Zeppperoni/-CVE-2026-109618-CVE-2026-109619-PHP2Shell-scanner quick and simple powershell based Internal PHP Version Assessment Checks for PHP versions potentially vulnerable to: CVE-2026-109618 / CVE-2026-109619 (PHP2Shell) Create: 2026-10-22 17:51:55 +0000 UTC Push: 2026-10-22 17:51:57 +0000 UTC |

m01000xd/CVE-2024-30084 Create: 2026-10-22 17:48:09 +0000 UTC Push: 2026-10-22 17:52:17 +0000 UTC |

tc4dy/CVE-2026-106173-PoC-Exploit CVE-2026-106173 – FortiSIEM phQueryMaster RCE (CVSS 9.8) | Red/Blue Team suite for unpatched FortiSIEM 7.5.0. 2 tools: Full Exploit (multi-primitive RCE, reverse shell, persistence, creds, readback, mass scan, Tor), Blue Team Checker (exposure detection, HTTP/2 fingerprint, reporting, audit). Only Use Ethically, Stay Legal <3 Create: 2026-10-22 17:17:56 +0000 UTC Push: 2026-10-22 17:17:59 +0000 UTC |

Nishi-Mehta-18/CVE-2026-107079 Security advisory and PoC for CVE-2026-107079 affecting Systrome Validation & Certification 1.0. Create: 2026-10-22 17:08:17 +0000 UTC Push: 2026-10-22 17:08:21 +0000 UTC |

definitiveref/php2shell-CVE-2026-109618-109619-Research One-shot RCE proof of concept for the PHP session.upload_progress use-after-free vulnerabilities (CVE-2026-109618 / CVE-2026-109619). Create: 2026-10-22 16:47:45 +0000 UTC Push: 2026-10-22 16:47:47 +0000 UTC |

TahuCryptsi/poc-gitlab-onigmo-cve-2026-110264 CVE-2026-110264 — GitLab Unauthenticated RCE (Onigmo regex repeat-ID overflow, CVSS 10.0). Docker-verified crash PoC on ruby 3.4.11 + measured heap analysis. Crash-level, non-weaponized. Create: 2026-10-22 16:43:42 +0000 UTC Push: 2026-10-22 16:43:47 +0000 UTC |

TheFool-TAROT/CVE-2026-111497-brotli-pwn CVE-2026-111497: Node.js Brotli decoder OOB write — analysis, PoC, Docker lab Create: 2026-10-22 16:30:53 +0000 UTC Push: 2026-10-22 16:31:10 +0000 UTC |

RuanSerraAzul/CVE-2026-109618-POC CVE-2026-109618 - multipart OOM bailout corruption trigger (PHP < 8.2.35/8.3.36/8.4.27/8.5.12) Create: 2026-10-22 16:03:35 +0000 UTC Push: 2026-10-22 16:06:12 +0000 UTC |

mcpmark-eval-liuhezi/cve-2025-29927-audit Security audit notes for CVE-2025-29927 (Next.js middleware authorization bypass) - upgrade plan for architecture review Create: 2026-10-22 15:58:11 +0000 UTC Push: 2026-10-22 15:58:13 +0000 UTC |

waksboy/php-cve-2026-109618-109619-tester Detecteur CVE-2026-109618 / CVE-2026-109619 (php2shell) pour image Docker ou binaire PHP Create: 2026-10-22 15:51:15 +0000 UTC Push: 2026-10-22 15:51:20 +0000 UTC |

Mr-Red-007/CVE-2026-27739-POC Proof-of-concept scanner for SSRF and header injection in Angular Universal SSR apps. For authorized security testing only Create: 2026-10-22 15:35:25 +0000 UTC Push: 2026-10-22 15:35:27 +0000 UTC |

prox3000/php-7.4-focal-cve-patched Backport of CVE-2026-109618 and CVE-2026-109619 fixes for PHP 7.4 on Ubuntu 20.04 Focal Create: 2026-10-22 15:14:28 +0000 UTC Push: 2026-10-22 15:14:48 +0000 UTC |

bigbluewhale111/Partial-CVE-2026-110264-Reproduce This is a partial CVE-2026-110264 reproduce due to the malicious regex is set by Admin, then be triggered unauth. Create: 2026-10-22 15:01:24 +0000 UTC Push: 2026-10-22 15:01:26 +0000 UTC |

mcpmark-eval-liuhezi/audit-cve-2020-8203 Dependency security audit writeup for lodash CVE-2020-8203 (prototype pollution, GHSA-p6mc-m468-83gw) Create: 2026-10-22 14:54:27 +0000 UTC Push: 2026-10-22 14:54:38 +0000 UTC |

ChaYeWuu/violin-CVE-2026-64560-OS4.0 Xiaomi Pad 7S Pro 12.5在OS4.0.0.14.XAACNXM利用CVE-2026-64560获取ROOT权限。 Create: 2026-10-22 14:50:38 +0000 UTC Push: 2026-10-22 14:50:39 +0000 UTC |

Certbn/PHP2Shell-CVE-2026-109618-CVE-2026-109619- Create: 2026-10-22 14:33:02 +0000 UTC Push: 2026-10-22 14:33:29 +0000 UTC |

seguridadentrerios/CVE-2026-109618-CVE-2026-109619 php2shell Create: 2026-10-22 14:00:26 +0000 UTC Push: 2026-10-22 14:00:28 +0000 UTC |

basesixtythree/B63-POC-CVE-2026-96652 PoC and verification material for CVE-2026-96652 (Plex Media Server timeline SSRF, owner-token disclosure chain) Create: 2026-10-22 14:00:15 +0000 UTC Push: 2026-10-22 14:00:20 +0000 UTC |

BIBILZERODAY/CVE-2026-102785---YooTheme-Mass-Exploit-Webshell.Store- Create: 2026-10-22 13:31:46 +0000 UTC Push: 2026-10-22 13:32:21 +0000 UTC |

stringpilot/CVE-2026-PHP2SHELL-109618 Create: 2026-10-22 13:25:08 +0000 UTC Push: 2026-10-22 13:25:10 +0000 UTC |