mokshshah18/CVE-2026-83844-PoC-MS-paint-v-11.2609.401.0 A proof of concept for CVE-2026-83844. Microsoft paint version 11.2609.401.0 Create: 2026-11-06 15:00:52 +0000 UTC Push: 2026-11-06 15:00:54 +0000 UTC |

CriticalWombat/sshole_scanner-CVE-2026-123158 A scanner for *sshole SSH vulnerability (CVE-2026-123158) Create: 2026-11-06 14:52:00 +0000 UTC Push: 2026-11-06 14:52:02 +0000 UTC |

0xmrma/Clone2Creds---CVE-2026-62960 Git for Windows: server-advertised bundle-uri is opened as a UNC path, disclosing the victim's NetNTLMv2 credential material during `git clone`. Create: 2026-11-06 14:00:12 +0000 UTC Push: 2026-11-06 14:00:14 +0000 UTC |

thiscitze/cve-2026-100109-poc CVE-2026-100109 - Security For WooCommerce 1.0.10-1.0.16 unauthenticated admin creation (PoC by thiscitze) Create: 2026-11-06 13:30:49 +0000 UTC Push: 2026-11-06 13:30:56 +0000 UTC |

thiscitze/cve-2026-114630-poc CVE-2026-114630 - ELEX HelpDesk <= 3.3.8 unauthenticated arbitrary file deletion (PoC by thiscitze) Create: 2026-11-06 13:30:41 +0000 UTC Push: 2026-11-06 13:30:47 +0000 UTC |

thiscitze/cve-2026-118423-poc CVE-2026-118423 - WP Libre Form <= 1.5.0.1 unauthenticated upload to RCE (PoC by thiscitze) Create: 2026-11-06 13:30:33 +0000 UTC Push: 2026-11-06 13:30:39 +0000 UTC |

nanhang-950/CVE-2026-80914-POC Create: 2026-11-06 13:26:01 +0000 UTC Push: 2026-11-06 13:26:03 +0000 UTC |

Bethelhem-Yirga/hikvision-cve-2017-7921-lab Create: 2026-11-06 13:17:43 +0000 UTC Push: 2026-11-06 13:17:45 +0000 UTC |

iam-s21-caece/PoC-CVE-2026-33871 Create: 2026-11-06 13:14:58 +0000 UTC Push: 2026-11-06 13:15:00 +0000 UTC |

iam-s21-caece/PoC-CVE-2026-0264 Create: 2026-11-06 13:07:50 +0000 UTC Push: 2026-11-06 13:07:52 +0000 UTC |

iam-s21-caece/CVE-2026-0264 Create: 2026-11-06 13:06:22 +0000 UTC Push: 2026-11-06 13:06:23 +0000 UTC |

0xBlackash/CVE-2026-83844 CVE-2026-83844 Create: 2026-11-06 12:29:37 +0000 UTC Push: 2026-11-06 12:29:39 +0000 UTC |

Dream-Rainy/CVE-2026-98260 Create: 2026-11-06 12:08:52 +0000 UTC Push: 2026-11-06 12:08:54 +0000 UTC |

cppghoul/CVE-2026-123025 OS command injection as root via Google Cloud DNS challenge key Create: 2026-11-06 12:06:47 +0000 UTC Push: 2026-11-06 12:06:49 +0000 UTC |

nemoiwkryang/CVE-2026-98260-pkt110-kernelsu CVE-2026-98260 (posix-cpu-timers UAF) to KernelSU on a bootloader-locked OPPO PKT110: exploit core, on-device app, and the research write-up. Create: 2026-11-06 12:04:15 +0000 UTC Push: 2026-11-06 12:04:16 +0000 UTC |

Nxploited/CVE-2025-6254 Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation | RCE Create: 2026-11-06 11:23:17 +0000 UTC Push: 2026-11-06 11:23:19 +0000 UTC |

Nxploited/CVE-2026-120209 Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation | RCE Create: 2026-11-06 11:23:17 +0000 UTC Push: 2026-11-06 11:32:42 +0000 UTC |

HackSpeak/CVE-2026-123158 OpenSSH + musl password authentication bypass (sshole) checker: local precondition audit + remote verification; for authorized testing Create: 2026-11-06 10:53:29 +0000 UTC Push: 2026-11-06 10:53:51 +0000 UTC |

jcy20001023-rgb/CVE-2026-98260-amg-an00 CVE-2026-98260 port for HONOR AMG-AN00 (SM8650 / 6.1.157-android14-11) Create: 2026-11-06 10:10:08 +0000 UTC Push: 2026-11-06 10:10:22 +0000 UTC |

ANYAEGW/CVE-2026-98260-amg-an00 CVE-2026-98260 port for HONOR AMG-AN00 (SM8650 / 6.1.157-android14-11) Create: 2026-11-06 10:10:08 +0000 UTC Push: 2026-11-06 10:10:24 +0000 UTC |