Nxploited/CVE-2026-18366 Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator Create: 2026-08-16 20:21:02 +0000 UTC Push: 2026-08-16 20:21:03 +0000 UTC |

Nel-droid/CVE-2026-71203-PoC PoC: changedetection.io unauthenticated OpenAPI schema disclosure (CVE-2026-71203, Medium 5.3) Create: 2026-08-16 20:17:56 +0000 UTC Push: 2026-08-16 20:18:01 +0000 UTC |

Nel-droid/CVE-2026-71204-PoC PoC: changedetection.io settings blind-merge mass assignment (CVE-2026-71204, Medium 6.3) Create: 2026-08-16 20:17:50 +0000 UTC Push: 2026-08-16 20:17:54 +0000 UTC |

Nel-droid/CVE-2026-71205-PoC PoC: changedetection.io unlimited login brute-force, no rate limiting (CVE-2026-71205, Medium 6.5) Create: 2026-08-16 20:17:37 +0000 UTC Push: 2026-08-16 20:17:41 +0000 UTC |

Nel-droid/CVE-2026-72585-PoC PoC: Grafana Editor role deletes protected contact points (CVE-2026-72585, Medium 6.5) Create: 2026-08-16 20:17:31 +0000 UTC Push: 2026-08-16 20:17:35 +0000 UTC |

Nel-droid/CVE-2026-71206-PoC PoC: Shiori JWT CheckToken never re-validates account state (CVE-2026-71206, High 8.2) Create: 2026-08-16 20:17:25 +0000 UTC Push: 2026-08-16 20:17:29 +0000 UTC |

goalrisk/CVE-2026-52856-poc PoC for CVE-2026-52856 Create: 2026-08-16 18:41:26 +0000 UTC Push: 2026-08-16 18:41:27 +0000 UTC |

minanagehsalalma/zyxel-social-login-bypass-cve-2026-8508 Public writeup, PoC, and emulation materials for CVE-2026-8508 affecting Zyxel captive-portal social login. Create: 2026-08-16 16:03:29 +0000 UTC Push: 2026-08-16 16:03:37 +0000 UTC |

minanagehsalalma/CVE-2026-6837-zyxel-export-cgi-command-injection Public writeup, PoC, and emulation materials for CVE-2026-6837 affecting Zyxel export-cgi PKCS#12 export handling. Create: 2026-08-16 16:03:03 +0000 UTC Push: 2026-08-16 16:03:12 +0000 UTC |

RizkyDaffy/cve-mck-2026 Create: 2026-08-16 14:07:15 +0000 UTC Push: 2026-08-16 14:07:16 +0000 UTC |

Boreas37/CVE-2026-73678-PoC CVE-2026-73678 — MindsDB Minds Platform unauthenticated RCE via scratchpad exec (CVSS 10.0). Verified end-to-end with real LLM Create: 2026-08-16 14:05:05 +0000 UTC Push: 2026-08-16 14:05:09 +0000 UTC |

Franc-Zar/CVE-2026-72898-safe-detection Simple script to achieve safe and non-desruptive active detection of CVE-2026-72898 (SQLi in Metabase) Create: 2026-08-16 12:55:07 +0000 UTC Push: 2026-08-16 12:55:08 +0000 UTC |

CuteeCat/CVE-2026-73633 CVE-2026-73633（S2-072）概念验证代码 Create: 2026-08-16 11:30:03 +0000 UTC Push: 2026-08-16 11:30:04 +0000 UTC |

Alixploit22/CVE-2025-11740 Create: 2026-08-16 09:49:50 +0000 UTC Push: 2026-08-16 09:49:51 +0000 UTC |

eh-amish/Windows-Defender-Security-Auditor-CVE-2026-50656- Create: 2026-08-16 09:11:25 +0000 UTC Push: 2026-08-16 09:11:58 +0000 UTC |

iamrajkumar1995/cve-2025-5781_FreePBX In August 2025, a critical vulnerability was disclosed in the FreePBX Endpoint module. CVE-2025–57819 allows an unauthenticated attacker to exploit SQL injection in the Endpoint module and, through a chain of database manipulation and scheduled task execution, achieve remote code execution. Create: 2026-08-16 08:53:38 +0000 UTC Push: 2026-08-16 08:53:39 +0000 UTC |

YonLiud/CVE-2026-76904 Unauthenticated SQL injection to complete RCE Create: 2026-08-16 08:11:26 +0000 UTC Push: 2026-08-22 20:10:52 +0000 UTC |

uname1able/CVE-2022-24481-analysis Create: 2026-08-16 06:06:27 +0000 UTC Push: 2026-08-16 06:06:31 +0000 UTC |

squeeze440/CVE-2026-73847-emlog-PoC PoC for CVE-2026-73847 - emlog AI Assistant CSRF to SQL execution to admin takeover (CVSS 6.8) Create: 2026-08-16 04:38:17 +0000 UTC Push: 2026-08-16 04:38:20 +0000 UTC |

squeeze440/CVE-2026-73519-WolfStack-PoC PoC for CVE-2026-73519 - WolfStack hardcoded cluster secret leads to unauthenticated RCE (CVSS 9.8) Create: 2026-08-16 04:38:09 +0000 UTC Push: 2026-08-16 04:38:13 +0000 UTC |