oscerd/CVE-2026-49086 PoC reproducer for CVE-2026-49086 (Apache Camel camel-dapr): the pub/sub consumer copies the untrusted CloudEvent's pubsubName/topic into producer-routing headers, letting an attacker redirect a republished message to an arbitrary Dapr pub/sub component+topic (confused deputy). Fixed in 4.14.8/4.18.3/4.21.0. Create: 2026-07-20 12:12:06 +0000 UTC Push: 2026-07-20 12:12:10 +0000 UTC |

0x00phantom-hat/CVE-2026-5029-Exploit Create: 2026-07-20 11:43:06 +0000 UTC Push: 2026-07-20 11:43:07 +0000 UTC |

Dungsocool/CVE-2024-23897 Create: 2026-07-20 10:59:31 +0000 UTC Push: 2026-07-20 10:59:52 +0000 UTC |

N3xtGenH4cker/CVE-2026-63030-CVE-2026-60137_wp2shell-checker Create: 2026-07-20 10:25:32 +0000 UTC Push: 2026-07-20 10:25:33 +0000 UTC |

HORKimhab/CVE-2026-60121-CVE-2026-61498 CVE-2026-60121, CVE-2026-61498 - Draft Create: 2026-07-20 08:55:36 +0000 UTC Push: 2026-07-20 08:55:41 +0000 UTC |

oscerd/CVE-2026-49042 PoC reproducer for CVE-2026-49042 (Apache Camel camel-langchain4j-tools): a prompt-injected LLM's tool-call arguments become unfiltered Exchange headers, hijacking the tool route's exec: sink for RCE. Fixed in 4.14.8/4.18.3/4.21.0. Create: 2026-07-20 08:23:46 +0000 UTC Push: 2026-07-20 08:23:49 +0000 UTC |

oscerd/CVE-2026-48206 Reproducer for CVE-2026-48206: Apache Camel camel-jira IssueKey (and other non-Camel-prefixed) header injection driving arbitrary JIRA issue operations with the endpoint's service-account credentials (fixed in 4.14.8/4.18.3/4.21.0) Create: 2026-07-20 07:19:04 +0000 UTC Push: 2026-07-20 07:19:08 +0000 UTC |

EvtDanya/CVE-2026-4858 CVE-2026-4858 research Create: 2026-07-20 06:52:54 +0000 UTC Push: 2026-07-20 06:52:55 +0000 UTC |

Neobee714/CVE-2025-57819-POC FreePBX 未认证SQL注入导致远程代码执行，FreePBX 15 (低于 15.0.66)、16 (低于 16.0.89)、17 (低于 17.0.3)。该漏洞位于商业化“endpoint”模块中，因对用户输入过滤不严，允许未认证的攻击者绕过管理员权限，执行SQL注入，并最终实现远程代码执行 Create: 2026-07-20 06:20:30 +0000 UTC Push: 2026-07-20 06:20:30 +0000 UTC |

joaovicdev/EXPLOIT-CVE-2026-63030 Create: 2026-07-20 04:58:59 +0000 UTC Push: 2026-07-20 04:59:00 +0000 UTC |

kaiw-icspark25/PrintNightmare-CVE-2021-1675-Analysis Create: 2026-07-20 04:57:22 +0000 UTC Push: 2026-07-20 04:57:23 +0000 UTC |

administrator-01001/CVE-2026-63030 Proof-of-concept exploit for CVE-2026-63030, a pre-authentication vulnerability in WordPress (versions 6.9.0 through 7.0.1). Create: 2026-07-20 01:20:53 +0000 UTC Push: 2026-07-20 01:20:54 +0000 UTC |

fm0ss/cve-2025-9951-ffmpeg-jp2-poc Create: 2026-07-19 19:56:08 +0000 UTC Push: 2026-07-19 20:06:58 +0000 UTC |

skelersecurity/wordpress-skelersecurity-core-security-CVE-2026-63030 The wp2shell vulnerability chain represents one of the most significant WordPress Core security issues in recent years. Because exploitation begins with an unauthenticated request and can ultimately result in Remote Code Execution, organizations should treat remediation as an emergency. Create: 2026-07-19 19:15:24 +0000 UTC Push: 2026-07-19 19:16:10 +0000 UTC |

Lukols-Dev/wp-cve-2026-63030-check Non-intrusive exposure checker for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 / CVE-2026-60137). Create: 2026-07-19 19:00:06 +0000 UTC Push: 2026-07-19 19:00:06 +0000 UTC |

dewcode91/CVE-2026-60137-POC Create: 2026-07-19 16:58:48 +0000 UTC Push: 2026-07-19 16:58:49 +0000 UTC |

dewcode91/CVE-2026-63030-POC Create: 2026-07-19 16:58:48 +0000 UTC Push: 2026-07-19 17:07:11 +0000 UTC |

4B3R4M4-607D/CVE-2026-63030-POC CVE-2026-63030 / wp2shell Create: 2026-07-19 15:52:33 +0000 UTC Push: 2026-07-19 15:52:34 +0000 UTC |

mumaosong/CVE-2026-43499-cloudflare-gate CVE-2026-43499-cloudflare-gate签名授权计算 Create: 2026-07-19 14:26:09 +0000 UTC Push: 2026-07-19 14:26:09 +0000 UTC |

VeronnX666/CVE-2026-3891 This tool was created solely for educational purposes, not for criminal activities or anything of the sort. Do not misuse this tool. Good luck trying it out. Create: 2026-07-19 14:10:36 +0000 UTC Push: 2026-07-19 14:10:37 +0000 UTC |