Pr0fEs0r-X/PHP2SHELL-Checker-v-1.0-CVE-2026-115560- Script que detecta si tu versión de PHP es vulnerable a PHP2Shell (CVE-2026-109618 / 109619) Create: 2026-10-23 01:29:31 +0000 UTC Push: 2026-10-28 02:59:26 +0000 UTC |

santihabib/multer-CVE-2026-113872 Write-up and proof of concept for CVE-2026-113872: multer async fileFilter process crash (DoS) Create: 2026-10-23 01:24:55 +0000 UTC Push: 2026-10-23 01:25:01 +0000 UTC |

Scyrix-LLC/CVE-2026-109715 CVE-2026-109715 Create: 2026-10-23 01:10:20 +0000 UTC Push: 2026-10-23 01:23:29 +0000 UTC |

MsBodyBuilding/CVE-2026-109715 CVE-2026-109715 Create: 2026-10-23 01:09:25 +0000 UTC Push: 2026-10-23 01:09:27 +0000 UTC |

canmenzo/cve-2026-93687-braces Independent, measured check of CVE-2026-93687 (braces stack exhaustion): reproducible cold-process crash under the default 10000 maxLength, and what actually mitigates it. Create: 2026-10-23 00:57:42 +0000 UTC Push: 2026-10-23 00:57:47 +0000 UTC |

SaiTeja-Erukude/CVE-2026-57845-hf-datasets-rce Create: 2026-10-23 00:44:29 +0000 UTC Push: 2026-10-23 00:44:30 +0000 UTC |

D7EAD/CVE-2026-109255 FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. Create: 2026-10-22 23:33:38 +0000 UTC Push: 2026-10-22 23:33:39 +0000 UTC |

xaviware/go-gitlab-cve-2026-110264-scanner Fast, concurrent and non-intrusive exposure auditor in Go for GitLab CE/EE unauthenticated RCE (CVE-2026-110264 - CVSS 10.0) Create: 2026-10-22 23:11:41 +0000 UTC Push: 2026-10-22 23:11:46 +0000 UTC |

mc493/php2shell-enterprise-hardening-cve-2026-109618-109619 php2shell-enterprise-hardening (CVE-2026-109618 / CVE-2026-109619) - Hyperscale Defense-in-Depth, Non-Breaking Mitigations & Instant Immunity Auditor for PHP Pre-Auth RCE. Create: 2026-10-22 22:56:00 +0000 UTC Push: 2026-10-22 22:56:02 +0000 UTC |

yanoo1222/CVE-2026-98260-android-port CVE-2026-98260, a bug in POSIX CPU timer subsystem ported to ARM64 android. Create: 2026-10-22 22:13:35 +0000 UTC Push: 2026-10-22 22:13:37 +0000 UTC |

xaviware/go-php2shell-scanner-CVE-2026-109618-CVE-2026-109619 Create: 2026-10-22 20:23:59 +0000 UTC Push: 2026-10-22 20:24:04 +0000 UTC |

swap18plus/php2shell_CVE-2026-109618-and-CVE-2026-109619 Lightweight, non-intrusive asset scanner designed to audit public and perimeter network assets for vulnerable PHP versions susceptible to php2shell RCE vectors (CVE-2026-109618 / CVE-2026-109619). Create: 2026-10-22 20:12:57 +0000 UTC Push: 2026-10-22 20:12:59 +0000 UTC |

prince325/CVE-2026-110264 CVE-2026-110264 — GitLab org-ruby regex injection: DoS + RCE exploit suite Create: 2026-10-22 20:04:47 +0000 UTC Push: 2026-10-22 20:04:49 +0000 UTC |

WallcroftUK/CVE-2026-109619 Create: 2026-10-22 19:58:38 +0000 UTC Push: 2026-10-22 19:58:43 +0000 UTC |

hhellll/dev-utility-APIs 20 production APIs on RapidAPI (19 live) by hhelll — flagship: Website Security Scanner with live CVE intelligence. Plus AI email writer, background removal, web reader for AI agents, OCR/PDF, speech-to-text, translation, geocoding, VAT/IBAN, holidays and more. Every API has a free plan. Create: 2026-10-22 19:56:36 +0000 UTC Push: 2026-10-29 05:18:42 +0000 UTC |

webninjjacoder/security-backports-for-php74 Unofficial security backports for PHP 7.4 on Ubuntu 20.04 (focal): fixes CVE-2026-109618 and CVE-2026-109619 for servers without Ubuntu Pro Create: 2026-10-22 19:48:11 +0000 UTC Push: 2026-10-22 19:48:17 +0000 UTC |

FarhadHosen101/PHP2Shell-CVE-2026-109619 Advanced Pre-Auth RCE Exploit for PHP session.upload_progress (CVE-2026-109618 & 109619) by Farhad Hosen. Create: 2026-10-22 19:04:35 +0000 UTC Push: 2026-10-22 19:04:37 +0000 UTC |

al4n4n/CVE-2026-110264 CVE-2026-110264: GitLab pre-auth RCE via Onigmo integer overflow in org-ruby. Docker-based validation, admin check script, attack surface analysis. Create: 2026-10-22 18:22:11 +0000 UTC Push: 2026-10-23 08:52:08 +0000 UTC |

M8seven/cve-2026-12080-qemu-guest-agent-authorized-keys Technical writeup of CVE-2026-12080: local privilege escalation in the QEMU Guest Agent (qga) guest-ssh-add-authorized-keys handler via symlink following. Create: 2026-10-22 18:09:38 +0000 UTC Push: 2026-10-22 18:09:43 +0000 UTC |

colituvpn/CVE-2026-109618 PoC Exploit for CVE-2026-109618 (PHP session.upload_progress + LFI). For educational and authorized security testing only. Create: 2026-10-22 17:56:51 +0000 UTC Push: 2026-10-22 17:56:54 +0000 UTC |