murrez/CVE-2026-88854 CVE-2026-88854 — OrdaSoft Joomla Gallery unauth SQLi PoC (check / mass scan / EXTRACTVALUE read) Create: 2026-09-20 18:59:32 +0000 UTC Push: 2026-09-20 19:00:24 +0000 UTC |

devrodT2/CVE-2026-28609-matroska-pcm-oob Proof-of-concept and instrumented reproduction harness for CVE-2026-28609, an out-of-bounds write in Android's MatroskaExtractor reachable via a crafted WebM file with a big-endian PCM audio track. Create: 2026-09-20 17:31:00 +0000 UTC Push: 2026-09-20 17:31:01 +0000 UTC |

Polosss/By-Poloss..-.CVE-2026-89274 Unauthenticated Arbitrary Shortcode Execution Create: 2026-09-20 16:50:17 +0000 UTC Push: 2026-09-20 16:50:50 +0000 UTC |

Wh02m1/CVE-2026-78306-POC Create: 2026-09-20 14:50:46 +0000 UTC Push: 2026-09-20 14:50:47 +0000 UTC |

Wh02m1/CVE-2026-78306 Create: 2026-09-20 14:50:46 +0000 UTC Push: 2026-09-20 19:15:14 +0000 UTC |

deepanshu-khurana/CVE-2023-43804 Create: 2026-09-20 14:07:22 +0000 UTC Push: 2026-09-20 14:07:24 +0000 UTC |

AmulyaKaushik/CVE-2023-27163-lab Create: 2026-09-20 13:38:38 +0000 UTC Push: 2026-09-20 13:38:39 +0000 UTC |

Reelix/CVE-2026-71217-PoC A PoC for CVE-2026-71217 Create: 2026-09-20 13:37:36 +0000 UTC Push: 2026-09-20 13:37:37 +0000 UTC |

HackSpeak/CVE-2026-93958 D-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized testing Create: 2026-09-20 13:10:55 +0000 UTC Push: 2026-09-20 13:11:15 +0000 UTC |

shambhaviM18/cve-2019-15107-lab Create: 2026-09-20 12:50:03 +0000 UTC Push: 2026-09-20 12:50:04 +0000 UTC |

mfahdk/CVE-2026-39987_RCE_PoC Create: 2026-09-20 12:40:18 +0000 UTC Push: 2026-09-20 12:40:58 +0000 UTC |

api-evangelist/dynamicfeed-ai Dynamic Feed, a product of Fluxdyne Pty Ltd (Australia), is a live-data and machine-evidence layer for AI agents and robots: 94 read-only tools across 20 domains (weather and air quality, natural hazards, space weather and satellite positions, CVEs and actively-exploited vulnerabilities, software versions and EOL, sanctions and Federal Register… Create: 2026-09-20 11:15:25 +0000 UTC Push: 2026-09-20 11:15:47 +0000 UTC |

0Linear/CVE-2026-78844 Create: 2026-09-20 10:24:07 +0000 UTC Push: 2026-09-20 10:24:11 +0000 UTC |

g17hubH4ck/CVE-2026-36213-poc CVE-2026-36213: MEmu Android Emulator 9.2.7.0 Local Privilege Escalation Create: 2026-09-20 09:50:48 +0000 UTC Push: 2026-09-20 09:50:49 +0000 UTC |

TheArtist54/CVE-2023-21554-PoC Create: 2026-09-20 06:55:08 +0000 UTC Push: 2026-09-20 06:55:09 +0000 UTC |

suominen/CVE-2026-53266 Create: 2026-09-20 06:03:40 +0000 UTC Push: 2026-09-20 06:03:41 +0000 UTC |

suominen/CVE-2025-39682 Create: 2026-09-20 05:58:09 +0000 UTC Push: 2026-09-20 05:58:10 +0000 UTC |

suominen/CVE-2025-39964 Create: 2026-09-20 05:55:14 +0000 UTC Push: 2026-09-20 05:55:14 +0000 UTC |

chandrimanath04-hue/CVE-2024-31218-WEBHOOD-LAB Create: 2026-09-20 04:55:20 +0000 UTC Push: 2026-09-20 04:55:21 +0000 UTC |

thrilokh-q123/CVE-2025-23134_fixes_code The ASN1_STRING_set() function takes an `int` length, make sure the argument is not inadvertently truncated when it is called from asn1_ex_c2i(). Create: 2026-09-20 03:00:09 +0000 UTC Push: 2026-09-20 03:00:10 +0000 UTC |