murrez/CVE-2026-92966 CVE-2026-92966 — WordPress LatePoint ≤5.7.0 unauthenticated stored shortcode execution (CVSS 9.1, CWE-94). PoCbit mass-exploit PoC: plant [caption]/custom shortcode in booking first name → Customer Cabinet block double do_shortcode; fixed in 5.7.1. No API key. check/exploit/mass, hits.txt & exploited.txt, https://pocbit.org/pocs/cve-2026-92966 Create: 2026-10-01 07:38:03 +0000 UTC Push: 2026-10-01 07:38:05 +0000 UTC |

Ez4rd1x1/CVE-2026-58138-Research critical-severity unauthenticated Remote Code Execution (RCE) vulnerability impacting Orkes Conductor Create: 2026-10-01 06:32:16 +0000 UTC Push: 2026-10-01 06:32:17 +0000 UTC |

Waynehck8/CVE-2025-8110-POC Create: 2026-10-01 05:56:11 +0000 UTC Push: 2026-10-01 05:56:12 +0000 UTC |

murrez/CVE-2026-96349 CVE-2026-96349 — WordPress SiteSkite plugin ≤2.1.8 unauthenticated RCE (CVSS 10.0, CWE-94). PoCbit mass-exploit PoC: legacy API-key autologin (?token=) + REST MCP siteskite_execute_php eval chain; fixed in 2.2.0. Check/exploit/mass bulk, hits.txt & exploited.txt, --lab self-test. Catalog: https://pocbit.org/pocs/cve-2026-96349 Create: 2026-10-01 04:23:00 +0000 UTC Push: 2026-10-01 04:23:38 +0000 UTC |

gotr00t0day/CVE-2024-55591 CVE-2024-55591 — FortiOS / FortiProxy Authentication Bypass Create: 2026-10-01 04:06:51 +0000 UTC Push: 2026-10-01 04:07:24 +0000 UTC |

HRi-H/cve-2026-64560 Remik80(zorn) cve 2026 64560 Create: 2026-10-01 03:09:38 +0000 UTC Push: 2026-10-01 03:09:39 +0000 UTC |

rimbadirgantara/CVE-2026-48500 Create: 2026-10-01 03:06:10 +0000 UTC Push: 2026-10-01 03:06:41 +0000 UTC |

BomboBombone/CVE-2026-103585 Sanitized report and local PoC for CVE-2026-103585 Create: 2026-10-01 01:06:58 +0000 UTC Push: 2026-10-01 01:07:02 +0000 UTC |

BomboBombone/CVE-2026-103584 Sanitized report and local PoC for CVE-2026-103584 Create: 2026-10-01 01:06:46 +0000 UTC Push: 2026-10-01 01:06:50 +0000 UTC |

Cr0wld3r/CVE-2026-11318 Local Privilege Escalation (LPE) Vulnerabilities in DeskIn macOS Client Create: 2026-10-01 01:05:23 +0000 UTC Push: 2026-10-01 01:05:24 +0000 UTC |

diyiqiuye/CVE-2025-21479-FX3 CVE-2025-21479 temp root for OPPO Find X3 (PEDM00) · 4.19.157-perf+ · KernelSU LKM · OPPO Find X3 临时 root Create: 2026-09-30 21:32:44 +0000 UTC Push: 2026-10-01 01:55:37 +0000 UTC |

0xBlackash/CVE-2026-73570 CVE-2026-73570 Create: 2026-09-30 21:13:26 +0000 UTC Push: 2026-09-30 21:13:28 +0000 UTC |

sl4x0/autheo-cve-2026-91159-poc Security PoC payload host for CVE-2026-91159 oEmbed test (authorized bug bounty) Create: 2026-09-30 20:12:13 +0000 UTC Push: 2026-09-30 20:12:14 +0000 UTC |

ShadowForge-Cyber/CVE-2026-76504-Proof-of-concept EUVD-2026-89950 Improper Handling of URL Encoding (Hex Encoding) (CWE-177) Create: 2026-09-30 19:40:15 +0000 UTC Push: 2026-09-30 19:40:17 +0000 UTC |

danielw98/linux-kernel-cve-triage-2026 Supplementary data: the 82-identifier 2026 CVE triage behind the ISETC 2026 paper on human and AI roles in Linux kernel vulnerability discovery Create: 2026-09-30 19:14:51 +0000 UTC Push: 2026-09-30 19:14:54 +0000 UTC |

BomboBombone/CVE-2026-103446 Sanitized report summary and local PoC for CVE-2026-103446 Create: 2026-09-30 18:34:26 +0000 UTC Push: 2026-09-30 18:34:30 +0000 UTC |

BomboBombone/CVE-2026-103445 Sanitized report summary and local PoC for CVE-2026-103445 Create: 2026-09-30 18:34:20 +0000 UTC Push: 2026-09-30 18:34:24 +0000 UTC |

BomboBombone/CVE-2026-103442 Sanitized report summary and local PoC for CVE-2026-103442 Create: 2026-09-30 18:34:13 +0000 UTC Push: 2026-09-30 18:34:18 +0000 UTC |

BomboBombone/CVE-2026-103441 Sanitized report summary and local PoC for CVE-2026-103441 Create: 2026-09-30 18:34:08 +0000 UTC Push: 2026-09-30 18:34:12 +0000 UTC |

BomboBombone/CVE-2026-103440 Sanitized report summary and local PoC for CVE-2026-103440 Create: 2026-09-30 18:34:02 +0000 UTC Push: 2026-09-30 18:34:06 +0000 UTC |