Hika-sec/http2shell-CVE-2026-111-497 http2shell Proof-On-Concept Create: 2026-10-25 18:02:32 +0000 UTC Push: 2026-10-25 18:02:33 +0000 UTC |

0x1c1101/CVE-2026-109618-PoC Create: 2026-10-25 17:58:28 +0000 UTC Push: 2026-10-25 18:26:54 +0000 UTC |

tikarammardi/CVE-2026-111497 Create: 2026-10-25 17:26:55 +0000 UTC Push: 2026-10-25 17:27:33 +0000 UTC |

nokitakaze/CVE-2026-109618-109619-checker CVE-2026-109618 / 109619 checker Create: 2026-10-25 17:25:19 +0000 UTC Push: 2026-10-25 17:25:54 +0000 UTC |

tanuj8124/CVE-2026-106781 CVE-2026-106781 CH341SER Driver Installer Privilege Escalation Create: 2026-10-25 17:18:01 +0000 UTC Push: 2026-10-25 17:18:02 +0000 UTC |

roshangautam07/node-lts-afterlife Unofficial security backports for end-of-life Node.js LTS lines (18, 20). Patch series, CVE status and verifiable release builds. Not affiliated with the Node.js project. Create: 2026-10-25 16:43:26 +0000 UTC Push: 2026-10-25 16:43:37 +0000 UTC |

breaksek/CVE-2023-48795 Create: 2026-10-25 16:28:16 +0000 UTC Push: 2026-10-25 16:28:17 +0000 UTC |

kavin-jindal/CVE-2026-112900 Proof of Concept (PoC) demonstrating Argument Injection in Pillow's Ghostscript call (Pillow < 13.0.0) potentially leading to arbitrary command execution (RCE). Create: 2026-10-25 15:58:02 +0000 UTC Push: 2026-10-25 15:58:03 +0000 UTC |

kavin-jindal/CVE-2026-112900-PoC Proof of Concept (PoC) demonstrating Argument Injection in Pillow's Ghostscript call (Pillow < 13.0.0) potentially leading to arbitrary command execution (RCE). Create: 2026-10-25 15:58:02 +0000 UTC Push: 2026-10-25 15:59:36 +0000 UTC |

Hassham1/CVE-2026-112866-woo-product-filter-sqli-poc Create: 2026-10-25 15:56:58 +0000 UTC Push: 2026-10-25 15:56:59 +0000 UTC |

SYM01/cve-2026-111497 Create: 2026-10-25 15:32:16 +0000 UTC Push: 2026-10-25 15:32:45 +0000 UTC |

renzi25031469/CVE-2026-115560 PHP session.upload_progress Enabled - CVE-2026-115560 Precondition Create: 2026-10-25 15:07:43 +0000 UTC Push: 2026-10-25 15:07:45 +0000 UTC |

janewas/cve-2026-98260-vivo-gki-research Research notes: porting CVE-2026-98260 to vivo/iQOO GKI 6.6.127 (no exploit code; coordinated disclosure planned) Create: 2026-10-25 13:37:37 +0000 UTC Push: 2026-10-25 13:37:44 +0000 UTC |

catscarlet/php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-patched This is a Docker Image of php:7.4-fpm which is **CVE-2026-109618-109691-patched**. Create: 2026-10-25 12:38:45 +0000 UTC Push: 2026-10-31 13:45:26 +0000 UTC |

catscarlet/php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-free php:7.4-fpm-CVE-2026-109618-109619-free Create: 2026-10-25 12:38:45 +0000 UTC Push: 2026-10-25 12:38:47 +0000 UTC |

Starry2233/cve-2026-25262-poc CVE-2026-25262 (Qualcomm BootROM) deep-dive on the Black Hat Asia 2026 'A journey through Sahara' talk + read-only Sahara/EDL recon harness. GPLv3. Create: 2026-10-25 12:06:47 +0000 UTC Push: 2026-10-25 12:06:57 +0000 UTC |

YounesHfa/CVE-2026-74580 CVE-2026-74580 vhost: reset the vring metadata cache on vring reconfiguration - Exploit Create: 2026-10-25 12:05:40 +0000 UTC Push: 2026-10-25 12:05:42 +0000 UTC |

yora1928/cve_2026_2113 Create: 2026-10-25 12:00:14 +0000 UTC Push: 2026-10-25 12:00:15 +0000 UTC |

delvin-45/php2shell-CVE-2026-109618-CVE-2026-109619-PoC Create: 2026-10-25 11:48:32 +0000 UTC Push: 2026-10-25 11:48:33 +0000 UTC |

delvin-45/php2shell-CVE-2026-109618-CVE-2026-109619-PoC- Create: 2026-10-25 11:18:45 +0000 UTC Push: 2026-10-25 11:18:46 +0000 UTC |