C3viche/cve-2026-18649 GStreamer RTP Depayloader Memory Exhaustion Analysis Create: 2026-10-31 19:37:00 +0000 UTC Push: 2026-10-31 19:38:30 +0000 UTC |

Lyutoon/CVE-2026-112487 macOS revisiond local privilege escalation to root (CVE-2026-112487) Create: 2026-10-31 18:04:33 +0000 UTC Push: 2026-10-31 18:11:35 +0000 UTC |

capivara-research/CVE-2026-120218 CVE-2026-120218: bilingual TypeMill stored XSS analysis and safe SVG/XSLT PoC Create: 2026-10-31 17:45:25 +0000 UTC Push: 2026-10-31 17:58:29 +0000 UTC |

saretawa/CVE-2026-77396 Create: 2026-10-31 17:10:20 +0000 UTC Push: 2026-10-31 17:10:26 +0000 UTC |

woshigenm/CVE-2026-89633 Create: 2026-10-31 17:03:47 +0000 UTC Push: 2026-10-31 17:35:01 +0000 UTC |

Sotrano-dev/cve-2026-112816 Create: 2026-10-31 16:26:55 +0000 UTC Push: 2026-10-31 16:27:00 +0000 UTC |

dehasoft-tr/cve-2026-112816 Create: 2026-10-31 16:18:52 +0000 UTC Push: 2026-10-31 16:33:15 +0000 UTC |

googlesky/CVE-2026-98432 PoC for CVE-2026-98432 (Linux kernel IPv4 TCP inet_opt/ireq_opt use-after-free, CVSS 9.8): KASAN-verified UAF reproduction in inet_csk_route_req with A/B fixed-kernel control Create: 2026-10-31 16:04:50 +0000 UTC Push: 2026-10-31 16:10:31 +0000 UTC |

AronWang001/debian-cve-2026-98432-fix One-click kernel security update for CVE-2026-98432 on Debian 12/13. Create: 2026-10-31 15:41:12 +0000 UTC Push: 2026-10-31 19:28:36 +0000 UTC |

AronWang001/linux-cve-2026-98432-fix Detect CVE-2026-98432 on the running Linux kernel and apply the official fixed kernel only on verified distributions (Debian 12/13, Amazon Linux 2/2023). Ubuntu/RHEL detect-only; Rocky/Alma/Oracle/Fedora/SUSE/Arch/Alpine identified but not auto-fixed. Create: 2026-10-31 15:41:12 +0000 UTC Push: 2026-10-31 19:28:36 +0000 UTC |

noxcrypt-x/CVE-2026-103039 CVE-2026-103039: Gravity Forms <= 3.1.2 PHP object injection to RCE. PoC by NOXCRYPT (noxcrypt-x). gen_payload.php is not included. Create: 2026-10-31 15:33:32 +0000 UTC Push: 2026-10-31 15:33:52 +0000 UTC |

googlesky/CVE-2026-111585 CVE-2026-111585 — TeamViewer Remote-Control Screen Decompression Integer Overflow → Heap Buffer Overflow (PoC, fixed in 15.83, CVSS 8.8). Containerized lab + one-command repro with vulnerable/fixed differential evidence. Create: 2026-10-31 14:36:35 +0000 UTC Push: 2026-10-31 14:36:37 +0000 UTC |

yora1928/cve-2020-5902 by yora cve-2020-5902 Create: 2026-10-31 14:31:20 +0000 UTC Push: 2026-10-31 14:31:22 +0000 UTC |

refiaa/CVE-2026-121720 PoC for an OpenVPN Windows Interactive Service privilege-boundary bypass that lets a user-selected OpenSSL provider perform privileged route operations through an inherited service channel. Create: 2026-10-31 14:31:10 +0000 UTC Push: 2026-11-06 00:48:36 +0000 UTC |

antonyantony/cve-2026-98432-nft Create: 2026-10-31 13:14:39 +0000 UTC Push: 2026-10-31 13:14:41 +0000 UTC |

helloklf/CVE-2026-98260-SHELL 一个演示示例，使用CVE-2026-98260提权，以ROOT身份执行脚本 Create: 2026-10-31 12:54:14 +0000 UTC Push: 2026-10-31 12:54:15 +0000 UTC |

exumeOAO/plr110-6.12.38-cve-2026-64560-ksu Use cve-2026-64560 to root OneOlus ACE 6T Create: 2026-10-31 12:53:08 +0000 UTC Push: 2026-10-31 12:53:09 +0000 UTC |

d4ytox/CVE-2021-3156 Create: 2026-10-31 11:27:42 +0000 UTC Push: 2026-10-31 11:27:43 +0000 UTC |

sevaepsteyn/cve-2026-98432-ebpf eBPF (XDP/tc) mitigation for CVE-2026-98432 / RHSB-2026-016 - untested draft Create: 2026-10-31 11:25:56 +0000 UTC Push: 2026-10-31 11:52:25 +0000 UTC |

sys65535/CVE-2026-89020-privesc-research Independent RouterOS mtget mipsbe privesc research and non-functional demonstration Create: 2026-10-31 11:18:40 +0000 UTC Push: 2026-10-31 11:18:41 +0000 UTC |