huseyinstif/CVE-2026-13036-PoC PoC for CVE-2026-13036 — Use-after-free in Blink WidgetBase::UpdateSurfaceAndScreenInfo (Chrome < 149.0.7827.197) Create: 2026-06-26 06:38:17 +0000 UTC Push: 2026-06-26 06:38:20 +0000 UTC |

offseckit/CVE-2026-24207-triton PoC + analysis for CVE-2026-24207 / CVE-2026-24206 — NVIDIA Triton SageMaker & Vertex AI auth-restriction bypass + RCE chain Create: 2026-06-26 06:30:29 +0000 UTC Push: 2026-06-26 06:30:32 +0000 UTC |

offseckit/CVE-2026-24207 CVE-2026-24207 — NVIDIA Triton SageMaker auth bypass to unauth RCE. Detection script, bypass demo, RCE-chain PoC, and IDS rules. Create: 2026-06-26 06:30:29 +0000 UTC Push: 2026-06-26 06:30:32 +0000 UTC |

gagaltotal/CVE-2026-26980-Ghost-CMS-Api CVE-2026-26980 - Ghost CMS Content API SQL Injection Create: 2026-06-26 05:57:53 +0000 UTC Push: 2026-06-26 05:57:54 +0000 UTC |

12hrformat/CVE-2026-35273-POC Create: 2026-06-26 05:21:08 +0000 UTC Push: 2026-06-26 05:21:08 +0000 UTC |

mooder1/dirtyclone-CVE-2026-43503 Create: 2026-06-26 00:20:58 +0000 UTC Push: 2026-06-26 00:22:35 +0000 UTC |

0xBlackash/CVE-2026-43503 CVE-2026-43503 Create: 2026-06-25 21:58:41 +0000 UTC Push: 2026-06-25 21:58:42 +0000 UTC |

mirackayikci/CVE-2026-55584 CVE-2026-55584 — phpSysInfo IP Allowlist Bypass Create: 2026-06-25 18:29:12 +0000 UTC Push: 2026-06-25 18:29:14 +0000 UTC |

tech-mainak/CVE-2023-45866---Blue-exploit POC for CVE-2023-45866 affecting Latest Android devices. Create: 2026-06-25 17:50:37 +0000 UTC Push: 2026-06-25 17:50:37 +0000 UTC |

joaquinrrr/CVE-2025-8110 PoC exploit for CVE-2025-8110 Create: 2026-06-25 16:48:18 +0000 UTC Push: 2026-06-25 16:48:19 +0000 UTC |

do4choo/CVE-2026-3227 Create: 2026-06-25 16:31:07 +0000 UTC Push: 2026-06-25 16:31:08 +0000 UTC |

hacbs-release-tests/collectors-no-cve-c87b201b Create: 2026-06-25 13:31:35 +0000 UTC Push: 2026-06-25 13:32:05 +0000 UTC |

renzi25031469/CVE-2026-4253-Scanner Non-destructive vulnerability scanner for NGINX HTTP/3 (ngx_http_v3_module). It ONLY performs a safe probe: opens an HTTP/3 (QUIC) connection, sends a single HEAD request and inspects the `Server` response header. It NEVER attempts to reopen a QPACK encoder stream or trigger the use-after-free. Create: 2026-06-25 12:11:30 +0000 UTC Push: 2026-06-25 12:11:31 +0000 UTC |

Baba01hacker666/CVE-2026-23111 Create: 2026-06-25 10:51:57 +0000 UTC Push: 2026-06-25 10:52:02 +0000 UTC |

W5M1n9/Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230 Create: 2026-06-25 09:56:26 +0000 UTC Push: 2026-06-25 09:58:59 +0000 UTC |

jaf0rk/CVE-2025-2783-CVE-2025-6554-fullchain Create: 2026-06-25 08:39:47 +0000 UTC Push: 2026-06-25 08:39:47 +0000 UTC |

7whyex/CVE-2026-45321-Tanstack Create: 2026-06-25 08:21:49 +0000 UTC Push: 2026-06-25 08:22:25 +0000 UTC |

0xBlackash/CVE-2026-7574 CVE-2026-7574 Create: 2026-06-25 08:11:45 +0000 UTC Push: 2026-06-25 08:11:46 +0000 UTC |

veronimo669/pdf.js-CVE-2024-4367 SCAN END POC THE CVE-2024-4367 Create: 2026-06-25 07:44:44 +0000 UTC Push: 2026-06-25 07:44:45 +0000 UTC |

Vedantrana73/cve-2019-9053-py3 Unauthenticated time-based blind SQL injection exploit for CMS Made Simple ≤ 2.2.9 (CVE-2019-9053), ported to Python 3. Create: 2026-06-25 07:05:57 +0000 UTC Push: 2026-06-25 07:05:58 +0000 UTC |