4minx/CVE-2026-50522 CVE-2026-50522 PoC Create: 2026-07-25 08:23:28 +0000 UTC Push: 2026-07-25 08:23:28 +0000 UTC |

0xDVRK/CVE-2026-41651 Create: 2026-07-25 08:13:21 +0000 UTC Push: 2026-07-25 08:13:22 +0000 UTC |

l0lsec/CVE-2020-5148 CVE-2020-5148 - Forced Authentication in the SonicWall UTM SSO Agent. The agent probes unvalidated workstations as Domain Admin, so one outbound web request yields a privileged NTLMv2 hash. Advisory SNWLID-2021-0003. Create: 2026-07-25 07:33:26 +0000 UTC Push: 2026-07-25 07:33:29 +0000 UTC |

l0lsec/CVE-2021-3262 CVE-2021-3262 - Blind SQL Injection in the editOEN parameter of TripSpark VEO Transportation / NovusEDU. Unauthenticated, internet-facing. Payloads, annotated requests, and evidence. Create: 2026-07-25 07:33:14 +0000 UTC Push: 2026-07-25 07:33:15 +0000 UTC |

l0lsec/CVE-2021-26837 CVE-2021-26837 - SQL Injection in the SearchTextbox parameter of HelpSystems/Fortra DeliverNow. Payloads, annotated requests, and evidence. Fixed in 1.2.18. Create: 2026-07-25 07:32:51 +0000 UTC Push: 2026-07-25 07:32:55 +0000 UTC |

l0lsec/CVE-2026-12960 CVE-2026-12960 - Improper Export of Android Application Components in the ASUS Router app (com.asus.aihome). PoC, exploit APK, video, and vendor report. Fixed in 1.0.0.9.74. Create: 2026-07-25 07:07:51 +0000 UTC Push: 2026-07-25 07:07:58 +0000 UTC |

LeoxSoft/CVE-2026-31431 🚀 CVE-2026-31431 - Linux Kernel AF_ALG + splice() Privilege Escalation Exploit (Zero-Day → Root Persistence) Create: 2026-07-25 06:47:57 +0000 UTC Push: 2026-07-25 06:48:34 +0000 UTC |

Rat5ak/CVE-2026-61946-Easy-Appointments-IDOR CVE-2026-61946: Unauthenticated IDOR in Easy Appointments <= 3.12.27 Create: 2026-07-25 05:39:09 +0000 UTC Push: 2026-07-25 05:39:13 +0000 UTC |

soralis0912/CVE-2022-38181-aristotle-apk Create: 2026-07-25 01:04:26 +0000 UTC Push: 2026-07-25 01:04:30 +0000 UTC |

soralis0912/CVE-2022-38181-aristotle Create: 2026-07-25 01:01:38 +0000 UTC Push: 2026-07-25 01:01:42 +0000 UTC |

tc4dy/CVE-2026-60206-PoC-Exploit 👾 CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework ⚡Bash & Python versions. Features: --detect safe check, --exploit combo/unsigned/xsw/nameid/all, --shodan integration, --tor support, mass scanning, JSON/CSV/JSONL output, cookie validation. 🛡️ CVSS 9.9 Critical - Use Ethically, Stay Legal. 🔒 Create: 2026-07-24 21:44:02 +0000 UTC Push: 2026-07-24 21:44:03 +0000 UTC |

0xgh057r3c0n/CVE-2026-9198 IBM Langflow Unauthenticated RCE via Auto-Login Bypass Create: 2026-07-24 20:50:04 +0000 UTC Push: 2026-07-24 20:50:05 +0000 UTC |

ardakrg/CVE-2026-51592 Path Traversal vulnerability in TahaBakhtari/SubtitleGenerator - CVE-2026-51592 Create: 2026-07-24 17:29:18 +0000 UTC Push: 2026-07-24 17:29:19 +0000 UTC |

Lite-os15/Lab-001-Gitea-CVE-2026-20896- Create: 2026-07-24 16:32:54 +0000 UTC Push: 2026-07-24 16:32:55 +0000 UTC |

indra-031/React2Shell-Exploit-CVE-2025-55182 React2Shell is a proof-of-concept exploit for **CVE-2025-55182** affecting vulnerable **React Server Components (RSC)** implementations in **Next.js** Create: 2026-07-24 15:56:30 +0000 UTC Push: 2026-07-24 15:56:31 +0000 UTC |

s-vx/CVE-2025-63408 Create: 2026-07-24 15:35:07 +0000 UTC Push: 2026-07-24 15:35:07 +0000 UTC |

bansalkrish007-arch/cve-2015-1328 Linux Kernel 3.13.0 < 3.19 (Ubuntu 12.04/14.04/14.10/15.04) - 'overlayfs' Local Privilege Escalation Create: 2026-07-24 14:50:44 +0000 UTC Push: 2026-07-24 14:51:59 +0000 UTC |

mumaosong/cve-2026-43499-CyberMeowfia 最原始的 Create: 2026-07-24 14:50:21 +0000 UTC Push: 2026-07-24 14:50:22 +0000 UTC |

electricsheep08/CVE-2025-27520 exploit for CVE-2025-27520 A Remote Code Execution (RCE) vulnerability caused by insecure deserialization in the latest version (v1.4.2) of BentoML. It allows any unauthenticated user to execute arbitrary code on the server. It exists an unsafe code segment in serde.py. This vulnerability is fixed in 1.4.3. Create: 2026-07-24 13:59:14 +0000 UTC Push: 2026-07-24 13:59:15 +0000 UTC |

cherrycherrymay/PoC-CVE-2026-46331 Pedit COW – Linux Kernel Local Privilege Escalation (CVE-2026-46331) Create: 2026-07-24 13:01:31 +0000 UTC Push: 2026-07-24 13:01:32 +0000 UTC |