andreassudo/CVEHarvest Multi-CVE exploitation framework in C++20 for Windows offensive testing and research Create: 2026-10-08 08:05:11 +0000 UTC Push: 2026-10-08 08:12:00 +0000 UTC |

CyberCTF/vulhub-jenkins-cve-2018-1000861 Vulhub jenkins/CVE-2018-1000861: Jenkins Stapler unauthenticated RCE, run with Isoloom Create: 2026-10-08 06:56:55 +0000 UTC Push: 2026-10-08 19:31:19 +0000 UTC |

CyberCTF/vulhub-weblogic-cve-2017-10271 Vulhub weblogic/CVE-2017-10271: WebLogic wls-wsat XMLDecoder RCE, run with Isoloom Create: 2026-10-08 06:56:16 +0000 UTC Push: 2026-10-08 19:31:33 +0000 UTC |

CyberCTF/vulhub-openssl-cve-2014-0160 Vulhub openssl/CVE-2014-0160: Heartbleed on nginx with OpenSSL 1.0.1c, run with Isoloom Create: 2026-10-08 06:53:52 +0000 UTC Push: 2026-10-08 19:31:24 +0000 UTC |

CyberCTF/vulhub-bash-cve-2014-6271 Vulhub bash/CVE-2014-6271: Shellshock through Apache CGI, run with Isoloom Create: 2026-10-08 06:53:46 +0000 UTC Push: 2026-10-08 19:31:15 +0000 UTC |

CyberCTF/vulhub-httpd-cve-2021-41773 Vulhub httpd/CVE-2021-41773: Apache 2.4.49 path traversal and CGI RCE, run with Isoloom Create: 2026-10-08 06:53:40 +0000 UTC Push: 2026-10-08 19:31:17 +0000 UTC |

rxsklife/CVE-2026-21589 CVE-2026-21589 is a critical (CVSS 9.3) arbitrary file access vulnerability affecting all versions of eight Atlassian Data Center products, including Jira, Confluence, Bitbucket, Bamboo, Crowd, Crucible, Fisheye, and Jira Service Management. Create: 2026-10-08 05:41:15 +0000 UTC Push: 2026-10-08 05:41:16 +0000 UTC |

rxsklife/CVE-2026-105192 CVE-2026-105192 is a critical (CVSS 9.8) vulnerability in LMCache, an open-source distributed key-value cache for LLM inference engines like vLLM. Create: 2026-10-08 05:33:03 +0000 UTC Push: 2026-10-08 05:33:05 +0000 UTC |

theendofabbys/CVE-2026-61424 Create: 2026-10-08 03:49:51 +0000 UTC Push: 2026-10-08 03:49:52 +0000 UTC |

CyberCTF/vulhub-spring-cve-2022-22965 Vulhub spring/CVE-2022-22965: Spring4Shell on Spring WebMVC 5.3.17, run with Isoloom Create: 2026-10-08 03:44:16 +0000 UTC Push: 2026-10-08 19:31:26 +0000 UTC |

CyberCTF/vulhub-log4j-cve-2021-44228 Vulhub log4j/CVE-2021-44228: Log4Shell in Apache Solr 8.11.0, run with Isoloom Create: 2026-10-08 03:44:05 +0000 UTC Push: 2026-10-08 19:31:22 +0000 UTC |

theendofabbys/CVE-2026-49049 Create: 2026-10-08 03:35:47 +0000 UTC Push: 2026-10-08 03:35:48 +0000 UTC |

theendofabbys/CVE-2026-56291 Create: 2026-10-08 03:31:32 +0000 UTC Push: 2026-10-08 03:32:15 +0000 UTC |

theendofabbys/CVE-2026-48907 Create: 2026-10-08 03:23:34 +0000 UTC Push: 2026-10-08 03:23:35 +0000 UTC |

HORKimhab/CVE-2026-Wordpress CVE-2026-Wordpress Create: 2026-10-08 02:00:12 +0000 UTC Push: 2026-10-08 02:00:17 +0000 UTC |

yuwkaaa/CVE-2026-107268 Drupal: miniorange_2fa Create: 2026-10-08 01:01:40 +0000 UTC Push: 2026-10-08 01:01:41 +0000 UTC |

davidvrns/CVE-2026-5430-WSO2 Detection PoC for CVE-2026-5430 — unauthenticated JWT algorithm bypass (CVSS 10.0) affecting WSO2 API Manager 4.1.0–4.6.0. Read-only assessment tool with patch confirmation and WAF detection. Authorized use only. Create: 2026-10-08 00:42:07 +0000 UTC Push: 2026-10-08 00:42:31 +0000 UTC |

QASIM1401/CVE-2025-58226-PoC CVE-2025-58226 — 3D FlipBook <= 1.16.16 unauthenticated sensitive data exposure: two-stage PoC (enumerate -> leak file URLs -> download) + nuclei template Create: 2026-10-07 23:46:42 +0000 UTC Push: 2026-10-07 23:46:54 +0000 UTC |

ntru0/CVE_2024_38063_homelab Create: 2026-10-07 21:17:19 +0000 UTC Push: 2026-10-07 21:17:20 +0000 UTC |

Kolya080808/CVE-2026-97332 CVE-2026-97332 PoC (WordPress Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass) Create: 2026-10-07 20:29:45 +0000 UTC Push: 2026-10-07 20:29:46 +0000 UTC |