oguz-kagan-akar/CVE-2026-41940-analysis Technical analysis of the cPanel/WHM auth bypass Create: 2026-07-18 05:44:09 +0000 UTC Push: 2026-07-18 05:44:10 +0000 UTC |

tcyph3r/wp2shell-cve-2026-63030-root-cause Create: 2026-07-18 02:49:21 +0000 UTC Push: 2026-07-18 02:49:21 +0000 UTC |

akash-osmsec/CVE-2026-44262- Create: 2026-07-18 02:20:38 +0000 UTC Push: 2026-07-18 02:20:39 +0000 UTC |

zeroc00I/CVE-2026-63030 That wasnt tested on a vulnerable target yet Create: 2026-07-18 01:02:47 +0000 UTC Push: 2026-07-18 01:02:47 +0000 UTC |

Senanfurkan/wordpress-cve-2026-63030 Pre-auth RCE in WordPress Core via REST API batch route confusion + WP_Query SQLi (CVE-2026-63030 / CVE-2026-60137). Detection PoC. Create: 2026-07-18 00:44:18 +0000 UTC Push: 2026-07-18 00:44:21 +0000 UTC |

ungabunga-ctf/CVE-2023-26039 CVE-2023-26039 - ZoneMinder. Any authenticated user can construct an api command to execute any shell command as the web user. Create: 2026-07-17 22:51:34 +0000 UTC Push: 2026-07-17 22:51:35 +0000 UTC |

codeb0ssx/CVE-2026-15583-PoC Academic proof-of-concept demonstrating CVE-2026-15583 for authorized security research. Create: 2026-07-17 21:03:12 +0000 UTC Push: 2026-07-17 21:03:14 +0000 UTC |

chinaxploiter/CVE-2026-46442-PoC Academic proof-of-concept demonstrating CVE-2026-46442 for authorized security research. Create: 2026-07-17 20:52:07 +0000 UTC Push: 2026-07-17 20:52:09 +0000 UTC |

codeb0ssx/CVE-2026-46442-PoC Academic proof-of-concept demonstrating CVE-2026-46442 for authorized security research. Create: 2026-07-17 20:52:07 +0000 UTC Push: 2026-07-17 20:57:22 +0000 UTC |

CerberusMrXi/WordPress-KeepInMind-CVE-2026-9271-Exploit WordPress KeepInMind CVE-2026-9271 Exploit - Tool detecting stored XSS in KeepInMind plugin v0.8.4.2 and below. Built by Sudeepa Wanigarathna, it simulates CSS injection to hijack admin accounts. Features safe testing, attack simulation, credential capture, bulk scanning, reporting. Essential for security researchers. Create: 2026-07-17 20:37:16 +0000 UTC Push: 2026-07-17 20:37:17 +0000 UTC |

tc4dy/CVE-2026-15409-PoC-Exploit ⚡ CVE-2026-15409/15410 SonicWall SMA1000 exploit framework 🔥 SSRF→Erlang RPC→RCE→root privesc. Features: --detect safe check, --exec, --read-file, --privesc, --rpc, interactive shell, batch threading, file write, ws-url override, pipe support. KEV listed CVSS 10.0 actively exploited. Authorized testing only. 🛡️ Use ethically Create: 2026-07-17 17:30:02 +0000 UTC Push: 2026-07-17 17:30:03 +0000 UTC |

tc4dy/CVE-2026-15409-15410-Framework ⚡ CVE-2026-15409/15410 SonicWall SMA1000 multi-exploit framework 🔥 SSRF→Erlang RPC→RCE→root privesc. Features: --detect safe check, --exec, --read-file, --privesc, --rpc, interactive shell, batch threading, file write, ws-url override, pipe support.🛡️ KEV listed CVSS 10.0 actively exploited. Authorized testing only. Use Ethically, Stay Legal. 🔒 Create: 2026-07-17 17:30:02 +0000 UTC Push: 2026-07-17 18:53:15 +0000 UTC |

caofangkuai/CVE-2017-13209 Create: 2026-07-17 16:32:26 +0000 UTC Push: 2026-07-17 16:32:26 +0000 UTC |

oscerd/CVE-2026-48205 Reproducer for CVE-2026-48205: Apache Camel camel-dns dns.* header injection redirecting DNS queries to an attacker-controlled resolver (SSRF via DNS) and enabling internal-hostname reconnaissance (fixed in 4.14.8/4.18.3/4.21.0) Create: 2026-07-17 15:58:52 +0000 UTC Push: 2026-07-17 15:58:52 +0000 UTC |

PN-Tester/CVE-2022-35497 TM4WEB Vulnerability - CVE-2022-35497 Create: 2026-07-17 15:29:31 +0000 UTC Push: 2026-07-17 15:29:32 +0000 UTC |

bekwiner/cve-2026-47777 Create: 2026-07-17 15:22:06 +0000 UTC Push: 2026-07-17 15:22:07 +0000 UTC |

PN-Tester/CVE-2022-35499 TM4Web Vulnerability - CVE-2022-35499 Create: 2026-07-17 15:07:47 +0000 UTC Push: 2026-07-17 15:07:47 +0000 UTC |

BardLaudian/CVE-2023-23752 Python port — original in Ruby by ACCEIS Create: 2026-07-17 14:16:43 +0000 UTC Push: 2026-07-17 14:16:44 +0000 UTC |

thecodeb0ss/CVE-2026-15583 PoC of CVE-2026-15583 Create: 2026-07-17 13:57:47 +0000 UTC Push: 2026-07-17 13:57:48 +0000 UTC |

Shirouuu/CVE-2025-8110-gogs-poc PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink Create: 2026-07-17 13:46:16 +0000 UTC Push: 2026-07-17 13:46:16 +0000 UTC |