murrez/CVE-2026-107806 CVE-2026-107806 — nginx-ui 2.3.8–2.4.x auth RCE via forged backup restore (TestConfigCmd). PoCbit PoC: GET /api/backup, tamper app.ini, POST /api/restore, POST /api/nginx/test. check/exploit, batch url|JWT. Fixed 2.5.0. https://pocbit.org/pocs/cve-2026-107806 Create: 2026-10-10 08:17:07 +0000 UTC Push: 2026-10-10 08:17:31 +0000 UTC |

Wayang1337/CVE-2026-94503 Zombify <= 1.7.7 Unauthenticated Arbitrary File Upload Create: 2026-10-10 04:54:47 +0000 UTC Push: 2026-10-10 04:54:48 +0000 UTC |

Wayang1337/CVE-2026-85097 Bricksforge <= 3.1.8.9 Unauthenticated Arbitrary File Upload Create: 2026-10-10 04:51:32 +0000 UTC Push: 2026-10-10 04:51:55 +0000 UTC |

lewiskb/Docker-Lab-CVE-2024-4367 Docker lab to test proof of concepts for CVE-2024-4367. A high-severity type confusion and remote code execution flaw in Firefox PDF.js font handling due to missing type checks (affecting Firefox < 126, Firefox ESR < 115.11, and PDF.js < 4.2.67). Create: 2026-10-10 04:50:06 +0000 UTC Push: 2026-10-10 04:50:13 +0000 UTC |

kh20134/fortimail-cve-2026-104286-response FortiMail CVE-2026-104286 (CVSS 9.8) 점검·대응 도구 (버전 확인, IoC 점검, 완화·패치 체크리스트) Create: 2026-10-10 03:36:29 +0000 UTC Push: 2026-10-10 03:36:30 +0000 UTC |

KyrieKlay/CVE-2026-37107 Create: 2026-10-10 02:30:15 +0000 UTC Push: 2026-10-10 02:30:17 +0000 UTC |

SeanDishman/telegram-cve-2026-107181 Telegram CVE-2026-107181 Create: 2026-10-10 01:12:57 +0000 UTC Push: 2026-10-10 01:13:03 +0000 UTC |

csrXamfi/CVE-2026-84520 AppleFDEKeyStore poc Create: 2026-10-10 00:40:47 +0000 UTC Push: 2026-10-10 00:40:49 +0000 UTC |

gotr00t0day/CVE-2026-21589 Atlassian Arbitrary File Read Create: 2026-10-09 19:15:01 +0000 UTC Push: 2026-10-09 19:15:03 +0000 UTC |

AmalJafarzade/CVE-2026-104587 Create: 2026-10-09 15:46:39 +0000 UTC Push: 2026-10-09 15:46:58 +0000 UTC |

AmalJafarzade/CVE-2026-104586 Create: 2026-10-09 15:45:21 +0000 UTC Push: 2026-10-09 15:45:45 +0000 UTC |

AmalJafarzade/CVE-2026-104584 Create: 2026-10-09 15:44:39 +0000 UTC Push: 2026-10-09 15:44:53 +0000 UTC |

AmalJafarzade/CVE-2026-104585 Create: 2026-10-09 15:13:30 +0000 UTC Push: 2026-10-09 15:13:32 +0000 UTC |

Scyrix-LLC/CVE-2026-88776 Write-up for CVE-2026-88776 Create: 2026-10-09 14:44:09 +0000 UTC Push: 2026-10-09 14:44:28 +0000 UTC |

cppghoul/CVE-2025-34071 RCE in Kerio Control 9.4.5 via unsigned firmware update. Create: 2026-10-09 14:00:31 +0000 UTC Push: 2026-10-09 14:00:32 +0000 UTC |

Rem1L/cve-2026-24046-poc Create: 2026-10-09 12:44:25 +0000 UTC Push: 2026-10-09 12:44:29 +0000 UTC |

PawFV/CVE-2024-36774-Monstra-CMS-RCE-PoC Create: 2026-10-09 12:02:02 +0000 UTC Push: 2026-10-09 12:02:08 +0000 UTC |

Udyz/CVE-2026-28775 CVE-2026-28775 Create: 2026-10-09 11:10:39 +0000 UTC Push: 2026-10-09 11:10:41 +0000 UTC |

hoangvvthu/CVE-2021-44228-Log4Shell-Lab Create: 2026-10-09 09:02:16 +0000 UTC Push: 2026-10-09 09:02:17 +0000 UTC |

ApexBreach/CVE-2026-107406-Poc Create: 2026-10-09 08:34:38 +0000 UTC Push: 2026-10-09 08:34:40 +0000 UTC |