mefulton/CVE-2026-109618-php56-public Exact-build PHP 5.6 research and reproducible labs for CVE-2026-109618 and CVE-2026-109619 Create: 2026-10-25 09:51:35 +0000 UTC Push: 2026-10-25 09:51:47 +0000 UTC |

lushinshang/cve-2026-111497-http2shell-guide Create: 2026-10-25 09:49:21 +0000 UTC Push: 2026-10-25 09:49:29 +0000 UTC |

SamDHarrison/Compiled-CVE-2023-21752 Compiled version of Wh04m1001's exploit for iwr/wget delivery to VM. Create: 2026-10-25 09:44:47 +0000 UTC Push: 2026-10-25 09:52:23 +0000 UTC |

maxprog-svg/CVE-2026-83548 CVE-2026-83548 — SonicWall SMA1000 Work Place pre-auth SSRF Create: 2026-10-25 09:20:33 +0000 UTC Push: 2026-10-25 09:20:34 +0000 UTC |

maxprog-svg/CVE-2026-64849 CVE-2026-64849 — MLflow SSRF Create: 2026-10-25 09:15:33 +0000 UTC Push: 2026-10-25 09:16:31 +0000 UTC |

SAIM28826/CVE-2026-21627 CVE-2026-21627 proof of concept and exploit script Create: 2026-10-25 08:13:26 +0000 UTC Push: 2026-10-25 08:13:27 +0000 UTC |

al4n4n/CVE-2026-115560 CVE-2026-115560: PHP session upload-progress serialize_handler mismatch → pre-auth object injection → RCE. Check/exploit/verify scripts + Docker lab + Suricata/Sigma detection rules. Create: 2026-10-25 06:46:12 +0000 UTC Push: 2026-10-25 06:46:18 +0000 UTC |

barkotenicholas/CVE-2024-45409 Create: 2026-10-25 06:38:44 +0000 UTC Push: 2026-10-25 06:38:57 +0000 UTC |

unixreaper/CVE-2026-99999-Research Create: 2026-10-25 06:18:17 +0000 UTC Push: 2026-10-25 06:18:18 +0000 UTC |

unixreaper/CVE-2022-99999-Research Create: 2026-10-25 06:15:21 +0000 UTC Push: 2026-10-25 06:15:22 +0000 UTC |

Guila95/CVE-2026-86426 Create: 2026-10-25 04:54:22 +0000 UTC Push: 2026-10-25 04:54:24 +0000 UTC |

GOLF2546/PHP2Shell-CVE-2026-109618-CVE-2026-109619 Create: 2026-10-25 03:51:20 +0000 UTC Push: 2026-10-25 04:57:12 +0000 UTC |

ka3n1x/spip-cve-2026 PoC for CVE-2026-72708 (blind SQLi) and CVE-2026-109378 (SSRF) in SPIP, both fixed in 4.4.18 Create: 2026-10-25 02:03:52 +0000 UTC Push: 2026-10-25 02:03:59 +0000 UTC |

Ntn10/cve-2024-10441-synology-rce Writeup y PoC educativo de CVE-2024-10441 (RCE pre-auth como root en Synology DSM via synoplugind). CVE ya parcheado; uso autorizado/defensivo. Create: 2026-10-25 01:51:37 +0000 UTC Push: 2026-10-25 01:51:38 +0000 UTC |

moprius/CVE-2026-112900-Pillow-PoC Create: 2026-10-25 00:04:53 +0000 UTC Push: 2026-10-25 00:04:55 +0000 UTC |

Boreas37/CVE-2026-85168-PoC CVE-2026-85168 — n8n Git node RCE from repo-local filter.*.clean / merge-driver config on add|commit|checkout. Verified v2.35.3 / v2.36.2. Create: 2026-10-24 23:56:25 +0000 UTC Push: 2026-10-24 23:56:33 +0000 UTC |

Boreas37/CVE-2026-86076-PoC CVE-2026-86076 — n8n expression sandbox escape via class-field __sanitize rebinding (backend RCE). Verified v2.37.6 (uid=node) / v2.37.7. Create: 2026-10-24 23:56:17 +0000 UTC Push: 2026-10-24 23:56:24 +0000 UTC |

Boreas37/CVE-2026-88009-PoC CVE-2026-88009 — Traefik forwards a rootless opaque request target that routing/forwardAuth see as '/'. Auth bypass + access-log evasion, verified v3.7.10 / v3.7.13. Create: 2026-10-24 23:56:10 +0000 UTC Push: 2026-10-24 23:56:16 +0000 UTC |

Boreas37/CVE-2026-85595-PoC CVE-2026-85595 — Traefik digestAuth authentication bypass (unknown username => empty HA1). Lab-verified: v3.7.10 bypass, v3.7.11 401. Create: 2026-10-24 23:56:02 +0000 UTC Push: 2026-10-24 23:56:09 +0000 UTC |

mostofajr7-sudo/CVE-2026-109618-CVE-2026-109619-php2shell- MOSTAFA JR7 - Custom security research framework targeting PHP 8.4.26 Apache Prefork RCE and ASLR bypass. Create: 2026-10-24 23:43:55 +0000 UTC Push: 2026-10-24 23:43:56 +0000 UTC |