0xBlackash/CVE-2026-73570 CVE-2026-73570 Create: 2026-09-30 21:13:26 +0000 UTC Push: 2026-09-30 21:13:28 +0000 UTC |

sl4x0/autheo-cve-2026-91159-poc Security PoC payload host for CVE-2026-91159 oEmbed test (authorized bug bounty) Create: 2026-09-30 20:12:13 +0000 UTC Push: 2026-09-30 20:12:14 +0000 UTC |

ShadowForge-Cyber/CVE-2026-76504-Proof-of-concept EUVD-2026-89950 Improper Handling of URL Encoding (Hex Encoding) (CWE-177) Create: 2026-09-30 19:40:15 +0000 UTC Push: 2026-09-30 19:40:17 +0000 UTC |

danielw98/linux-kernel-cve-triage-2026 Supplementary data: the 82-identifier 2026 CVE triage behind the ISETC 2026 paper on human and AI roles in Linux kernel vulnerability discovery Create: 2026-09-30 19:14:51 +0000 UTC Push: 2026-09-30 19:14:54 +0000 UTC |

BomboBombone/CVE-2026-103446 Sanitized report summary and local PoC for CVE-2026-103446 Create: 2026-09-30 18:34:26 +0000 UTC Push: 2026-09-30 18:34:30 +0000 UTC |

BomboBombone/CVE-2026-103445 Sanitized report summary and local PoC for CVE-2026-103445 Create: 2026-09-30 18:34:20 +0000 UTC Push: 2026-09-30 18:34:24 +0000 UTC |

BomboBombone/CVE-2026-103442 Sanitized report summary and local PoC for CVE-2026-103442 Create: 2026-09-30 18:34:13 +0000 UTC Push: 2026-09-30 18:34:18 +0000 UTC |

BomboBombone/CVE-2026-103441 Sanitized report summary and local PoC for CVE-2026-103441 Create: 2026-09-30 18:34:08 +0000 UTC Push: 2026-09-30 18:34:12 +0000 UTC |

BomboBombone/CVE-2026-103440 Sanitized report summary and local PoC for CVE-2026-103440 Create: 2026-09-30 18:34:02 +0000 UTC Push: 2026-09-30 18:34:06 +0000 UTC |

BomboBombone/CVE-2026-103437 Sanitized report summary and local PoC for CVE-2026-103437 Create: 2026-09-30 18:33:57 +0000 UTC Push: 2026-09-30 18:34:00 +0000 UTC |

MRdark-ops/CVE-2026-12227 CVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE). Create: 2026-09-30 18:20:31 +0000 UTC Push: 2026-09-30 18:20:32 +0000 UTC |

murrez/CVE-2026-102427 CVE-2026-102427 is an unauthenticated remote code execution flaw in OrdaSoft Joomla Content Construction Kit (OS CCK) — Joomla component com_os_cck. Create: 2026-09-30 18:12:26 +0000 UTC Push: 2026-09-30 18:12:28 +0000 UTC |

vulnace/CVE-2025-29927 POC for react2shell Create: 2026-09-30 18:05:58 +0000 UTC Push: 2026-09-30 18:05:59 +0000 UTC |

murrez/CVE-2026-76570 CVE-2026-76570 PoC (PoCbit) — Joomla JCTables (com_jctables) <1.21.1: unauth SQL read/write via front-end JSON API getdatarow/getrow (CVSS 4.0 10.0 AT:N). check + exploit + mass. https://www.cve.org/CVERecord?id=CVE-2026-76570 Create: 2026-09-30 17:20:47 +0000 UTC Push: 2026-09-30 17:20:49 +0000 UTC |

Amoru-Bek/CVE-2025-59528-Poc Create: 2026-09-30 16:46:38 +0000 UTC Push: 2026-09-30 16:46:39 +0000 UTC |

Pitchouneee/CVE-2026-18963 Create: 2026-09-30 16:19:25 +0000 UTC Push: 2026-09-30 16:19:26 +0000 UTC |

MRdark-ops/CVE-2026-94545- Next.js next/og unauthenticated RCE (CVE-2026-94545) - PoC Create: 2026-09-30 15:12:57 +0000 UTC Push: 2026-09-30 15:12:58 +0000 UTC |

BomboBombone/CVE-2026-102975 Sanitized report and local PoC for CVE-2026-102975 Create: 2026-09-30 14:25:17 +0000 UTC Push: 2026-09-30 14:25:23 +0000 UTC |

BomboBombone/CVE-2026-102973 Sanitized report and local PoC for CVE-2026-102973 Create: 2026-09-30 14:25:11 +0000 UTC Push: 2026-09-30 14:25:16 +0000 UTC |

BomboBombone/CVE-2026-102971 Sanitized report and local PoC for CVE-2026-102971 Create: 2026-09-30 14:25:05 +0000 UTC Push: 2026-09-30 14:25:10 +0000 UTC |