Kananosa/CVE-2026-43499-For-Xiaomi-17T-chagall CVE-2026-43499 reproduce in Xiaomi 17T. (kernelsu incomplete) Create: 2026-07-18 14:19:52 +0000 UTC Push: 2026-07-18 14:19:53 +0000 UTC |

mverschu/CVE-2026-63030 PoC Exploit of WordPress Core Unauthenticated RCE Create: 2026-07-18 14:06:48 +0000 UTC Push: 2026-07-18 14:29:38 +0000 UTC |

d224407/CVE-2026-43499 CVE-2026-43499 Create: 2026-07-18 13:18:47 +0000 UTC Push: 2026-07-18 13:18:48 +0000 UTC |

4minx/CVE-2026-63030 x Create: 2026-07-18 12:11:11 +0000 UTC Push: 2026-07-18 12:11:12 +0000 UTC |

Het-Kalariya/CVE-2026-20253 Create: 2026-07-18 10:54:12 +0000 UTC Push: 2026-07-18 10:54:13 +0000 UTC |

CybersecSpirit/CVE-2026-63030 Create: 2026-07-18 10:19:10 +0000 UTC Push: 2026-07-18 10:19:11 +0000 UTC |

tahaXafous/CVE-2023-44487-dos PoC for CVE-2023-44487 doing A DoS attack by CVE-2023-44487 just a PoC Create: 2026-07-18 09:38:04 +0000 UTC Push: 2026-07-18 09:38:34 +0000 UTC |

Hunt-Benito/zephyr-lwm2m-firmware-update-oob-read-cve-2026-10672-truncated-package-uri Create: 2026-07-18 09:28:51 +0000 UTC Push: 2026-07-18 09:28:52 +0000 UTC |

Wtrwx/CVE-2026-43499 CVE-2026-43499 (IonStack/GhostLock) curated research snapshot and SM-T878U port notes Create: 2026-07-18 08:11:05 +0000 UTC Push: 2026-07-18 08:11:10 +0000 UTC |

oguz-kagan-akar/CVE-2026-41940-analysis Technical analysis of the cPanel/WHM auth bypass Create: 2026-07-18 05:44:09 +0000 UTC Push: 2026-07-18 05:44:10 +0000 UTC |

tcyph3r/wp2shell-cve-2026-63030-root-cause Create: 2026-07-18 02:49:21 +0000 UTC Push: 2026-07-18 02:49:21 +0000 UTC |

akash-osmsec/CVE-2026-44262- Create: 2026-07-18 02:20:38 +0000 UTC Push: 2026-07-18 02:20:39 +0000 UTC |

zeroc00I/CVE-2026-63030 That wasnt tested on a vulnerable target yet Create: 2026-07-18 01:02:47 +0000 UTC Push: 2026-07-18 01:02:47 +0000 UTC |

Senanfurkan/wordpress-cve-2026-63030 Pre-auth RCE in WordPress Core via REST API batch route confusion + WP_Query SQLi (CVE-2026-63030 / CVE-2026-60137). Detection PoC. Create: 2026-07-18 00:44:18 +0000 UTC Push: 2026-07-18 00:44:21 +0000 UTC |

ungabunga-ctf/CVE-2023-26039 CVE-2023-26039 - ZoneMinder. Any authenticated user can construct an api command to execute any shell command as the web user. Create: 2026-07-17 22:51:34 +0000 UTC Push: 2026-07-17 22:51:35 +0000 UTC |

codeb0ssx/CVE-2026-15583-PoC Academic proof-of-concept demonstrating CVE-2026-15583 for authorized security research. Create: 2026-07-17 21:03:12 +0000 UTC Push: 2026-07-17 21:03:14 +0000 UTC |

chinaxploiter/CVE-2026-46442-PoC Academic proof-of-concept demonstrating CVE-2026-46442 for authorized security research. Create: 2026-07-17 20:52:07 +0000 UTC Push: 2026-07-17 20:52:09 +0000 UTC |

codeb0ssx/CVE-2026-46442-PoC Academic proof-of-concept demonstrating CVE-2026-46442 for authorized security research. Create: 2026-07-17 20:52:07 +0000 UTC Push: 2026-07-17 20:57:22 +0000 UTC |

CerberusMrXi/WordPress-KeepInMind-CVE-2026-9271-Exploit WordPress KeepInMind CVE-2026-9271 Exploit - Tool detecting stored XSS in KeepInMind plugin v0.8.4.2 and below. Built by Sudeepa Wanigarathna, it simulates CSS injection to hijack admin accounts. Features safe testing, attack simulation, credential capture, bulk scanning, reporting. Essential for security researchers. Create: 2026-07-17 20:37:16 +0000 UTC Push: 2026-07-17 20:37:17 +0000 UTC |

tc4dy/CVE-2026-15409-PoC-Exploit ⚡ CVE-2026-15409/15410 SonicWall SMA1000 exploit framework 🔥 SSRF→Erlang RPC→RCE→root privesc. Features: --detect safe check, --exec, --read-file, --privesc, --rpc, interactive shell, batch threading, file write, ws-url override, pipe support. KEV listed CVSS 10.0 actively exploited. Authorized testing only. 🛡️ Use ethically Create: 2026-07-17 17:30:02 +0000 UTC Push: 2026-07-17 17:30:03 +0000 UTC |