Nxploited/CVE-2026-15981 SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter Create: 2026-07-26 09:42:38 +0000 UTC Push: 2026-07-26 09:42:39 +0000 UTC |

Nxploited/CVE-2026-10818 WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering Create: 2026-07-26 09:29:00 +0000 UTC Push: 2026-07-26 09:29:01 +0000 UTC |

shinthink/CVE-2026-58480-Blocksy-Companion-Pro-RCE CVE-2026-58480 / CVE-2026-15158 — Unauthenticated RCE in Blocksy Companion Pro < 2.1.47 (300K+ installs). Pre-auth arbitrary file upload via double-extension bypass. Create: 2026-07-26 08:59:36 +0000 UTC Push: 2026-07-26 08:59:37 +0000 UTC |

shinthink/CVE-2026-58480 CVE-2026-58480 / CVE-2026-15158 — Unauthenticated RCE in Blocksy Companion Pro < 2.1.47 (300K+ installs). Pre-auth arbitrary file upload via double-extension bypass. Create: 2026-07-26 08:59:36 +0000 UTC Push: 2026-07-26 09:46:11 +0000 UTC |

s-vx/CVE-2026-24061 Create: 2026-07-25 20:05:11 +0000 UTC Push: 2026-07-25 20:05:12 +0000 UTC |

joaovicdev/EXPLOIT-CVE-2026-40901 Create: 2026-07-25 19:57:33 +0000 UTC Push: 2026-07-25 19:57:34 +0000 UTC |

UnusualGiraffe/WatchGuard-CVE-2025-9242-PoC-and-Mass-Scanner Unauthenticated RCE version-pinned proof of concept + for WatchGuard Fireware CVE-2025-9242. Create: 2026-07-25 18:20:30 +0000 UTC Push: 2026-07-25 18:20:30 +0000 UTC |

tc4dy/CVE-2026-54121-PoC-Exploit Create: 2026-07-25 18:01:04 +0000 UTC Push: 2026-07-25 18:01:05 +0000 UTC |

joaovicdev/CVE-2026-26216 Create: 2026-07-25 17:07:31 +0000 UTC Push: 2026-07-25 17:07:32 +0000 UTC |

joaovicdev/EXPLOIT-CVE-2026-26216 Create: 2026-07-25 17:07:31 +0000 UTC Push: 2026-07-25 17:08:50 +0000 UTC |

HORKimhab/CVE-2026-32194 CVE-2026-32194 - Draft or Todo Create: 2026-07-25 16:43:00 +0000 UTC Push: 2026-07-25 16:43:01 +0000 UTC |

1337Skid/CVE-2026-51564 Security Advisory for CVE-2026-51564 Create: 2026-07-25 16:22:21 +0000 UTC Push: 2026-07-25 16:22:23 +0000 UTC |

HORKimhab/CVE-2026-54121 CVE-2026-54121 - Draft Create: 2026-07-25 16:20:29 +0000 UTC Push: 2026-07-25 16:20:32 +0000 UTC |

1337Skid/CVE-2026-51565 Security Advisory for CVE-2026-51565 Create: 2026-07-25 16:16:22 +0000 UTC Push: 2026-07-25 16:16:24 +0000 UTC |

Debajyoti0-0/CVE-2026-60206 Create: 2026-07-25 15:13:41 +0000 UTC Push: 2026-07-25 15:13:42 +0000 UTC |

HORKimhab/CVE-2026-16723 CVE-2026-16723 - Draft Create: 2026-07-25 14:53:15 +0000 UTC Push: 2026-07-25 14:53:18 +0000 UTC |

imXur/CVE-2026-48908-Joomla-SP-Page-Builder-RCE Technical analysis and advisory for CVE-2026-48908: Unauthenticated Arbitrary File Upload to RCE in JoomShaper SP Page Builder. Create: 2026-07-25 12:53:41 +0000 UTC Push: 2026-07-25 12:54:02 +0000 UTC |

imXur/WordPress-CVE-2026-63030-Analysis Technical analysis, root cause breakdown, and non-destructive detection methodology for CVE-2026-63030. Create: 2026-07-25 12:29:46 +0000 UTC Push: 2026-07-25 12:29:47 +0000 UTC |

liyuxuan504-byte/CVE-2026-14266 7-Zip XZ Decoder Heap Buffer Overflow - Full analysis, root cause, PoC, and RCE exploitation roadmap Create: 2026-07-25 12:13:30 +0000 UTC Push: 2026-07-25 12:13:31 +0000 UTC |

0xBlackash/CVE-2026-54121 CVE-2026-54121 Create: 2026-07-25 11:50:21 +0000 UTC Push: 2026-07-25 11:50:22 +0000 UTC |