n0c71v3x/CVE-2026-78745 Create: 2026-09-03 22:27:09 +0000 UTC Push: 2026-09-03 22:27:10 +0000 UTC |

tc4dy/CVE-2026-65643-PoC-Toolkit 🧰 CVE-2026-65643 – cPanel Domain Parking RCE Toolkit (CVSS 9.9) | Red/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 tools: Full Exploit (reverse shell, webshell, persistence, root passwd, file R/W, mass scan, Tor), Blue Team PoC (detection, reporting, audit). w/Python. 🦾 Only Use Ethically, Stay Legal <3 Create: 2026-09-03 18:13:54 +0000 UTC Push: 2026-09-03 18:13:56 +0000 UTC |

tc4dy/CVE-2026-65643-PoC-Exploit 🧰 CVE-2026-65643 – cPanel Domain Parking RCE Toolkit (CVSS 8.7) | Red/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 tools: Full Exploit (reverse shell, webshell, persistence, root passwd, file R/W, mass scan, Tor), Blue Team PoC (detection, reporting, audit). w/Python. 🦾 Only Use Ethically, Stay Legal <3 Create: 2026-09-03 18:13:54 +0000 UTC Push: 2026-09-04 09:52:58 +0000 UTC |

Trachinus/CVE-2026-4813 PoC for CVE-2026-4813 Create: 2026-09-03 17:26:45 +0000 UTC Push: 2026-09-03 17:26:46 +0000 UTC |

ejajmahmud/supplychain-dependency-cve-remediator-bot-fastapi-supplychain-cve-remediator-v2026-b64 Autonomous Software Supply Chain Dependency CVE Remediator Bot enterprise system built with Python 3.12 / FastAPI & Pydantic Automated Security Core (Source: Apache Software Foundation (apache.org/cve-remediation-bot/supplychain-security-core)) Create: 2026-09-03 17:14:21 +0000 UTC Push: 2026-09-03 17:14:26 +0000 UTC |

FORTBRIDGE-UK/cve-2026-75604 Research lab and exploit chain for CVE-2026-75604: path traversal in the Next.js incremental cache, to RCE on Windows. Patched CVE; authorized testing only. Create: 2026-09-03 17:07:41 +0000 UTC Push: 2026-09-03 17:07:47 +0000 UTC |

0xCyp1337/CVE-2026-82329 CVE‑2026‑82329 is a critical authentication bypass in JFrog Artifactory (CVSS 9.8) allowing unauthenticated attackers to obtain full administrative privileges. Actively exploited in the wild. Affects self‑hosted versions before patches. PoC for authorized testing only. Create: 2026-09-03 16:58:15 +0000 UTC Push: 2026-09-03 16:58:16 +0000 UTC |

0xSemizzz/CVE-2026-92162 CVE-2026-92162: Path traversal in the Flatpak system helper: an unvalidated arch parameter in DeployAppstream lets an active local user create root-owned directories anywhere. Write-up and test-mode PoC. Create: 2026-09-03 16:52:37 +0000 UTC Push: 2026-09-17 06:24:37 +0000 UTC |

byt3l0rd/-CVE-2026-8181 Create: 2026-09-03 16:23:10 +0000 UTC Push: 2026-09-03 16:23:11 +0000 UTC |

HORKimhab/CVE-2026-52810 CVE-2026-52810 - Draft or TODO Create: 2026-09-03 15:36:22 +0000 UTC Push: 2026-09-03 15:36:26 +0000 UTC |

digiprosec/CVE-2026-80428 CVE-2026-80428 PoC Create: 2026-09-03 14:37:57 +0000 UTC Push: 2026-09-03 14:37:58 +0000 UTC |

AmorCool/iOS26.6-CVE-2026-65343 CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71) Create: 2026-09-03 14:29:45 +0000 UTC Push: 2026-09-03 11:53:44 +0000 UTC |

Zipkoppie/CVE-2026-80428 CVE-2026-80428 PoC Create: 2026-09-03 13:38:01 +0000 UTC Push: 2026-09-03 13:38:02 +0000 UTC |

xoessie/CVE-2026-83548-SonicWall-SMA1000-Analysis Vulnerability Analysis of CVE-2026-83548 affecting SonicWall SMA1000 security systems. Create: 2026-09-03 11:03:36 +0000 UTC Push: 2026-09-03 11:03:37 +0000 UTC |

digitalsurgn/CVE-2024-21546 This repository contains security assessment tooling, detection templates, and an automated exploit toolkit for identifying and exploiting **Unauthenticated Remote Code Execution (RCE)** in applications utilizing the `UniSharp/laravel-filemanager` package (Versions `< 2.9.1`). Create: 2026-09-03 10:59:42 +0000 UTC Push: 2026-09-03 11:00:06 +0000 UTC |

HackSpeak/CVE-2026-62735 Windows HTTP.sys integer overflow -> nonpaged pool overflow LPE PoC (CVE-2026-62735): crash + full SYSTEM exploit; for authorized testing Create: 2026-09-03 10:41:14 +0000 UTC Push: 2026-09-03 10:41:34 +0000 UTC |

byt3l0rd/CVE-2026-13001 Create: 2026-09-03 10:30:48 +0000 UTC Push: 2026-09-03 10:31:03 +0000 UTC |

byt3l0rd/CVE-2026-31431 Create: 2026-09-03 10:09:48 +0000 UTC Push: 2026-09-03 10:09:49 +0000 UTC |

toanln-cov/CVE-2026-78071 Stored XSS via Location Title in DPCalendar Free Create: 2026-09-03 10:01:02 +0000 UTC Push: 2026-09-03 10:01:47 +0000 UTC |

toanln-cov/CVE-2026-78070 SQL Injection via ORDER BY Shortcode in plg_content_dpcalendar — DPCalendar Free ≤ 10.11.2 Create: 2026-09-03 09:58:04 +0000 UTC Push: 2026-09-03 09:58:04 +0000 UTC |