franckferman/CVE-2026-109618 CVE-2026-109618 - PHP session.upload_progress Heap UAF Pre-Auth RCE (CVSS 9.2) Create: 2026-10-26 01:46:40 +0000 UTC Push: 2026-10-26 01:46:45 +0000 UTC |

franckferman/CVE-2026-109619 CVE-2026-109619 - PHP session.upload_progress File Poisoning + LFI RCE (CVSS 9.2) Create: 2026-10-26 01:45:45 +0000 UTC Push: 2026-10-26 01:45:51 +0000 UTC |

lucasbarros097/PHP2Shell__CVE-2026-109618__CVE2026-109619 Create: 2026-10-25 23:51:08 +0000 UTC Push: 2026-10-25 23:51:10 +0000 UTC |

asvorg/CVE-2026-116191-poc Create: 2026-10-25 22:23:38 +0000 UTC Push: 2026-10-25 22:30:57 +0000 UTC |

ohackercego/CVE-2026-116106 CVE-2026-116106 - HeyCyan App 1.0.103 (Android) controle de acesso incorreto no FileProvider (CWE-284) - VulDB VDB-426174 Create: 2026-10-25 22:03:15 +0000 UTC Push: 2026-10-25 22:03:21 +0000 UTC |

ohackercego/CVE-2026-116105 CVE-2026-116105 - HeyCyan App 1.0.103 (Android) transmissao em texto claro / cleartext transmission (CWE-319) - VulDB VDB-426173 Create: 2026-10-25 22:03:04 +0000 UTC Push: 2026-10-25 22:03:10 +0000 UTC |

dc04265/CVE-2025-5548-Practica-Modulo-6 Stack-Based Buffer Overflow - FreeFloat FTP Server 1.0 Create: 2026-10-25 21:08:28 +0000 UTC Push: 2026-10-26 12:45:10 +0000 UTC |

risvensehiraxt/msgpack-CVE-2021-23410-test.hpp the improve SourceInfo UX around server: Create: 2026-10-25 20:13:36 +0000 UTC Push: 2026-10-25 20:13:37 +0000 UTC |

jeffschafer/Bigfix-NodeJS-Vulnerability-Scanner-Content-CVE-2026-111497 BigFix YARA-X discovery Fixlets and shared Analysis for Node.js Brotli CVE-2026-111497 on Windows, Linux and macOS. Create: 2026-10-25 20:09:18 +0000 UTC Push: 2026-10-26 14:32:33 +0000 UTC |

umarrehmansiddiqui/CVE-2026-0073 CVE-2026-0073: Android adbd TLS auth bypass PoC. Exploits a logic bug where OpenSSL's EVP_PKEY_cmp() returns -1 on key type mismatch (EC vs RSA), incorrectly evaluating to true and granting access. Includes functional Python and standalone C exploits to gain unauthenticated remote shell on Android devices with Wireless Debugging enabled. Create: 2026-10-25 19:46:46 +0000 UTC Push: 2026-10-25 19:46:48 +0000 UTC |

j0xh-sec/CVE-2026-112325 CVE-2026-112325: OpenThread mDNS NULL-pointer dereference (DoS) Create: 2026-10-25 19:32:00 +0000 UTC Push: 2026-10-25 19:32:12 +0000 UTC |

thebarel/CVE-2026-111497 CVE-2026-111497 client-side research Create: 2026-10-25 19:31:08 +0000 UTC Push: 2026-10-27 19:42:56 +0000 UTC |

ohackercego/CVE-2025-26326 CVE-2025-26326 - vulnerabilidade critica em add-ons de conexao remota do NVDA (recuperado) Create: 2026-10-25 19:16:34 +0000 UTC Push: 2026-10-25 19:16:38 +0000 UTC |

ohackercego/CVE-2024-6387-how-to-fix Guia de correcao e mitigacao da CVE-2024-6387 (regreSSHion / OpenSSH) (recuperado) Create: 2026-10-25 19:16:27 +0000 UTC Push: 2026-10-25 19:16:32 +0000 UTC |

Ghost-Bx1/Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651 PoC e exploits para CVE-2026-14440 (Universal SSL CAA Bypass), CVE-2026-3125 (OpenNext SSRF), CVE-2025-0651 (WARP Windows Privesc) | By Gh0st-Bx1 Create: 2026-10-25 19:02:32 +0000 UTC Push: 2026-10-25 19:02:34 +0000 UTC |

jeffschafer/Bigfix-PHP-Vulnerability-Scanner-Content-CVE-2026-109618-CVE-2026-109619 Bigfix PHP Vulnerability Scanner Content (CVE-2026-109618, CVE-2026-109619) for Windows, Linux and Mac. Create: 2026-10-25 19:00:03 +0000 UTC Push: 2026-10-25 19:00:05 +0000 UTC |

emirwtz/CVE-2026-111497 Non-invasive Python detector for CVE-2026-111497 with Brotli/Node.js version checks, JSON inventories, and CI-ready reports. Create: 2026-10-25 18:42:23 +0000 UTC Push: 2026-10-25 18:42:25 +0000 UTC |

Ghost-Bx1/Fortinet-Exploits-CVE-2026-39808-106173-107656 PoC e Exploits completos para CVE-2026-39808 (FortiSandbox RCE), CVE-2026-106173 (FortiSIEM gRPC Path Traversal RCE) e CVE-2026-107656 (FortiSandbox Auth Bypass) - CVSS 9.6-9.8 Create: 2026-10-25 18:34:17 +0000 UTC Push: 2026-10-25 18:34:19 +0000 UTC |

Hika-sec/php2shell-CVE-2026-109619 PoC demonstrating a potential PHP use-after-free vulnerability caused by stale global state referencing freed request memory. Improper state resets or reinitialization may trigger unsafe memory access during subsequent requests, potentially leading to remote code execution (RCE). Create: 2026-10-25 18:26:22 +0000 UTC Push: 2026-10-25 18:26:24 +0000 UTC |

Hika-sec/http2shell-CVE-2026-111497 http2shell, Proof-On-Concept Create: 2026-10-25 18:05:02 +0000 UTC Push: 2026-10-25 18:05:03 +0000 UTC |