SneakyNachos/CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box Full Firefox chain: CVE-2026-2796 wasm type confusion -> content-process RCE, plus CVE-2026-2768 parent-process escape analysis (both fixed in Firefox 148) Create: 2026-08-20 22:14:42 +0000 UTC Push: 2026-08-20 22:15:06 +0000 UTC |

Snizi/CVE-2026-18963-Exploit Exploit for KeyCloak CVE-2026-18963 Create: 2026-08-20 22:01:11 +0000 UTC Push: 2026-08-20 22:01:11 +0000 UTC |

n0xdaemon/cve-2026-19478 CVE-2026-19478: GitLab GraphQL Vulnerability PoC Create: 2026-08-20 20:26:54 +0000 UTC Push: 2026-08-20 20:26:55 +0000 UTC |

dodeepsink/CVE-2026-39987.py This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell. Create: 2026-08-20 19:25:00 +0000 UTC Push: 2026-08-20 19:25:02 +0000 UTC |

ghostpels/CVE-2026-18366 CVE-2026-18366: Events Manager < 7.4.1 — Unauthenticated Privilege Escalation to Administrator. Write-up and proof-of-concept (poc7.py). Create: 2026-08-20 18:32:56 +0000 UTC Push: 2026-08-20 18:32:57 +0000 UTC |

elkhaoudari/CVE-2018-7600-PoC Create: 2026-08-20 18:21:55 +0000 UTC Push: 2026-08-20 18:21:56 +0000 UTC |

nastar-id/CVE-2026-18315-PoC Proof-of-concept for CVE-2026-18315 (TrueBooker WordPress Plugin): Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover Create: 2026-08-20 17:33:36 +0000 UTC Push: 2026-08-20 17:33:37 +0000 UTC |

llaytynher/cve-2026-0740 Create: 2026-08-20 16:30:18 +0000 UTC Push: 2026-08-20 16:30:19 +0000 UTC |

Hunt-Benito/the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt Create: 2026-08-20 15:22:02 +0000 UTC Push: 2026-08-20 15:22:03 +0000 UTC |

l1m3syc/CVE-2024-4947-PoC Create: 2026-08-20 12:47:51 +0000 UTC Push: 2026-08-20 12:48:34 +0000 UTC |

mhassani97/cve-2026-63030-lab wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain Create: 2026-08-20 12:26:03 +0000 UTC Push: 2026-08-20 12:26:04 +0000 UTC |

hacbs-release-tests/collectors-no-cve-20e99500 Create: 2026-08-20 12:23:17 +0000 UTC Push: 2026-08-20 12:23:26 +0000 UTC |

Cxyofficial/k50g-pocof4gt-cve-2026-43499-test Create: 2026-08-20 11:50:39 +0000 UTC Push: 2026-08-20 11:50:40 +0000 UTC |

kyos-public/keycloak-cve-2026-18963-hunt Hunt for CVE-2026-18963 exploitation traces (Keycloak unauthenticated account takeover) in the Keycloak database Create: 2026-08-20 09:25:27 +0000 UTC Push: 2026-08-20 09:25:30 +0000 UTC |

HORKimhab/CVE-2026-32475 CVE-2026-32475 - Draft or TODO Create: 2026-08-20 06:19:50 +0000 UTC Push: 2026-08-20 06:19:53 +0000 UTC |

Mr-ChickenNuggets/CVE-2021-23383 Create: 2026-08-20 06:06:31 +0000 UTC Push: 2026-08-20 06:06:32 +0000 UTC |

0xTerror/CVE-2026-8181 Create: 2026-08-20 04:59:08 +0000 UTC Push: 2026-08-20 04:59:44 +0000 UTC |

SneakyNachos/CVE-2026-2796-escape-wasm-by-using-wasm PoC exploit chain for CVE-2026-2796: SpiderMonkey WebAssembly sandbox escape (signature type confusion -> arbitrary R/W -> RCE) Create: 2026-08-20 02:42:42 +0000 UTC Push: 2026-08-20 02:42:54 +0000 UTC |

Qingizi7/cve-2025-21479_iqooneo8 Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell Create: 2026-08-20 01:13:39 +0000 UTC Push: 2026-08-20 01:13:40 +0000 UTC |

BinaryMasc/CVE-2026-46242 aarch64 race condition checker Create: 2026-08-20 01:07:58 +0000 UTC Push: 2026-08-20 01:07:59 +0000 UTC |