HarshRajSinghania/cve-2026-86547-mrubyc-op-enter Standalone proof of concept for CVE-2026-86547, a NULL pointer dereference in mrubyc op_enter() through 4.0.0. Create: 2026-09-12 06:16:43 +0000 UTC Push: 2026-09-12 06:17:01 +0000 UTC |

woaphone/CVE-2021-28664-PoC A POC of CVE-2021-28664 Create: 2026-09-12 02:53:33 +0000 UTC Push: 2026-09-12 02:53:34 +0000 UTC |

hacbs-release-tests/collectors-no-cve-3dcc20d3 Create: 2026-09-12 01:21:22 +0000 UTC Push: 2026-09-12 01:21:26 +0000 UTC |

MataKucing-OFC/CVE-2026-49049 Create: 2026-09-12 00:39:46 +0000 UTC Push: 2026-09-12 00:39:47 +0000 UTC |

ZeroDayEvil/CVE-2026-21858-n8n-FullChain Create: 2026-09-12 00:03:07 +0000 UTC Push: 2026-09-12 00:03:50 +0000 UTC |

ZeroDayEvil/-CVE-2026-54121- Create: 2026-09-11 23:08:16 +0000 UTC Push: 2026-09-11 23:08:18 +0000 UTC |

ZeroDayEvil/CVE-2026-54121-Certighost Create: 2026-09-11 23:08:16 +0000 UTC Push: 2026-09-11 23:09:35 +0000 UTC |

Faceless0x7/CVE-2026-89013 CVE-2026-89013 Exploit — Authorization bypass in Dolibarr via the hashp parameter, enabling unauthenticated access to protected documents and files. Create: 2026-09-11 22:06:47 +0000 UTC Push: 2026-09-11 22:06:48 +0000 UTC |

Faceless0x7/CVE-2026-89012 CVE-2026-89012 Exploit — SQL filter denylist bypass in Dolibarr via case-insensitive SQL column resolution and case-sensitive denylist matching. Create: 2026-09-11 22:03:51 +0000 UTC Push: 2026-09-11 22:03:52 +0000 UTC |

SyntaxMethod/CVE-2026-42978-PoC-Research CVE-2026-42978 Windows Push Notifications (WpnService) Use-After-Free & Race Condition PoC research, diagnostic scanner, and security audit module for AI Security Tool. Create: 2026-09-11 19:58:55 +0000 UTC Push: 2026-09-11 19:58:56 +0000 UTC |

abraxas/CVE-2025-38502-Linux-LPE CVE-2025-38502 Linux LPE. BPF cgroup local storage OOB via tail calls. Affected kernels: 5.9–5.15.191, 5.16–6.1.150, 6.2–6.6.104, 6.7–6.12.45, 6.13–6.16.0; fixed in 5.15.192, 6.1.151, 6.6.105, 6.12.46, 6.16.1, 6.17-rc1 Create: 2026-09-11 18:56:40 +0000 UTC Push: 2026-09-11 18:56:41 +0000 UTC |

cflowsec/CVE-2026-14962 Wordpress Plugin ELEX WooCommerce Request a Quote unauthenticated SQL injection Create: 2026-09-11 18:47:35 +0000 UTC Push: 2026-09-11 18:47:36 +0000 UTC |

julichaan/CVE-2026-39987_POC Marimo WS Preauth RCE Create: 2026-09-11 18:29:42 +0000 UTC Push: 2026-09-11 18:29:43 +0000 UTC |

julichaan/cve-2026-39987-poc Create: 2026-09-11 18:25:36 +0000 UTC Push: 2026-09-11 18:25:40 +0000 UTC |

MGTx2/CVE-2026-79294 CVE-2026-79294 — Stored XSS in Moonshot AI Kimi's HTML artifact Preview, delivered through the public Share view, leading to session token exfiltration and demonstrated account takeover. Responsible disclosure advisory. Create: 2026-09-11 17:25:01 +0000 UTC Push: 2026-09-11 17:25:02 +0000 UTC |

hui191/cve-2026-43499-aak-an00 Honor WIN RT (AAK-AN00) CVE-2026-43499 temporary root - research notes Create: 2026-09-11 17:00:20 +0000 UTC Push: 2026-09-11 17:00:20 +0000 UTC |

lmx-071028/cve-2024-30350-research-notes Research notes for CVE-2024-30350 Create: 2026-09-11 16:44:16 +0000 UTC Push: 2026-09-11 16:44:21 +0000 UTC |

mhtsec/CVE-2026-85706 GitLab CE/EE unauthenticated arbitrary file read (CVE-2026-85706) - PoC Create: 2026-09-11 16:18:11 +0000 UTC Push: 2026-09-11 16:18:18 +0000 UTC |

hotplugin0x01/CVE-2026-85612 Create: 2026-09-11 16:17:07 +0000 UTC Push: 2026-09-11 16:17:09 +0000 UTC |

solivaquaant/CVE-2026-85706-PoC PoC for CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local file read Create: 2026-09-11 15:58:53 +0000 UTC Push: 2026-09-11 19:47:18 +0000 UTC |