hypnguyen1209/CVE-2026-62911 POC pre-auth RCE on Exchange Create: 2026-08-22 04:49:33 +0000 UTC Push: 2026-08-22 04:49:54 +0000 UTC |

toanln-cov/CVE-2026-74252 Stored XSS in J2Commerce Guest Checkout via Cookie Filter Bypass (com_j2store ≤ 4.1.5) Create: 2026-08-22 03:46:26 +0000 UTC Push: 2026-08-22 03:46:26 +0000 UTC |

hacbs-release-tests/collectors-no-cve-d8a20dfb Create: 2026-08-22 03:15:59 +0000 UTC Push: 2026-08-22 03:16:03 +0000 UTC |

llaytynher/CVE-2026-0740-upload-template Create: 2026-08-22 02:37:52 +0000 UTC Push: 2026-08-22 02:37:53 +0000 UTC |

sentinel-aidefense/CVE-2026-69836-EXP CVE-2026-69836 — Unauthenticated RCE via Entra ID deserialization Create: 2026-08-21 22:36:17 +0000 UTC Push: 2026-08-21 22:36:18 +0000 UTC |

murrez/CVE-J2store-2026 PoC for J2Store CVE-2026-67358–67362 (J2Commerce security advisory Aug 2026) Create: 2026-08-21 18:49:40 +0000 UTC Push: 2026-08-21 18:49:41 +0000 UTC |

panchocosil/CVE-2026-65400-poc Read-only PoC for CVE-2026-65400 — macOS Screen Sharing (screensharingd) pre-auth SRP bypass giving root file read. Patched in macOS 26.6.1 / 15.7.9 / 14.8.9. Create: 2026-08-21 18:22:37 +0000 UTC Push: 2026-08-21 18:22:43 +0000 UTC |

CerberusMrXi/JCEzploit-CVE-2026-48907 JCEzploit is a powerful, fully-automated RCE exploit for Joomla JCE (CVE-2026-48907) featuring interactive shell, batch command execution, file download capability, and proxy support. Built with Python & Rich for penetration testers. Ethical use only. By Sudeepa Wanigarathna. Create: 2026-08-21 17:33:06 +0000 UTC Push: 2026-08-21 17:33:07 +0000 UTC |

Boreas37/CVE-2026-58455-PoC PoC for CVE-2026-58455: Dockwatch <=0.6.567 unauthenticated RCE. Stdlib-only Python. Create: 2026-08-21 17:20:20 +0000 UTC Push: 2026-08-21 17:20:35 +0000 UTC |

toanln-cov/CVE-2026-76564 Stored XSS via User-Agent in Admin Order View in PhocaCart Create: 2026-08-21 17:13:04 +0000 UTC Push: 2026-08-21 17:13:22 +0000 UTC |

toanln-cov/CVE-2026-76565 Reflected XSS via price_from / price_to Filter Parameters in PhocaCart Create: 2026-08-21 17:09:08 +0000 UTC Push: 2026-08-21 17:09:26 +0000 UTC |

aye468448-eng/CVE-2026-0073-Android-adbd-authentication-bypass Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless debugging or ADB-over-TCP enabled. Device needs to have been paired before. This has been tested working on Android 14 in Android Studio. Should work on others as well but exploitability may vary. Create: 2026-08-21 16:53:02 +0000 UTC Push: 2026-08-21 16:53:03 +0000 UTC |

Hunt-Benito/rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow-in-chrome-on-android Create: 2026-08-21 15:13:45 +0000 UTC Push: 2026-08-21 15:13:46 +0000 UTC |

Pasindu-sd/CVE-2025-69212-Exploit A fully automated exploit script for **CVE-2025-69212**, a command injection vulnerability in OpenSTAManager. This script authenticates with admin credentials, deploys a malicious PHP web shell via a crafted P7M file in a ZIP archive, and provides command execution or a reverse shell. Create: 2026-08-21 14:57:28 +0000 UTC Push: 2026-08-21 14:57:54 +0000 UTC |

G33l0/Cve-2026-64638 Educational use only! Create: 2026-08-21 13:07:02 +0000 UTC Push: 2026-08-21 13:07:03 +0000 UTC |

sag-asab/CVE-2026-19598 Custom Content Types and Fields plugin for WordPress Create: 2026-08-21 13:06:49 +0000 UTC Push: 2026-08-21 13:06:50 +0000 UTC |

villager1314/-CVE-2026-43499-IQOO-Neo10-Analysis Create: 2026-08-21 12:56:12 +0000 UTC Push: 2026-08-21 12:56:13 +0000 UTC |

villager1314/CVE-2026-43499-IQOO-Neo10-Analysis Create: 2026-08-21 12:56:12 +0000 UTC Push: 2026-08-21 12:56:13 +0000 UTC |

berdav/CVE-2026-41567 CVE-2026-41567 1day Create: 2026-08-21 11:08:07 +0000 UTC Push: 2026-08-21 11:08:20 +0000 UTC |

20000419/CVE-2026-39113 CVE-2026-39113: SQLite SQLAR heap-buffer-overflow advisory and reproducer Create: 2026-08-21 08:34:19 +0000 UTC Push: 2026-08-21 08:34:25 +0000 UTC |