izaan-sh/CVE-2024-38063-Exploitation-Detection-Mitigation-Lab Create: 2026-09-29 11:42:18 +0000 UTC Push: 2026-09-29 11:42:35 +0000 UTC |

josemour8/CVE-2025-62023 s2Member (WordPress) Unauth RCE via SP Tracking Codes eval() + BONUS: incomplete-fix bypass — IPN notify vector still open in 251005..2512xx (fixed only in 260101, strip_php_tags_deep added to notify handler //251226). Create: 2026-09-29 10:19:25 +0000 UTC Push: 2026-09-29 10:19:27 +0000 UTC |

shubhampathak65/CVE-2026-43499 GhostLock futex-PI UAF LPE exploit for POCO M7 5G - kernel 5.10.226 Create: 2026-09-29 09:53:13 +0000 UTC Push: 2026-09-29 09:53:20 +0000 UTC |

zlaoz/CVE-2026-88772-poc Create: 2026-09-29 09:49:26 +0000 UTC Push: 2026-09-29 09:49:27 +0000 UTC |

roof1948576qwd/CVE-2025-8088-WinRAR-PoC-3 Create: 2026-09-29 09:46:25 +0000 UTC Push: 2026-09-29 09:46:26 +0000 UTC |

roof1948576qwd/CVE-2025-8088-WinRAR-PoC-2 Create: 2026-09-29 09:45:40 +0000 UTC Push: 2026-09-29 09:46:01 +0000 UTC |

roof1948576qwd/CVE-2025-8088-WinRAR-PoC-1 Create: 2026-09-29 09:43:19 +0000 UTC Push: 2026-09-29 09:43:20 +0000 UTC |

tonydelouvre/CVE-2026-82901 CVE-2026-82901 — Ultra Addons for Contact Form 7 Mass Exploiter (GUI + CLI) Create: 2026-09-29 09:05:24 +0000 UTC Push: 2026-09-29 09:05:33 +0000 UTC |

benchaabenameny-sys/icrami2026-cve-cwe-pilot Replication package for the ICRAMI 2026 paper on zero-shot and few-shot LLM CVE-to-CWE classification Create: 2026-09-29 08:46:02 +0000 UTC Push: 2026-09-29 08:46:03 +0000 UTC |

EQSTLab/CVE-2026-94545 Next.js RCE Create: 2026-09-29 07:57:18 +0000 UTC Push: 2026-09-29 07:57:19 +0000 UTC |

EQSTLab/CVE-2026-49869 Create: 2026-09-29 05:24:33 +0000 UTC Push: 2026-09-29 05:24:35 +0000 UTC |

HORKimhab/CVE-2026-10817 CVE-2026-10817 Create: 2026-09-29 04:19:33 +0000 UTC Push: 2026-09-29 04:19:38 +0000 UTC |

vpxuser/CVE-2026-59310 Create: 2026-09-29 01:54:33 +0000 UTC Push: 2026-09-29 01:55:28 +0000 UTC |

dpfkdlemtp/CVE-2021-43718 Published Epson EH-TW5350 CVE · Web Control authentication bypass · B-BEAM-BOB team Create: 2026-09-29 00:53:13 +0000 UTC Push: 2026-09-29 00:53:14 +0000 UTC |

dpfkdlemtp/CVE-2021-43717 Published Epson EH-TW5350 CVE · Hard-coded credentials · B-BEAM-BOB team Create: 2026-09-29 00:53:01 +0000 UTC Push: 2026-09-29 00:53:02 +0000 UTC |

dpfkdlemtp/CVE-2021-43716 Published Epson EH-TW5350 CVE · Firmware update verification bypass · B-BEAM-BOB team Create: 2026-09-29 00:52:47 +0000 UTC Push: 2026-09-29 00:52:48 +0000 UTC |

dpfkdlemtp/CVE-2026-100633 Published SiYuan CVE · Reporter: dpfkdlemtp · Official record and advisory links Create: 2026-09-29 00:51:55 +0000 UTC Push: 2026-09-29 00:51:56 +0000 UTC |

murrez/CVE-2026-101894 CVE-2026-101894 PoC: @xhmikosr/decompress symlink-chain archive path traversal (bypass CVE-2026-53486). Node lab + lockfile scan + mass evil.tar upload exploit. CVSS 9.1. https://pocbit.org/pocs/cve-2026-101894 Create: 2026-09-29 00:49:49 +0000 UTC Push: 2026-09-29 00:50:29 +0000 UTC |

murrez/CVE-2026-101110 CVE-2026-101110 PoC: OrdaSoft Joomla Book Library (Free) <=6.4.6 unauth SQLi — field/direction ORDER BY, session prime + `-- xselect` blacklist bypass (com_booklibrary). Colored check + mass exploit, CVSS 9.3. https://pocbit.org/pocs/cve-2026-101110 Create: 2026-09-29 00:34:11 +0000 UTC Push: 2026-09-29 00:34:13 +0000 UTC |

murrez/CVE-2026-101108 CVE-2026-101108 PoC: OrdaSoft Joomla Vehicle Manager (Free) <=6.5.7 unauth SQLi — order_field/order_direction unquoted ORDER BY (com_vehiclemanager). Colored check + mass exploit, CVSS 9.3. https://pocbit.org/pocs/cve-2026-101108 Create: 2026-09-29 00:23:07 +0000 UTC Push: 2026-09-29 00:23:28 +0000 UTC |