MRdark-ops/CVE-2026-38526 CVE-2026-38526 - Authenticated RCE exploit for Krayin CRM <= 2.2.x. Upload arbitrary PHP via /admin/tinymce/upload and gain remote code execution. Python PoC for security researchers, CTF players and bug bounty hunters. Tested on HTB Nexus. Create: 2026-09-28 20:49:54 +0000 UTC Push: 2026-09-28 20:49:55 +0000 UTC |

do4choo/CVE-2026-5053 CVE-2026-5053 Create: 2026-09-28 19:38:13 +0000 UTC Push: 2026-09-28 19:38:23 +0000 UTC |

do4choo/CVE-2026-5054 CVE-2026-5054 Create: 2026-09-28 19:25:42 +0000 UTC Push: 2026-09-28 19:25:52 +0000 UTC |

ungabunga-ctf/CVE-2026-34990 CVE-2026-34990 - OpenPrinting CUPS versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token. Create: 2026-09-28 19:12:35 +0000 UTC Push: 2026-09-28 19:12:37 +0000 UTC |

ZeroDayEvil/CVE-2026-41651 Create: 2026-09-28 19:03:34 +0000 UTC Push: 2026-09-28 19:03:36 +0000 UTC |

ZeroDayEvil/CVE-2026-31431 Create: 2026-09-28 19:02:52 +0000 UTC Push: 2026-09-28 19:02:54 +0000 UTC |

ZeroDayEvil/CVE-2026-75604-PoC Create: 2026-09-28 19:01:45 +0000 UTC Push: 2026-09-28 19:01:50 +0000 UTC |

ZeroDayEvil/CVE-2026-20817 Create: 2026-09-28 19:01:20 +0000 UTC Push: 2026-09-28 19:01:22 +0000 UTC |

ZeroDayEvil/CVE-2026-40369-EXPLOIT Create: 2026-09-28 18:55:22 +0000 UTC Push: 2026-09-28 18:55:24 +0000 UTC |

ZeroDayEvil/CVE-2026-43499 Create: 2026-09-28 18:54:33 +0000 UTC Push: 2026-09-28 18:54:34 +0000 UTC |

ZeroDayEvil/cve-2026-41940-PoC. Create: 2026-09-28 18:52:52 +0000 UTC Push: 2026-09-28 18:52:54 +0000 UTC |

ZeroDayEvil/CVE-2026-41940-PoC Create: 2026-09-28 18:52:52 +0000 UTC Push: 2026-09-28 18:52:54 +0000 UTC |

ZeroDayEvil/CVE-2026-24061 Create: 2026-09-28 18:52:02 +0000 UTC Push: 2026-09-28 18:52:04 +0000 UTC |

ZeroDayEvil/CVE-2026-62911 Create: 2026-09-28 18:51:09 +0000 UTC Push: 2026-09-28 18:51:10 +0000 UTC |

ZeroDayEvil/CVE-2026-54121 Create: 2026-09-28 18:50:27 +0000 UTC Push: 2026-09-28 18:50:29 +0000 UTC |

rafaelsintmot/CVE201 Create: 2026-09-28 18:00:35 +0000 UTC Push: 2026-09-28 18:00:54 +0000 UTC |

HackfutSecRoot/CVE-2026-87902 Create: 2026-09-28 17:11:29 +0000 UTC Push: 2026-09-28 17:11:31 +0000 UTC |

EntroVyx/CVE-2026-69137 SuiteCRM <= 7.15.1, <= 8.10.1 - Authenticated SSRF Create: 2026-09-28 16:33:40 +0000 UTC Push: 2026-09-28 16:33:45 +0000 UTC |

hacbs-release-tests/collectors-no-cve-41eafc20 Create: 2026-09-28 16:15:46 +0000 UTC Push: 2026-09-28 16:15:51 +0000 UTC |

Harry178945/CVE-2026-38526 Create: 2026-09-28 14:58:35 +0000 UTC Push: 2026-09-28 15:03:57 +0000 UTC |