Ashwesker/Ashwesker-CVE-2025-64155 CVE-2025-64155 Create: 2026-01-18 10:13:40 +0000 UTC Push: 2026-01-18 10:13:41 +0000 UTC |

mad12wader/CVE-2026-22812 CVE-2026-22812 Full-featured exploitation toolkit for CVE-2026-22812 - OpenCode Unauthenticated RCE Create: 2026-01-18 09:11:31 +0000 UTC Push: 2026-01-18 09:11:32 +0000 UTC |

C-h4ck-0/Learn-about-cve-2025-31133-poc Learn about CVE-2025-31133 Create: 2026-01-18 09:00:19 +0000 UTC Push: 2026-01-19 16:36:22 +0000 UTC |

Smarttfoxx/CVE-2025-67263 Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting (XSS) vulnerability in the Clients module. The application fails to properly sanitize user-supplied input stored in the Name and Surname fields. An attacker can insert malicious HTML or script content into these fields, which, is persisted in the database. Create: 2026-01-18 06:33:11 +0000 UTC Push: 2026-01-18 06:33:12 +0000 UTC |

Smarttfoxx/CVE-2025-67261 Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page. Create: 2026-01-18 06:24:46 +0000 UTC Push: 2026-01-18 06:24:46 +0000 UTC |

Rezy-Dev/CVE-2018-11235 exploit poc for CVE-2018-11235 Create: 2026-01-18 05:42:39 +0000 UTC Push: 2026-01-18 05:42:40 +0000 UTC |

0xdolan/nextjs-CVE-2025-55182 Create: 2026-01-18 05:13:15 +0000 UTC Push: 2026-01-18 05:13:15 +0000 UTC |

vigilante-1337/CVE-2024-11635 The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.12 via the 'wfu_ABSPATH' cookie parameter. This makes it possible for unauthenticated attackers to execute code on the server. Create: 2026-01-18 04:12:41 +0000 UTC Push: 2026-01-18 04:12:42 +0000 UTC |

paysonism/CVE-2015-2291-Spoofer-Analysis Overview of a application that I reversed using the CVE-2015-2291 exploit from the Intel Ethernet Diagnostics Driver (iQVW32.sys) for memory manipulation used in hwid spoofing. Create: 2026-01-18 04:05:36 +0000 UTC Push: 2026-01-18 04:20:27 +0000 UTC |

Iniivan13/CVE-2026-1107 A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function check_userinfo of the file Diyajax.php of the component Member Avatar Handler. Executing a manipulation of the argument viewfile can lead to unrestricted upload. The attack may be performed from remote. Create: 2026-01-18 03:30:08 +0000 UTC Push: 2026-01-18 03:30:08 +0000 UTC |

microcyberr/CVE-2025-10484 Create: 2026-01-18 02:57:08 +0000 UTC Push: 2026-01-18 02:57:09 +0000 UTC |

CkAbhijit/CVE-2026-0227-Advanced-Scanner CVE-2026-0227 Advanced Scanner Create: 2026-01-18 00:07:04 +0000 UTC Push: 2026-01-18 00:07:22 +0000 UTC |

sastraadiwiguna-purpleeliteteaming/Cisco-IOS-Exploitation-JAGUAR_TOOTH-CVE-2017-6742-Reconstruction Comprehensive 100% Unrestricted Technical Analysis of JAGUAR_TOOTH Malware (APT28). High-precision reconstruction of Cisco IOS SNMP exploitation, ROP chaining, and memory-resident espionage tactics by SASTRA_ADI_WIGUNA. Create: 2026-01-17 19:22:04 +0000 UTC Push: 2026-01-17 19:22:05 +0000 UTC |

TheTorjanCaptain/CVE-2026-23550-PoC CVE-2026-23550 - Modular DS WordPress Plugin **Unauthenticated Admin Access** Create: 2026-01-17 15:33:11 +0000 UTC Push: 2026-01-17 15:33:12 +0000 UTC |

SteamPunk424/CVE-2025-36911-Wisper_Pair_Target_Finder- This is not an exploit for CVE-2025-26911!!! This is a detector for finding potentially vulnerable devices! Only use on your own devices! I am not responsible for damages! Create: 2026-01-17 12:21:30 +0000 UTC Push: 2026-01-17 12:23:09 +0000 UTC |

Ashwesker/Ashwesker-CVE-2026-22812 CVE-2026-22812 Create: 2026-01-17 10:28:53 +0000 UTC Push: 2026-01-17 10:28:54 +0000 UTC |

langbyyi/CVE-2026-22785 Create: 2026-01-17 09:07:50 +0000 UTC Push: 2026-01-17 13:59:11 +0000 UTC |

Jvr2022/CVE-2026-23745 Proof of Concept for CVE-2026-23745: Arbitrary File Overwrite vulnerability in node-tar (versions < 7.5.3). Create: 2026-01-17 07:45:42 +0000 UTC Push: 2026-01-17 07:45:43 +0000 UTC |

sastraadiwiguna-purpleeliteteaming/SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit Create: 2026-01-17 04:57:53 +0000 UTC Push: 2026-01-17 04:57:53 +0000 UTC |

Cedric-Martz/CVE-2025-36911_scan This script can be used to check if a Bluetooth device is vulnerable to CVE-2025-36911. Create: 2026-01-17 03:48:47 +0000 UTC Push: 2026-01-17 03:48:47 +0000 UTC |