EXEcution-py/CVE-2026-88771-POC Improper Input Validation (CWE-20) SSVC Scores Exploitation: Active Technical Impact: Total Create: 2026-09-28 09:16:23 +0000 UTC Push: 2026-09-28 09:16:25 +0000 UTC |

Hasyros/CVE-2026-101162 Create: 2026-09-28 08:53:29 +0000 UTC Push: 2026-10-07 16:15:13 +0000 UTC |

Hasyros/CVE-2026-101162-xss-wp-ultimate-review Create: 2026-09-28 08:53:29 +0000 UTC Push: 2026-10-07 17:03:47 +0000 UTC |

Hasyros/CVE-2026-101161 Create: 2026-09-28 08:53:23 +0000 UTC Push: 2026-10-07 16:15:06 +0000 UTC |

Hasyros/CVE-2026-101161-dos-wp-ultimate-review-shortcode Create: 2026-09-28 08:53:23 +0000 UTC Push: 2026-10-07 17:03:39 +0000 UTC |

Hasyros/CVE-2026-101160 Create: 2026-09-28 08:53:17 +0000 UTC Push: 2026-10-07 16:14:59 +0000 UTC |

Hasyros/CVE-2026-101160-dos-wp-ultimate-review-rating Create: 2026-09-28 08:53:17 +0000 UTC Push: 2026-10-07 17:03:29 +0000 UTC |

JoakimBulow/CVE-2026-59795 CVE-2026-59795 - TeamCity - XSS Create: 2026-09-28 08:40:52 +0000 UTC Push: 2026-11-03 19:09:38 +0000 UTC |

EQSTLab/CVE-2026-6951 simple-git RCE Create: 2026-09-28 08:35:35 +0000 UTC Push: 2026-09-28 08:35:36 +0000 UTC |

murrez/CVE-2026-82384 CVE-2026-82384 PoC: Apache Roller 6.1.5 unauthenticated XML-RPC ex:serializable Java deserialization (pre-auth RCE). Check, ysoserial exploit, mass bulk scanning, colored CLI. PoCbit — https://pocbit.org/pocs/cve-2026-82384 Create: 2026-09-28 08:24:47 +0000 UTC Push: 2026-09-28 08:25:28 +0000 UTC |

4ybrick/CVE-2026-100903 GEOritm CVE Create: 2026-09-28 08:20:25 +0000 UTC Push: 2026-09-28 08:25:25 +0000 UTC |

murrez/CVE-2026-93958 CVE-2026-93958 PoC: D-Link R95 BE9500 DHMAPI SetTimeSettings NTPServer authenticated root command injection. DHMAPI login, RCE verify, mass bulk exploit mode, colored CLI. https://pocbit.org/pocs/cve-2026-93958 Create: 2026-09-28 08:13:41 +0000 UTC Push: 2026-09-28 08:14:05 +0000 UTC |

carsam2021/CVE-2026-88772 CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS, CVSS 9.5). Fingerprints Gateway, build vs 14.1-73.37 / 13.1-64.23, UDP/443 DTLS probe. CTX697096; active exploitation reported. https://pocbit.org/pocs/cve-2026-88772 Create: 2026-09-28 07:39:04 +0000 UTC Push: 2026-09-27 20:26:07 +0000 UTC |

EQSTLab/CVE-2026-85706 GitLab Unauthenticated Arbitrary File Read Create: 2026-09-28 04:47:10 +0000 UTC Push: 2026-09-28 04:47:11 +0000 UTC |

murrez/CVE-2026-85984 Create: 2026-09-28 04:25:20 +0000 UTC Push: 2026-09-28 04:25:21 +0000 UTC |

Noorkhalel/CVE-2026-34990-CUPS-LPE-PoC Create: 2026-09-28 03:21:43 +0000 UTC Push: 2026-09-28 03:22:13 +0000 UTC |

bara-almustafa/CVE-2026-34990-POC CVE-2026-34990 — CUPS <= 2.4.16 Local Privilege Escalation Create: 2026-09-28 02:40:44 +0000 UTC Push: 2026-09-28 02:40:45 +0000 UTC |

antid00t/CVE-2026-78006-CVE-2026-78159 CVE-2026-78006 + CVE-2026-78159 Mass Exploit Create: 2026-09-28 00:45:37 +0000 UTC Push: 2026-09-28 00:45:38 +0000 UTC |

Boreas37/CVE-2026-88008-PoC CVE-2026-88008 - Traefik (<=2.11.56 / <=3.7.12): a client-controlled h2c upgrade tunnels past routers and middleware (BasicAuth/ForwardAuth/IPAllowList), unauthorised access + no access logging. Stdlib-only Python PoC + real Jetty h2c lab, verified on v3.7.12 vs v3.7.13. Create: 2026-09-27 22:58:31 +0000 UTC Push: 2026-09-27 22:58:38 +0000 UTC |

gdfurr98/ply-cve-2025-56005-lab Lab demonstrating that CVE-2025-56005 is real and does allow arbitrary code execution at a minimum (the debate about RCE notwithstanding here), and shows that ply-safepickle does block the exploit path. Create: 2026-09-27 22:49:37 +0000 UTC Push: 2026-09-27 22:49:38 +0000 UTC |