d6fault/CVE-2026-95675 CVE-2026-95675 · POC Create: 2026-09-23 22:47:04 +0000 UTC Push: 2026-09-23 22:57:55 +0000 UTC |

nextco/wordpress-cve-2026-87902 Useless POC conditional for Wordpress Create: 2026-09-23 22:17:51 +0000 UTC Push: 2026-09-23 22:17:52 +0000 UTC |

Lutfifakee-Project/CVE-2026-87902 CVE-2026-87902 Create: 2026-09-23 21:06:20 +0000 UTC Push: 2026-09-23 21:06:21 +0000 UTC |

JdExploit/aapanel-cve-2026 Create: 2026-09-23 19:54:04 +0000 UTC Push: 2026-09-23 19:54:05 +0000 UTC |

tc4dy/CVE-2026-87902-Toolkit CVE-2026-87902 [</>] – WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red/Blue Team suite for WordPress 4.7–7.1.1. 🛠️ 2 tools: Full Exploit (LFI, PEAR RCE, admin create, webshell, reverse shell, loot, mass scan, stealth) & SafeChecker (version detect, risk audit, JSON report). 🔨 Use Ethically & Authorized Enviorement, Stay Legal <3 Create: 2026-09-23 19:21:48 +0000 UTC Push: 2026-09-23 19:22:13 +0000 UTC |

1833ravikumar-max/CVE-2021-41773-Apache-Path-Traversal-Lab Docker-based cybersecurity lab for studying and reproducing CVE-2021-41773 in an isolated environment. Create: 2026-09-23 19:14:38 +0000 UTC Push: 2026-09-23 19:14:39 +0000 UTC |

1833ravikumar-max/Apache-CVE-2021-41773-Docker-Lab Docker-based cybersecurity lab for studying Apache CVE-2021-41773, developed during my internship at ITSOLERA PVT LTD. Create: 2026-09-23 18:46:37 +0000 UTC Push: 2026-09-23 18:47:36 +0000 UTC |

1833ravikumar-max/apache-cve-2021-41773-security-lab Docker-based educational security lab for studying Apache HTTP Server CVE-2021-41773. Create: 2026-09-23 18:41:33 +0000 UTC Push: 2026-09-23 18:41:34 +0000 UTC |

oliveiralimajr/CVE_2026_87902 Exploit pycve_2026_87902_scanner.py /tmp/local.txt --console Create: 2026-09-23 18:19:24 +0000 UTC Push: 2026-09-23 18:20:03 +0000 UTC |

BardLaudian/CVE-2024-37054 Create: 2026-09-23 17:05:04 +0000 UTC Push: 2026-09-23 17:05:05 +0000 UTC |

Hassham1/CVE-2026-89274-wp-recipe-maker-poc CVE-2026-89274 — WP Recipe Maker <= 10.8.1 arbitrary shortcode execution via rating-comment reviewBody (CVSS 9.1): Docker validation lab with vulnerable (10.8.1) vs patched (10.8.2) controls, Python PoC proving server-side shortcode execution in recipe JSON-LD, nuclei version screen. Authorized security research only. Create: 2026-09-23 16:18:56 +0000 UTC Push: 2026-09-23 16:19:39 +0000 UTC |

egorrsp/CVE-2020-15368-AsrDrv103-research Reverse engineering research of ASRock AsrDrv103.sys (CVE-2020-15368), covering its driver interface, encrypted request protocol, and privileged hardware access primitives. Create: 2026-09-23 16:14:39 +0000 UTC Push: 2026-09-23 16:14:41 +0000 UTC |

SaiTeja-Erukude/CVE-2026-93349-frictionless-command-injection- Frictionless <= 5.20.0rc1 OS command injection via CLI explore. Create: 2026-09-23 16:07:06 +0000 UTC Push: 2026-09-23 16:07:08 +0000 UTC |

SaiTeja-Erukude/CVE-2026-93349-frictionless-command-injection Frictionless <= 5.20.0rc1 OS command injection via CLI explore. Create: 2026-09-23 16:07:06 +0000 UTC Push: 2026-09-23 16:10:46 +0000 UTC |

bhideki/CVE-2026-87902 CVE-2026-87902: PoC for WordPress's critical path traversal Create: 2026-09-23 15:43:38 +0000 UTC Push: 2026-09-23 15:43:39 +0000 UTC |

Hassham1/CVE-2026-94545-nextjs-og-poc CVE-2026-94545 / GHSA-vcvr-r3jv-pc5j — Next.js next/og ImageResponse SVG injection (Satori, GHSA-wx4j-mvgx-mqwp): isolated Docker validation lab with vulnerable (16.3.5) vs patched (16.3.6) controls, non-destructive Python scanner with pixel-level PNG evidence, and root-cause analysis of the upstream Satori fix. Authorized security research only. Create: 2026-09-23 14:51:59 +0000 UTC Push: 2026-09-23 14:52:38 +0000 UTC |

Polosss/By-Poloss..-..CVE-2026-19125 Unauthenticated Authentication Bypass Create: 2026-09-23 14:25:07 +0000 UTC Push: 2026-09-23 14:25:09 +0000 UTC |

super-meuw/CVE-2026-86218 CVE-2026-86218 Create: 2026-09-23 12:32:48 +0000 UTC Push: 2026-09-23 12:32:49 +0000 UTC |

rankthree/SOC-Detection-T1003.001-CVE-2021-40444 Create: 2026-09-23 12:30:01 +0000 UTC Push: 2026-09-23 12:30:02 +0000 UTC |

Hassham1/CVE-2026-87902 WordPress Core <= 7.1.1 unauthenticated LFI to RCE - validation lab, PoC, nuclei template (GHSA-7hp8-65ch-5whp) Create: 2026-09-23 11:54:00 +0000 UTC Push: 2026-09-23 11:54:01 +0000 UTC |