Create: 2026-10-11 20:50:52 +0000 UTC Push: 2026-10-11 20:50:53 +0000 UTC |

0x4cr/CVE-2026-15748 Unauthenticated RCE in WordPress Forminator Forms <= 1.56.1 (CVSS 9.8) Create: 2026-10-11 19:39:42 +0000 UTC Push: 2026-10-11 19:39:44 +0000 UTC |

0xREBYTE/CVE-2026-104286-PoC A simple python script PoC for CVE-2026-104286 ( FortiMail PathTraversal Critical Vulnerability ) Create: 2026-10-11 18:26:02 +0000 UTC Push: 2026-10-11 18:26:03 +0000 UTC |

Dungsocool/CVE-2026-105306 CVE-2026-105306: Token Introspection Audience Bypass via Dynamic Client Registration in Keycloak - Writeup by DungSoCool Create: 2026-10-11 16:45:59 +0000 UTC Push: 2026-10-11 16:46:15 +0000 UTC |

Shisones/CVE-2026-27626 CVE-2026-27626 - OliveTin <3000.10.0 OS command injection via password-typed arguments, escalating to root when OliveTin runs as root. Create: 2026-10-11 11:29:08 +0000 UTC Push: 2026-10-11 11:29:10 +0000 UTC |

ctroy999/CVE-2026-107406 Create: 2026-10-11 09:11:11 +0000 UTC Push: 2026-10-11 09:11:13 +0000 UTC |