CerberusMrXi/JCEzploit-CVE-2026-48907 JCEzploit is a powerful, fully-automated RCE exploit for Joomla JCE (CVE-2026-48907) featuring interactive shell, batch command execution, file download capability, and proxy support. Built with Python & Rich for penetration testers. Ethical use only. By Sudeepa Wanigarathna. Create: 2026-08-21 17:33:06 +0000 UTC Push: 2026-08-21 17:33:07 +0000 UTC |

Boreas37/CVE-2026-58455-PoC PoC for CVE-2026-58455: Dockwatch <=0.6.567 unauthenticated RCE. Stdlib-only Python. Create: 2026-08-21 17:20:20 +0000 UTC Push: 2026-08-21 17:20:35 +0000 UTC |

toanln-cov/CVE-2026-76564 Stored XSS via User-Agent in Admin Order View in PhocaCart Create: 2026-08-21 17:13:04 +0000 UTC Push: 2026-08-21 17:13:22 +0000 UTC |

toanln-cov/CVE-2026-76565 Reflected XSS via price_from / price_to Filter Parameters in PhocaCart Create: 2026-08-21 17:09:08 +0000 UTC Push: 2026-08-21 17:09:26 +0000 UTC |

aye468448-eng/CVE-2026-0073-Android-adbd-authentication-bypass Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless debugging or ADB-over-TCP enabled. Device needs to have been paired before. This has been tested working on Android 14 in Android Studio. Should work on others as well but exploitability may vary. Create: 2026-08-21 16:53:02 +0000 UTC Push: 2026-08-21 16:53:03 +0000 UTC |

Hunt-Benito/rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow-in-chrome-on-android Create: 2026-08-21 15:13:45 +0000 UTC Push: 2026-08-21 15:13:46 +0000 UTC |

Pasindu-sd/CVE-2025-69212-Exploit A fully automated exploit script for **CVE-2025-69212**, a command injection vulnerability in OpenSTAManager. This script authenticates with admin credentials, deploys a malicious PHP web shell via a crafted P7M file in a ZIP archive, and provides command execution or a reverse shell. Create: 2026-08-21 14:57:28 +0000 UTC Push: 2026-08-21 14:57:54 +0000 UTC |

G33l0/Cve-2026-64638 Educational use only! Create: 2026-08-21 13:07:02 +0000 UTC Push: 2026-08-21 13:07:03 +0000 UTC |

sag-asab/CVE-2026-19598 Custom Content Types and Fields plugin for WordPress Create: 2026-08-21 13:06:49 +0000 UTC Push: 2026-08-21 13:06:50 +0000 UTC |

villager1314/-CVE-2026-43499-IQOO-Neo10-Analysis Create: 2026-08-21 12:56:12 +0000 UTC Push: 2026-08-21 12:56:13 +0000 UTC |

villager1314/CVE-2026-43499-IQOO-Neo10-Analysis Create: 2026-08-21 12:56:12 +0000 UTC Push: 2026-08-21 12:56:13 +0000 UTC |

berdav/CVE-2026-41567 CVE-2026-41567 1day Create: 2026-08-21 11:08:07 +0000 UTC Push: 2026-08-21 11:08:20 +0000 UTC |

20000419/CVE-2026-39113 CVE-2026-39113: SQLite SQLAR heap-buffer-overflow advisory and reproducer Create: 2026-08-21 08:34:19 +0000 UTC Push: 2026-08-21 08:34:25 +0000 UTC |

fahimalshihab/CVE-2026-69191-FileRise-Authentication-Bypass Security research and technical analysis of CVE-2026-69191 affecting FileRise up to version 3.20.0. Create: 2026-08-21 07:50:36 +0000 UTC Push: 2026-08-21 07:50:36 +0000 UTC |

HORKimhab/CVE-2026-69836 CVE-2026-69836 - Draft or TODO Create: 2026-08-21 06:20:48 +0000 UTC Push: 2026-08-21 06:20:51 +0000 UTC |

Hasanuyarrr/CVE-2026-80444-Avesis-Uygulamasinda-Open-Redirect-Zafiyeti Create: 2026-08-21 05:40:06 +0000 UTC Push: 2026-09-30 11:09:15 +0000 UTC |

yym8538/CVE-2026-30951 Create: 2026-08-21 04:19:34 +0000 UTC Push: 2026-08-21 04:19:38 +0000 UTC |

yym8538/CVE-2026-34220 Create: 2026-08-21 04:19:26 +0000 UTC Push: 2026-08-21 04:19:30 +0000 UTC |

yym8538/CVE-2026-0603 Create: 2026-08-21 04:19:19 +0000 UTC Push: 2026-08-21 04:19:23 +0000 UTC |

yym8538/CVE-2026-40897 Create: 2026-08-21 04:19:10 +0000 UTC Push: 2026-08-21 04:19:14 +0000 UTC |