oscerd/CVE-2026-40858 Reproducer for CVE-2026-40858 — Apache Camel camel-infinispan remote aggregation repository unsafe deserialization (RCE) Create: 2026-07-10 07:33:32 +0000 UTC Push: 2026-07-10 07:33:35 +0000 UTC |

bugresearch/CVE-2026-50980 oPnael DNS-Based Cross-Site Scripting (XSS) & Session Hijacking Create: 2026-07-10 06:48:06 +0000 UTC Push: 2026-07-10 06:48:07 +0000 UTC |

bugresearch/CVE-2026-50979 oPanel Authanticated Remote Code Execution via 'advenced/curl' Component Create: 2026-07-10 06:40:08 +0000 UTC Push: 2026-07-10 06:40:09 +0000 UTC |

svespalec/cve-2026-pending Create: 2026-07-10 05:39:04 +0000 UTC Push: 2026-07-10 05:39:08 +0000 UTC |

inforcqb/CVE-2026-43499-pja110 Create: 2026-07-10 03:16:06 +0000 UTC Push: 2026-07-10 03:16:07 +0000 UTC |

aexdyhaxor/CVE-2026-46331 A Proof of Concept (PoC) exploit for CVE-2026-46331 Create: 2026-07-10 03:07:44 +0000 UTC Push: 2026-07-10 03:07:45 +0000 UTC |

BiiTts/CVE-2026-56423-MISP-deleteSelection-BrokenAccessControl PoC for CVE-2026-56423: MISP deleteSelection broken access control (CWE-862, contributor hard-deletes other orgs' Event Reports/Sharing Groups, CVSS 8.8) Create: 2026-07-10 01:27:49 +0000 UTC Push: 2026-07-10 01:27:53 +0000 UTC |

benmevic/cve-2025-22457 Altay takımı haftalık sunumu için yaptığım cve-2025-22457 zafiyeti demo uygulaması Create: 2026-07-09 23:05:20 +0000 UTC Push: 2026-07-09 23:05:20 +0000 UTC |

phil-dirt/CVE-2026-41089-LongLogon CVE-2026-41089 checker: unauthenticated, non-destructive detection for the Netlogon CLDAP stack buffer overflow (CVSS 9.8). Reports whether a domain controller's domain is long enough to crash, without sending the overflow. The binary-verified analysis the public PoCs got wrong. Create: 2026-07-09 22:55:28 +0000 UTC Push: 2026-07-09 22:55:29 +0000 UTC |

L4V4D0/CVE-2026-29519-Lucee-Reflected-XSS Proof of Concept for Reflected XSS in Lucee CFML (CVE-2026-29519) Create: 2026-07-09 22:49:57 +0000 UTC Push: 2026-07-10 04:24:09 +0000 UTC |

BiiTts/CVE-2026-49230-APISIX-jwe-decrypt-Auth-Bypass PoC for CVE-2026-49230: Apache APISIX jwe-decrypt authentication bypass (missing AES-GCM tag validation, CWE-354, CVSS 9.1) Create: 2026-07-09 21:46:14 +0000 UTC Push: 2026-07-09 21:46:17 +0000 UTC |

0x00phantom-hat/CVE-2026-12400-Exploit Create: 2026-07-09 21:10:54 +0000 UTC Push: 2026-07-09 21:10:55 +0000 UTC |

g0thamRabb1t/cve-2026-48908-joomla-sp-page-builder-detection Laboratory validation of CVE-2026-48908 in Joomla SP Page Builder, covering unauthorized icon upload, PHP file write, code execution as www-data, auditd and PCAP evidence, event timeline reconstruction, and SOC detection recommendations. Includes Polish and English reports. Create: 2026-07-09 20:42:00 +0000 UTC Push: 2026-07-09 20:42:00 +0000 UTC |

nmagill123/CVE-2026-61343-poc-librebooking-rce Librebooking Admin RCE PoC CVE-2026-61343 Create: 2026-07-09 20:00:31 +0000 UTC Push: 2026-07-09 20:00:33 +0000 UTC |

Stickxx00/CVE-2025-43782 OpenSSL TLS handshake buffer overflow Create: 2026-07-09 18:38:40 +0000 UTC Push: 2026-07-09 18:39:02 +0000 UTC |

gagaltotal/CVE-2026-57517-CWP CVE-2026-57517 CWP Create: 2026-07-09 16:58:21 +0000 UTC Push: 2026-07-09 16:58:23 +0000 UTC |

endusdksla/XWiki-SolrSearch-Unauthenticated-RCE-CVE-2025-24893- Create: 2026-07-09 16:09:49 +0000 UTC Push: 2026-07-09 16:10:31 +0000 UTC |

endusdksla/xwiki-cve-2025-24893 Create: 2026-07-09 16:09:49 +0000 UTC Push: 2026-07-09 16:10:31 +0000 UTC |

surajpandeyp/CVE-2025-32375 Create: 2026-07-09 15:51:01 +0000 UTC Push: 2026-07-09 15:51:01 +0000 UTC |

onxvyn/CVE-2025-2945 Create: 2026-07-09 15:10:56 +0000 UTC Push: 2026-07-09 15:10:56 +0000 UTC |