r2qa/CVE-2026-17544 CVE-2026-17544: PHP bcmath OOB write → universal memory-only RCE & disable_functions/open_basedir bypass. Offset-free runtime resolver. Verified on PHP 8.4.x / 8.5.x. Create: 2026-08-15 22:15:43 +0000 UTC Push: 2026-08-15 22:22:51 +0000 UTC |

SaiTeja-Erukude/CVE-2026-9147-uproot-rce uproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata. Create: 2026-08-15 21:58:32 +0000 UTC Push: 2026-08-15 21:58:33 +0000 UTC |

SaiTeja-Erukude/CVE-2026-47103-python-statemachine-rce Python StateMachine 3.0.0 < 3.2.0 RCE via unsafe SCXML <data expr> evaluation and Python eval() injection. Create: 2026-08-15 21:25:54 +0000 UTC Push: 2026-08-15 21:25:55 +0000 UTC |

opaxial/CVE-2026-9830 CVE-2026-9830 Proof of Concept Create: 2026-08-15 20:57:13 +0000 UTC Push: 2026-08-15 20:57:14 +0000 UTC |

SaiTeja-Erukude/CVE-2026-47117-openmed-rce OpenMed < 1.5.2 unauthenticated RCE via PII privacy-filter model loading and trust_remote_code=True Create: 2026-08-15 20:23:48 +0000 UTC Push: 2026-08-15 20:23:49 +0000 UTC |

nicoibarburu/CVE-2021-4034 This is my simple implementation of an exploit for the PwnKit vulnerability. Create: 2026-08-15 19:42:46 +0000 UTC Push: 2026-08-15 19:42:46 +0000 UTC |

judgedbykira/CVE-2026-20896-Gitea-Authentication-Bypass An explanation and PoC to exploit CVE-2026-20896 Authentication Bypass Vulnerability on Gitea. Being able to steal session tokens for valid users in the Gitea instance. Create: 2026-08-15 19:01:05 +0000 UTC Push: 2026-08-15 19:01:06 +0000 UTC |

ForbiddenGarden/CVE-2024-999999-poc Research artifact (fictitious CVE): symlink + prompt-injection canary used to test Stockpiler MCP server, see RESEARCH_NOTICE.md Create: 2026-08-15 18:48:45 +0000 UTC Push: 2026-08-15 18:48:49 +0000 UTC |

vxssroott/CVE-2026-78906-ChatGPT-Prompt-Injection KREMLIN — AI Infrastructure Vulnerability Research. CVE-2026-78906: Prompt injection and memory exfiltration in OpenAI's ChatGPT API. Create: 2026-08-15 18:05:55 +0000 UTC Push: 2026-08-30 22:18:13 +0000 UTC |

0xTerror/CVE-2023-22047-Oracle-PeopleSoft-LFI CVE-2023-22047 is a critical unauthenticated Local File Inclusion (LFI) vulnerability in Oracle PeopleSoft Enterprise PeopleTools. This exploit allows an attacker to read arbitrary files from the target server without any authentication. Create: 2026-08-15 17:22:45 +0000 UTC Push: 2026-08-15 17:22:46 +0000 UTC |

0xTerror/CVE-2023-22047---Oracle-PeopleSoft-LFI CVE-2023-22047 is a critical unauthenticated Local File Inclusion (LFI) vulnerability in Oracle PeopleSoft Enterprise PeopleTools. This exploit allows an attacker to read arbitrary files from the target server without any authentication. Create: 2026-08-15 17:13:30 +0000 UTC Push: 2026-08-15 17:13:31 +0000 UTC |

oguzylmzx/CVE-2025-64512-pdfminer-PoC PoC for CVE-2025-64512: pdfminer.six CMapDB pickle deserialization RCE via crafted PDF Create: 2026-08-15 16:57:44 +0000 UTC Push: 2026-08-15 16:57:48 +0000 UTC |

Kimdir01/CVE-2026-9090-poc PoC for CVE-2026-9090 — Casdoor SAML signature bypass (CWE-347). Reproduction-only; coordinated via CERT/CC VU#780781. Create: 2026-08-15 16:41:51 +0000 UTC Push: 2026-08-15 16:41:55 +0000 UTC |

knowlily/cve-2026-43499-honor CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis docs, reverse-engineering scripts, disassembly artifacts, and exploit source with honor-BVL-AN16 target adaptation. Create: 2026-08-15 15:18:19 +0000 UTC Push: 2026-08-15 15:18:20 +0000 UTC |

Alixploit22/CVE-2026-6440 mencari sebuah kerentanan, wodpres dan mengungah shell di kerentanan wodpres tersebut Create: 2026-08-15 14:24:33 +0000 UTC Push: 2026-08-15 14:24:34 +0000 UTC |

dinosn/cve-2026-71362-magento-lab One-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, CVSS 9.1) with a PoC and an A/B/A official-patch negative control. For authorized security research and education. Create: 2026-08-15 14:21:33 +0000 UTC Push: 2026-08-15 14:21:37 +0000 UTC |

Alixploit22/CVE-2026-53587 Create: 2026-08-15 14:09:46 +0000 UTC Push: 2026-08-15 14:09:47 +0000 UTC |

virus-or-not/CVE-2026-72529 CVE-2026-72529 + CVE-2026-72530 exploit chain Create: 2026-08-15 13:59:13 +0000 UTC Push: 2026-08-15 13:59:14 +0000 UTC |

YonLiud/CVE-2017-7494 Create: 2026-08-15 12:44:41 +0000 UTC Push: 2026-08-15 12:44:45 +0000 UTC |

VuxNx/CVE-2026-72898 PoC for CVE-2026-72898 Create: 2026-08-15 11:59:26 +0000 UTC Push: 2026-08-15 11:59:27 +0000 UTC |