minwunn/CVE-2026-63030-wp2shell-lab Create: 2026-08-05 03:41:39 +0000 UTC Push: 2026-08-05 03:41:40 +0000 UTC |

minwunn/wp2shell-CVE-2026-63030-lab Create: 2026-08-05 03:41:39 +0000 UTC Push: 2026-08-05 03:41:40 +0000 UTC |

minwunn/wp2shell-CVE-2026-63030 Create: 2026-08-05 03:41:39 +0000 UTC Push: 2026-08-05 03:41:40 +0000 UTC |

JasonW88/esp32-cve-2025-27840-power-trace-experiment Firmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth commands (CVE-2025-27840). Uses ESP-IDF v5.0.8 and v5.0.9. Create: 2026-08-05 03:06:49 +0000 UTC Push: 2026-08-05 03:06:51 +0000 UTC |

BiiTts/CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal PoC + analysis for CVE-2026-54917 — SeaweedFS S3 gateway cross-bucket path traversal (CVSS 10.0, <4.30). Read/write any bucket via .. in the object key. Create: 2026-08-05 01:44:54 +0000 UTC Push: 2026-08-05 01:44:57 +0000 UTC |

qflksheep/CVE-2026-67689-FineAdmin.Mvc-vulnerability Create: 2026-08-05 00:49:10 +0000 UTC Push: 2026-08-05 00:49:10 +0000 UTC |

qflksheep/CVE-2026-67687-ICS-Park-Smart-Park-Management-System-v2.0 ICS-Park Smart Park Management System v2.0 Create: 2026-08-05 00:39:32 +0000 UTC Push: 2026-08-05 00:39:32 +0000 UTC |

cristhiansm0/TXDXCristhian_2023-CVE-38831 CVE-2023-38831 WinRAR lab: detection with Sysmon/Wazuh, reverse engineering with Ghidra, patch analysis, and remediation. Create: 2026-08-05 00:28:12 +0000 UTC Push: 2026-08-05 00:28:12 +0000 UTC |

AbdullahMaqbool22/CVE-2026-60137-WordPress-Core-SQL-Injection-PoC Non-destructive proof-of-concept and verification harness for **CVE-2026-60137**, a blind SQL injection in WordPress core (`WP_Query::author__not_in`), reachable via the REST API's `author_exclude` parameter. Create: 2026-08-05 00:11:15 +0000 UTC Push: 2026-08-05 00:11:16 +0000 UTC |

Sachinart/CVE-2026-60004-gitea-0day CVE-2026-60004 — Gitea <= 1.27.0 Pre-Auth RCE Create: 2026-08-04 22:51:05 +0000 UTC Push: 2026-08-04 22:51:05 +0000 UTC |

abdugafforov-bobur/CVE-2026-67620-poc CVE-2026-67620 - Flowise SSRF via incomplete cloud-metadata deny-list (Oracle OCI 192.0.0.192 + Alibaba 100.100.100.200 bypass the DEFAULT_DENY_LIST) Create: 2026-08-04 22:04:56 +0000 UTC Push: 2026-08-04 22:05:00 +0000 UTC |

bdalrhmnhamdalalm-jpg/CVE-2018-15473-User-Enumeration- python code use to check for user in ssh Create: 2026-08-04 21:52:18 +0000 UTC Push: 2026-08-04 21:52:18 +0000 UTC |

Foxer131/CVE-2026-70481 Create: 2026-08-04 21:42:52 +0000 UTC Push: 2026-08-04 21:42:53 +0000 UTC |

0xdak/CVE-2026-59243_exploit Create: 2026-08-04 20:17:55 +0000 UTC Push: 2026-08-04 20:17:56 +0000 UTC |

JVBotelho/cve-2026-69243-poc-aiohttp-smuggling Create: 2026-08-04 19:45:53 +0000 UTC Push: 2026-08-04 19:45:59 +0000 UTC |

webshellseo8/CVE-2026-12720-Proof-of-Concept Create: 2026-08-04 17:49:50 +0000 UTC Push: 2026-08-04 17:50:32 +0000 UTC |

CerberusMrXi/Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790 Apache HTTP Server 2.4.x mod_lua Buffer Overflow (CVE-2021-44790) - Advanced exploitation framework with fingerprinting, multi-stage scanning, plugin architecture, professional reporting, screenshot capture, SQLite database, and 95%+ confidence detection. Author: Sudeepa Wanigarathna. Create: 2026-08-04 17:37:16 +0000 UTC Push: 2026-08-04 17:37:17 +0000 UTC |

dev1681/CVE-2026-31431 copyfail poc here Create: 2026-08-04 16:38:07 +0000 UTC Push: 2026-08-04 16:38:20 +0000 UTC |

George0Papasotiriou/CVE-2026-22020-Weak-Seed-in-Quantum-Key-Distribution-Error-Correction Create: 2026-08-04 14:44:44 +0000 UTC Push: 2026-08-04 14:44:45 +0000 UTC |

George0Papasotiriou/CVE-2026-22019-libcurl-HTTP-2-CONNECT-Tunnel-Mixup Create: 2026-08-04 14:43:11 +0000 UTC Push: 2026-08-04 14:43:51 +0000 UTC |