Jvr2022/CVE-2026-46420 PoC for CVE-2026-46420, command injection in shivammathur/setup-php via repository-controlled PHP version resolution. Create: 2026-07-18 22:27:39 +0000 UTC Push: 2026-07-18 22:27:39 +0000 UTC |

ChiefYoru/CVE-2026-56291_PoC The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE. Create: 2026-07-18 22:12:04 +0000 UTC Push: 2026-07-18 22:12:19 +0000 UTC |

ChiefYoru/CVE-2026-48939_PoC iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution. Create: 2026-07-18 22:02:28 +0000 UTC Push: 2026-07-18 22:02:28 +0000 UTC |

ChiefYoru/CVE-2026-21628_PoC Unauthenticated Remote Code Execution in Astroid Framework 2.0.0 - 3.3.10 for Joomla Create: 2026-07-18 21:49:35 +0000 UTC Push: 2026-07-18 21:49:54 +0000 UTC |

mhtsec/CVE-2026-63030- WordPress 未授权RCE EXP | CVE-2026-63030 Create: 2026-07-18 21:13:39 +0000 UTC Push: 2026-07-18 21:13:40 +0000 UTC |

mhtsec/CVE-2026-63030 WordPress 未授权RCE EXP | CVE-2026-63030 Create: 2026-07-18 21:13:39 +0000 UTC Push: 2026-07-18 21:18:23 +0000 UTC |

ChiefYoru/CVE-2026-63030_PoC CVE-2026-63030 - WordPress Core Pre-Auth RCE Mass Exploit Create: 2026-07-18 20:46:28 +0000 UTC Push: 2026-07-18 20:46:48 +0000 UTC |

rauljvc8/CVE-2025-68616-Detecting-and-Patching-an-SSRF-in-WeasyPrint-with-Wazuh Hands-on vulnerability management case study: how Wazuh flagged a real SSRF (CVE-2025-68616) in WeasyPrint, and how I reproduced and patched it. Create: 2026-07-18 20:00:50 +0000 UTC Push: 2026-07-18 20:01:22 +0000 UTC |

x0jac0b0x/skullcandy-dime3-cve-2025-20701 Reproduction and analysis of unauthorized Bluetooth Classic pairing behavior consistent with CVE-2025-20701 on Skullcandy Dime 3 earbuds. Create: 2026-07-18 19:27:49 +0000 UTC Push: 2026-07-18 19:28:27 +0000 UTC |

ebrasha/abdal-cve-2026-63030 Abdal CVE-2026-63030 is a professional WordPress vulnerability scanner designed to detect exposure to CVE-2026-63030 through version analysis and REST API security checks. Developed by Ebrahim Shafiei (EbraSha) for cybersecurity research, penetration testing, and WordPress security assessment. Create: 2026-07-18 19:24:30 +0000 UTC Push: 2026-07-18 19:24:31 +0000 UTC |

ebrasha/abdal-cve-2026-60137 Abdal CVE-2026-60137 is an advanced WordPress security scanner for identifying systems potentially affected by the CVE-2026-60137 SQL Injection vulnerability. Developed by Ebrahim Shafiei (EbraSha) for vulnerability assessment, security research, and authorized penetration testing. Create: 2026-07-18 19:23:49 +0000 UTC Push: 2026-07-18 19:23:50 +0000 UTC |

Eangly/CVE-2026-21978 My CVE in Oracle FLEXCUBE Universal Banking Create: 2026-07-18 18:48:09 +0000 UTC Push: 2026-07-18 18:48:10 +0000 UTC |

theNareshofficial/CVE-2021-3129-Lab Create: 2026-07-18 18:42:43 +0000 UTC Push: 2026-07-18 18:42:44 +0000 UTC |

mrx-arafat/CVE-2026-63030-POC Create: 2026-07-18 17:07:39 +0000 UTC Push: 2026-07-18 17:07:56 +0000 UTC |

0xBlackash/CVE-2026-63030 CVE-2026-63030 Create: 2026-07-18 16:24:48 +0000 UTC Push: 2026-07-18 16:24:49 +0000 UTC |

gbrsh/CVE-2026-63030 A critical unauthenticated "remote code execution" vulnerability affecting WordPress Core Create: 2026-07-18 16:17:30 +0000 UTC Push: 2026-07-18 16:17:31 +0000 UTC |

J4ck3LSyN-Gen2/CVE-2026-63030-wp2r00t A fully red-team(offensive security) weaponized variant of wp2shell, built for authorized penetration testing & educational purposes. Create: 2026-07-18 16:07:41 +0000 UTC Push: 2026-07-18 16:07:42 +0000 UTC |

coolnn/CVE-2021-41773-Analysis-And-Fix Create: 2026-07-18 14:58:23 +0000 UTC Push: 2026-07-18 14:58:24 +0000 UTC |

Arturo0x90/CVE-2026-51385 Advisory for CVE-2026-51385. Needed to publish it as GRAPHIFY hasnt recognized the advisory neither publish it, and MITRE assigned CVE-2026-51385, this is the advisory for it. Create: 2026-07-18 14:47:36 +0000 UTC Push: 2026-07-18 14:47:37 +0000 UTC |

Kananosa/CVE-2026-43499-For-Xiaomi-17T-chagall CVE-2026-43499 reproduce in Xiaomi 17T. (kernelsu incomplete) Create: 2026-07-18 14:19:52 +0000 UTC Push: 2026-07-18 14:19:53 +0000 UTC |