oscerd/CVE-2026-78162 Reproducer for CVE-2026-78162 (Apache Camel camel-hazelcast): ReplicatedHazelcastAggregationRepository starts a Hazelcast member with no Java deserialization filter — Camel Spring Boot + Camel Quarkus Create: 2026-10-16 09:10:42 +0000 UTC Push: 2026-10-16 09:10:49 +0000 UTC |

C-Robinson-gass/cvent-connect-europe-2026 Cvent CONNECT Europe 2026 — Vision Mix Run of Show Create: 2026-10-16 08:42:38 +0000 UTC Push: 2026-10-16 08:42:50 +0000 UTC |

C-Robinson-gass/gp-cventconnecteurope2026-ref-x7k2 Cvent CONNECT Europe 2026 — Vision Mix Run of Show Create: 2026-10-16 08:42:38 +0000 UTC Push: 2026-10-16 08:48:02 +0000 UTC |

lion9453/CVE-2026-96889-nextjs-rce Lab PoC for CVE-2026-96889: Next.js Image Optimization SVG typed as AVIF reaches librsvg UAF (RUSTSEC-2026-0305). Unauthenticated RCE on glibc Linux. Create: 2026-10-16 06:31:29 +0000 UTC Push: 2026-10-16 06:31:37 +0000 UTC |

lion9453/CVE-2026-96889 Lab PoC for CVE-2026-96889: Next.js Image Optimization SVG typed as AVIF reaches librsvg (RUSTSEC-2026-0305) Create: 2026-10-16 06:28:59 +0000 UTC Push: 2026-10-16 06:29:01 +0000 UTC |

rxsklife/CVE-2026-104745 CVE-2026-104745 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the `alg_wc_ev_verify_email` parameter in versions up to, and including, 3.3.0. Create: 2026-10-16 06:22:45 +0000 UTC Push: 2026-10-16 06:22:46 +0000 UTC |

Syscallh00k/CVE-2026-111444 Wheels SQL injection on MySQL/MariaDB with backslash escaping enabled Create: 2026-10-16 04:33:20 +0000 UTC Push: 2026-10-16 04:33:22 +0000 UTC |

Syscallh00k/CVE-2026-111389 Frappe HRMS missing input validation SQL injection vulnerability Create: 2026-10-16 04:28:08 +0000 UTC Push: 2026-10-16 04:28:10 +0000 UTC |

Sib1110/cve-2024-2961 Create: 2026-10-16 01:19:38 +0000 UTC Push: 2026-10-16 01:19:40 +0000 UTC |

hoodoer/VsockDrop-Adapted-CVE-2026-53365 A slightly more robust version of MaherAzzouzi's POC, created by my agent on the fly during testing. Create: 2026-10-16 00:40:34 +0000 UTC Push: 2026-10-16 00:40:36 +0000 UTC |

manalejandro/CVE-2026-64507 CVE-2026-64507 — PoC: IBPB flush on BPF JIT allocation Create: 2026-10-15 22:48:12 +0000 UTC Push: 2026-10-15 22:48:41 +0000 UTC |

M3aCulpa/CVE-2026-104715 CVE-2026-104715: cifs-utils credentials-file option injection (local root) Create: 2026-10-15 22:03:17 +0000 UTC Push: 2026-10-15 22:05:34 +0000 UTC |

akinerkisa/blindllama-cve-2026-102697 Create: 2026-10-15 20:02:09 +0000 UTC Push: 2026-10-15 20:04:57 +0000 UTC |

KernelDotDLL/CVE-2026-108578 Neterbit NW-431F unauthenticated SMS disclosure Create: 2026-10-15 16:33:17 +0000 UTC Push: 2026-10-15 16:51:44 +0000 UTC |

0xBlackash/CVE-2026-110912 CVE-2026-110912 Create: 2026-10-15 15:21:35 +0000 UTC Push: 2026-10-15 15:58:31 +0000 UTC |

feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu 一加 15T（PLZ110）临时 root + KernelSU per-boot 接管：CVE-2026-64560 移植，不写分区、重启即失效。内核 6.12.69-android16-6-g242e1a07f878。 Create: 2026-10-15 14:19:23 +0000 UTC Push: 2026-10-15 14:25:19 +0000 UTC |

FurkanKAYAPINAR/CVE-2026-108097 Defensive, non-exploit detector for CVE-2026-108097 (SA-CORE-2026-014) — Drupal core Field UI RCE Create: 2026-10-15 13:45:28 +0000 UTC Push: 2026-10-16 12:05:38 +0000 UTC |

shlln/CVE-2026-110958 Create: 2026-10-15 13:12:29 +0000 UTC Push: 2026-10-15 13:12:31 +0000 UTC |

Iceman2050/cve-2026-110447-checker Free CLI: check a Nextcloud instance for CVE-2026-110447 exposure. Stdlib only, honest verdicts. By Ingenious AI. Create: 2026-10-15 12:58:28 +0000 UTC Push: 2026-10-15 12:58:33 +0000 UTC |

BlackHatExploitation/CVE-2026-85097 CVE-2026-85097 — Bricksforge <= 3.1.8.9 unauth file upload to RCE. GIF/PHP polyglot + temporaryFileUploads.url mismatch. python3 exploit.py --url http://TARGET Create: 2026-10-15 12:41:13 +0000 UTC Push: 2026-10-15 12:41:15 +0000 UTC |