dinosn/CVE-2026-10053-lab Reproducible lab for CVE-2026-10053 (GitLab npm package-registry path traversal -> arbitrary file write as git). Vulnerable 19.2.1 vs patched 19.2.2, deterministic oracle. Create: 2026-08-23 15:32:22 +0000 UTC Push: 2026-08-23 15:32:25 +0000 UTC |

toanln-cov/CVE-2026-66917 IDOR + Stored XSS via Broken Object-Level Authorization in JoomGallery Create: 2026-08-23 15:18:06 +0000 UTC Push: 2026-08-23 15:18:07 +0000 UTC |

toanln-cov/CVE-2026-66916 Password-Protected Category Bypass via JSON Format in JoomGallery Create: 2026-08-23 15:11:16 +0000 UTC Push: 2026-08-23 15:11:16 +0000 UTC |

h00die/poc_cve_2026_19681 Create: 2026-08-23 13:12:28 +0000 UTC Push: 2026-08-23 13:12:29 +0000 UTC |

barun121/CVE-2024-9264-in-Grafana-11.x Vulnerability Exploitation using tools Penetration Testing, Grafana, Docker, Kali Linux. Create: 2026-08-23 11:26:48 +0000 UTC Push: 2026-08-23 11:26:49 +0000 UTC |

XiaoBaiLovesStirring/cve-2026-0013-poc CVE-2026-0013 Android EoP PoC - Compiled artifacts for security research (Derivative of inforcqb/cve-2026-0013-exploit) Create: 2026-08-23 07:01:16 +0000 UTC Push: 2026-08-23 07:01:17 +0000 UTC |

XiaoBaiLovesStirring/cve-2026-0013 CVE-2026-0013 Android EoP PoC - Compiled artifacts for security research Create: 2026-08-23 06:57:37 +0000 UTC Push: 2026-08-23 06:57:39 +0000 UTC |

xx2901318208/ghostlock-cve-2026-64560 CVE-2026-64560 posix-cpu-timers UAF exploit for Vivo devices Create: 2026-08-23 06:36:24 +0000 UTC Push: 2026-08-23 06:36:25 +0000 UTC |

Legendile7/CVE-2026-78122-POC Create: 2026-08-23 01:55:44 +0000 UTC Push: 2026-08-23 01:55:48 +0000 UTC |

capivara-research/WordPress-Path-Traversal-CVE-2019-11447 CPTS HackTheBox - Penetration Test Report: WordPress Path Traversal CVE-2019-11447 Create: 2026-08-22 21:24:06 +0000 UTC Push: 2026-08-22 21:24:09 +0000 UTC |

totekuh/CVE-2026-75616 PoC for CVE-2026-75616, an authenticated OS command injection in TP-Link Archer C20 v6 firmware Create: 2026-08-22 20:53:05 +0000 UTC Push: 2026-08-22 20:53:50 +0000 UTC |

WildanDeveloper/CVE-2026-58231 Detection & precondition-verification tool for CVE-2026-58231 (SAP Commerce Cloud Data Hub Adapter) Create: 2026-08-22 20:12:25 +0000 UTC Push: 2026-08-22 20:12:40 +0000 UTC |

s1ko/CVE-2026-52618 CVE-2026-52618 — @webfer/mcp-ansible-drupal: OS command injection via executeDeployment extra vars (fixed in 2.0.3) Create: 2026-08-22 19:47:36 +0000 UTC Push: 2026-08-22 19:47:40 +0000 UTC |

s1ko/CVE-2026-52617 CVE-2026-52617 — @sworddut/mcp-ffmpeg-helper: OS command injection via ffmpeg tool options (no fixed version) Create: 2026-08-22 19:47:32 +0000 UTC Push: 2026-08-22 19:47:35 +0000 UTC |

s1ko/CVE-2026-52616 CVE-2026-52616 — mcp-nmap-server: OS command injection via run_nmap_scan (duplicate of CVE-2026-3484) Create: 2026-08-22 19:47:25 +0000 UTC Push: 2026-08-22 19:47:28 +0000 UTC |

s1ko/CVE-2026-47630 CVE-2026-47630 — NVIDIA Triton Inference Server: arbitrary dlopen via TRITON_BATCH_STRATEGY_PATH Create: 2026-08-22 19:35:36 +0000 UTC Push: 2026-08-22 19:35:40 +0000 UTC |

basitsajidapply-stack/SOC-Investigation-CVE-2024-49138 Investigation and Incident Response report for LetsDefend Alert SOC335 (CVE-2024-49138 Exploitation) Create: 2026-08-22 18:10:41 +0000 UTC Push: 2026-08-22 18:10:42 +0000 UTC |

shawnng078-ops/CVE-2024-28000-Exploit-Lab Hands-on reproduction of CVE-2024-28000 in LiteSpeed Cache using an isolated WordPress lab. Includes reconnaissance, vulnerable hash recovery, Administrator privilege escalation proof, cleanup, and remediation-focused documentation. Create: 2026-08-22 18:08:46 +0000 UTC Push: 2026-08-22 18:08:47 +0000 UTC |

MinhHK68/CVE-2026-13736 Create: 2026-08-22 17:54:24 +0000 UTC Push: 2026-08-22 17:54:25 +0000 UTC |

ejajmahmud/dependency-vulnerability-remediation-bot-fastapi-cve-remediation-agent-v2026-b58 Automated Zero-Day Dependency Vulnerability Remediation Agent enterprise system built with Python 3.12 / FastAPI & Haystack Zero-Day CVE Remediation Agent (Source: Apache Software Foundation (apache.org/fastapi-cve-remediation)) Create: 2026-08-22 17:09:35 +0000 UTC Push: 2026-08-22 17:09:39 +0000 UTC |