szybnev/cve-2026-20896-gitea-poc CVE-2026-20896 Gitea Docker X-WEBAUTH-USER auth bypass checker Create: 2026-07-07 20:31:16 +0000 UTC Push: 2026-07-07 20:31:19 +0000 UTC |

A17-ba/CVE-2026-51119 Create: 2026-07-07 20:29:41 +0000 UTC Push: 2026-07-07 20:29:42 +0000 UTC |

moritakaaz/CVE-2026-12277 Frontend File Manager Plugin (WordPress) <= 23.6 - Unauthenticated Arbitrary File Deletion to RCE Create: 2026-07-07 20:11:30 +0000 UTC Push: 2026-07-07 20:11:31 +0000 UTC |

TokyoHunter/CVE-2019-9978---Social-Warfare-WordPress-RCE A complete walkthrough and exploit for CVE-2019-9978 - Unauthenticated Remote Code Execution in Social Warfare WordPress plugin ≤ 3.5.2. Includes vulnerable code analysis and payload examples. Create: 2026-07-07 20:01:42 +0000 UTC Push: 2026-07-07 20:01:42 +0000 UTC |

TokyoHunter/CVE-2019-9978-Social-Warfare-WordPress-RCE A complete walkthrough and exploit for CVE-2019-9978 - Unauthenticated Remote Code Execution in Social Warfare WordPress plugin ≤ 3.5.2. Includes vulnerable code analysis and payload examples. Create: 2026-07-07 20:01:42 +0000 UTC Push: 2026-07-07 20:13:56 +0000 UTC |

WesWrench/CVE-2026-36214 Stored Cross-Site Scripting (XSS) in osTicket via Vulnerable Bootstrap Tooltip Component Create: 2026-07-07 19:11:42 +0000 UTC Push: 2026-07-07 19:24:25 +0000 UTC |

JivaSecurity/VTIGER-CRM-RCE-CVE-2026-23698 Vtiger CRM 8.3.0, 8.4.0 Module Import Authenticated RCE PoC Create: 2026-07-07 16:27:55 +0000 UTC Push: 2026-07-07 16:28:04 +0000 UTC |

JivaSecurity/VTIGER-CRM-RCE-CVE-2026-23697 Vtiger CRM 8.3.0 Authenticated RCE via .phar Upload Create: 2026-07-07 16:26:04 +0000 UTC Push: 2026-07-07 16:26:14 +0000 UTC |

c0gnit00/CVE-2022-46364 Python POC, Exploit for CVE-2022-46364 Create: 2026-07-07 16:04:14 +0000 UTC Push: 2026-07-07 16:04:15 +0000 UTC |

surajpandeyp/CVE-2025-29927 Create: 2026-07-07 15:37:49 +0000 UTC Push: 2026-07-07 15:37:49 +0000 UTC |

rafaelchriss/RedTeamBrasil-CVE-2025-64459 NEO-SQLi — exploit Django _connector SQL Injection (CVE-2025-64459) | canal RedTeam Brasil Create: 2026-07-07 14:50:14 +0000 UTC Push: 2026-07-07 14:56:10 +0000 UTC |

wanmywan/CVE-2026-48611-phpBB CVE-2026-48611 Simple Poc Create: 2026-07-07 14:29:45 +0000 UTC Push: 2026-07-07 14:29:46 +0000 UTC |

ly1g3/cisco-CVE-2023-31488 Email to zero click RCE as root - Remote Code Execution/Memory Corruption/ROP-chain Create: 2026-07-07 13:17:13 +0000 UTC Push: 2026-07-07 13:48:44 +0000 UTC |

ly1g3/cisco-CVE-2023-20075 Local Privilege Escalation and Shell Escape Create: 2026-07-07 13:12:39 +0000 UTC Push: 2026-07-07 13:13:10 +0000 UTC |

ly1g3/cisco-CVE-2023-20009 Remote Code Execution - RCE from config file Create: 2026-07-07 13:11:14 +0000 UTC Push: 2026-07-07 13:12:01 +0000 UTC |

ly1g3/proofpoint-CVE-2023-0090 Remote Code Execution - Unauthenticated RCE Create: 2026-07-07 13:05:21 +0000 UTC Push: 2026-07-07 13:05:22 +0000 UTC |

ly1g3/proofpoint-CVE-2023-0089 Remote Code Execution - Low level authenticated user to admin RCE Create: 2026-07-07 13:02:57 +0000 UTC Push: 2026-07-07 13:02:58 +0000 UTC |

shinthink/CVE-2026-39492 Create: 2026-07-07 12:28:14 +0000 UTC Push: 2026-07-07 12:28:57 +0000 UTC |

tc4dy/CVE-2026-14762-PoC-Exploit CVE-2026-14762 exploit for Hotel & Tourism Reservation 1.0. Time-based blind SQL injection via /admin/rooms.php?delete. Dumps DB, tables, columns, reads files, writes webshells. Multi-threaded, proxy support, interactive shell. CVSS 7.3. Authorized testing only. By @tc4dy Create: 2026-07-07 12:20:08 +0000 UTC Push: 2026-07-07 12:20:09 +0000 UTC |

nomaisthere/CVE-2023-4861-PoC Proof of Concept for CVE-2023-4861 in Filester Create: 2026-07-07 11:15:43 +0000 UTC Push: 2026-07-07 12:49:40 +0000 UTC |