learner202649/CVE-2026-35030-PoC The code for personally reproducing the corresponding vulnerability Create: 2026-05-19 12:13:16 +0000 UTC Push: 2026-05-19 12:13:17 +0000 UTC |

minanagehsalalma/cve-2021-21735-zte-zxhn-h168n-admin-compromise CVE-2021-21735 write-up: ZTE ZXHN H168N V3.5 wizard-page information leak, firmware routing flaw, and the path from exposed PPPoE/WLAN data to full admin compromise. Create: 2026-05-19 11:26:32 +0000 UTC Push: 2026-05-20 13:35:44 +0000 UTC |

minanagehsalalma/zyxel-cve-2021-35036-super-admin-password-leak Deep-dive write-up for CVE-2021-35036, plus an adapted VMG8825-B50B genpass lab showing how Zyxel super-admin, TR-069, and FTPS credentials could be exposed across shared firmware. Create: 2026-05-19 11:22:20 +0000 UTC Push: 2026-05-20 14:01:49 +0000 UTC |

minanagehsalalma/cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure CVE-2026-34474: unauthenticated ETHCheat=1 requests leak the admin password and Wi-Fi PSK from ZTE H298A/H108N routers. Create: 2026-05-19 11:21:19 +0000 UTC Push: 2026-05-20 13:13:42 +0000 UTC |

Victherich/2008-CVE-ESUT-ALUMNI Create: 2026-05-19 11:11:22 +0000 UTC Push: 2026-05-19 11:11:23 +0000 UTC |

kuniyal08/Dirty-Frag-CVE-2026-43284 A report on Dirty Frag, which is a Linux Local Privilege Escalation (LPE) vulnerability chain that allows an unprivileged user to gain root access Create: 2026-05-19 11:07:42 +0000 UTC Push: 2026-05-19 11:07:43 +0000 UTC |

Umit-MHL/webkit-cve-2024-23222 CVE-2024-23222 WebKit type confusion → iOS 16.4.1 sandbox escape. Full chain: JSC JIT confusion → addrof/read64/write64 → WASM indirect call → arbitrary C functions → file write outside sandbox. Create: 2026-05-19 10:09:50 +0000 UTC Push: 2026-05-19 10:09:51 +0000 UTC |

GubiczaP/cve-2026-31431-checker Shell scanner for CVE-2026-31431 "Copy Fail" — a local privilege escalation via Linux kernel page cache corruption (algif_aead/AF_ALG). Checks kernel version, patch status, module state, setuid exposure and mitigations. Supports Debian 11–13 and Ubuntu 20.04–25.10. CI/CD-ready (exit codes + JSON output). Create: 2026-05-19 09:07:59 +0000 UTC Push: 2026-05-19 09:08:01 +0000 UTC |

mogwailabs/CVE-2023-32692-CodeIgniter4 Example application, vulnerable to CVE-2023-32692 (Validation Rule Injection in the PHP Framework CodeIgniter) Create: 2026-05-19 08:08:43 +0000 UTC Push: 2026-05-19 08:09:21 +0000 UTC |

learner202649/CVE-2026-35029-PoC The code for personally reproducing the corresponding vulnerability Create: 2026-05-19 08:08:06 +0000 UTC Push: 2026-05-19 08:08:07 +0000 UTC |

Industri4l-H3ll-Xpl0it3rs/CVE-2025-55182-React2Shell CVE-2025-55182 Exploit | by infrar3d Create: 2026-05-19 07:47:32 +0000 UTC Push: 2026-05-19 08:06:46 +0000 UTC |

fineman999/POC_CVE-2024-36420 POC_CVE-2024-36420 Create: 2026-05-19 06:56:35 +0000 UTC Push: 2026-05-19 06:56:36 +0000 UTC |

anonmrc/CVE-2026-34486-e-Tomcat-Tribes Create: 2026-05-19 03:31:20 +0000 UTC Push: 2026-05-19 03:31:20 +0000 UTC |

learner202649/CVE-2025-45809-PoC The code for personally reproducing the corresponding vulnerability Create: 2026-05-19 03:21:37 +0000 UTC Push: 2026-05-19 03:21:38 +0000 UTC |

Groppoxx/CVE-2024-37032-PoC Create: 2026-05-19 03:21:35 +0000 UTC Push: 2026-05-19 03:21:36 +0000 UTC |

rufflabs/CVE-2026-36748 Create: 2026-05-19 02:17:46 +0000 UTC Push: 2026-05-19 02:17:47 +0000 UTC |

itzSh4dowxZ/CVE-2024-37032-PoC Create: 2026-05-19 02:10:28 +0000 UTC Push: 2026-05-19 02:10:29 +0000 UTC |

imSre9/CVE-2026-42945 Create: 2026-05-19 01:54:52 +0000 UTC Push: 2026-05-19 01:54:52 +0000 UTC |

learner202649/CVE-2025-11203-PoC The code for personally reproducing the corresponding vulnerability Create: 2026-05-19 01:39:07 +0000 UTC Push: 2026-05-19 01:39:07 +0000 UTC |

LucasPDiniz/CVE-2026-43284 Dirty Frag - kernel Linux critical Vulnerability Create: 2026-05-19 01:02:36 +0000 UTC Push: 2026-05-19 01:02:37 +0000 UTC |