gduma-phData/patch-CVE-2026-22024 Patch: Deserialization vulnerability (Oracle WebLogic Server) Create: 2026-08-24 03:02:10 +0000 UTC Push: 2026-08-24 03:02:12 +0000 UTC |

gduma-phData/patch-CVE-2026-28001 Patch: Remote code execution in SPL parsing (Splunk Enterprise) Create: 2026-08-24 03:01:52 +0000 UTC Push: 2026-08-24 03:02:09 +0000 UTC |

gduma-phData/patch-CVE-2026-31337 Patch: RCE via authentication bypass (Ivanti Connect Secure) Create: 2026-08-24 03:01:16 +0000 UTC Push: 2026-08-24 03:01:17 +0000 UTC |

ejajmahmud/dependency-vulnerability-patch-agent-fastapi-cve-patch-bot-v2026-b60 Automated Zero-Day Dependency Vulnerability Remediation Agent enterprise system built with Python 3.12 / LangChain & FastAPI Autonomous Enterprise CVE Patch Bot (Source: Apache Software Foundation (apache.org/cve-patch-bot)) Create: 2026-08-24 00:53:10 +0000 UTC Push: 2026-08-24 00:53:15 +0000 UTC |

chessalekin/cve-2026-9198_exploit Create: 2026-08-23 18:32:01 +0000 UTC Push: 2026-08-23 18:32:02 +0000 UTC |

CerberusMrXi/phpMyAdmin-CVE-2020-5504-Exploit Professional PHPMyAdmin 5.0.0 SQL Injection (CVE-2020-5504) exploitation framework with automated database enumeration, table extraction, and data dumping capabilities. Features blind injection, proxy support, JSON output, and comprehensive error handling for authorized penetration testing and security research. Author: Sudeepa Wanigarathna Create: 2026-08-23 18:18:17 +0000 UTC Push: 2026-08-23 18:18:18 +0000 UTC |

SneakyNachos/CVE-2026-15718-who-put-ptrs-in-my-wasm PoC exploit chain for CVE-2026-15718: SpiderMonkey wasm baseline compiler array.fill missing-sync -> invalid pointer -> addrOf/fakeobj -> arbitrary R/W -> RCE Create: 2026-08-23 16:03:50 +0000 UTC Push: 2026-08-23 16:03:50 +0000 UTC |

dinosn/CVE-2026-10053-lab Reproducible lab for CVE-2026-10053 (GitLab npm package-registry path traversal -> arbitrary file write as git). Vulnerable 19.2.1 vs patched 19.2.2, deterministic oracle. Create: 2026-08-23 15:32:22 +0000 UTC Push: 2026-08-23 15:32:25 +0000 UTC |

toanln-cov/CVE-2026-66917 IDOR + Stored XSS via Broken Object-Level Authorization in JoomGallery Create: 2026-08-23 15:18:06 +0000 UTC Push: 2026-08-23 15:18:07 +0000 UTC |

toanln-cov/CVE-2026-66916 Password-Protected Category Bypass via JSON Format in JoomGallery Create: 2026-08-23 15:11:16 +0000 UTC Push: 2026-08-23 15:11:16 +0000 UTC |

h00die/poc_cve_2026_19681 Create: 2026-08-23 13:12:28 +0000 UTC Push: 2026-08-23 13:12:29 +0000 UTC |

barun121/CVE-2024-9264-in-Grafana-11.x Vulnerability Exploitation using tools Penetration Testing, Grafana, Docker, Kali Linux. Create: 2026-08-23 11:26:48 +0000 UTC Push: 2026-08-23 11:26:49 +0000 UTC |

XiaoBaiLovesStirring/cve-2026-0013-poc CVE-2026-0013 Android EoP PoC - Compiled artifacts for security research (Derivative of inforcqb/cve-2026-0013-exploit) Create: 2026-08-23 07:01:16 +0000 UTC Push: 2026-08-23 07:01:17 +0000 UTC |

XiaoBaiLovesStirring/cve-2026-0013 CVE-2026-0013 Android EoP PoC - Compiled artifacts for security research Create: 2026-08-23 06:57:37 +0000 UTC Push: 2026-08-23 06:57:39 +0000 UTC |

xx2901318208/ghostlock-cve-2026-64560 CVE-2026-64560 posix-cpu-timers UAF exploit for Vivo devices Create: 2026-08-23 06:36:24 +0000 UTC Push: 2026-08-23 06:36:25 +0000 UTC |

Legendile7/CVE-2026-78122-POC Create: 2026-08-23 01:55:44 +0000 UTC Push: 2026-08-23 01:55:48 +0000 UTC |

capivara-research/WordPress-Path-Traversal-CVE-2019-11447 CPTS HackTheBox - Penetration Test Report: WordPress Path Traversal CVE-2019-11447 Create: 2026-08-22 21:24:06 +0000 UTC Push: 2026-08-22 21:24:09 +0000 UTC |

totekuh/CVE-2026-75616 PoC for CVE-2026-75616, an authenticated OS command injection in TP-Link Archer C20 v6 firmware Create: 2026-08-22 20:53:05 +0000 UTC Push: 2026-08-22 20:53:50 +0000 UTC |

WildanDeveloper/CVE-2026-58231 Detection & precondition-verification tool for CVE-2026-58231 (SAP Commerce Cloud Data Hub Adapter) Create: 2026-08-22 20:12:25 +0000 UTC Push: 2026-08-22 20:12:40 +0000 UTC |

s1ko/CVE-2026-52618 CVE-2026-52618 — @webfer/mcp-ansible-drupal: OS command injection via executeDeployment extra vars (fixed in 2.0.3) Create: 2026-08-22 19:47:36 +0000 UTC Push: 2026-08-22 19:47:40 +0000 UTC |