imjdl/CVE-2026-42208_lab CVE-2026-42208 lab Create: 2026-04-28 16:57:53 +0000 UTC Push: 2026-04-28 16:57:54 +0000 UTC |

murrez/CVE-2026-1306 PoC list runner for CVE-2026-1306 (WordPress midi-Synth ≤1.1.0): fetches exposed midiSynth_nonce, POSTs export AJAX to drop files under sound/. Authorized security testing only. Create: 2026-04-28 16:27:13 +0000 UTC Push: 2026-04-28 16:27:43 +0000 UTC |

ZeroPathAI/proftpd-CVE-2026-42167-poc POCs to demonstrate CVE-2026-42167 in ProFTPD Create: 2026-04-28 14:35:46 +0000 UTC Push: 2026-04-28 14:35:47 +0000 UTC |

teofoli-matteo/CVE-2022-22963---Software-Vulnerabilities Create: 2026-04-28 14:25:12 +0000 UTC Push: 2026-04-28 14:25:47 +0000 UTC |

F1n1Sh3r/cve-2026-22747-lab Create: 2026-04-28 13:11:38 +0000 UTC Push: 2026-04-28 13:11:39 +0000 UTC |

Ibonok/CVE-2026-33439-PoC CVE-2026-33439 Create: 2026-04-28 07:11:38 +0000 UTC Push: 2026-04-28 07:11:38 +0000 UTC |

mlgzackfly/CVE-2026-6643 ASUSTOR ADM 5.1.2 vpnupload.cgi Format String & Stack Buffer Overflow RCE (CVE-2026-6643) Create: 2026-04-28 03:34:54 +0000 UTC Push: 2026-04-28 03:51:05 +0000 UTC |

B1gN0Se/PwnKit_CVE-2021-4034 Create: 2026-04-28 01:17:40 +0000 UTC Push: 2026-04-28 01:17:40 +0000 UTC |

brandonperezlara/CVE-2025-67223 Esta falla permite a un atacante remoto y sin ningún tipo de autenticación acceder directamente a los tickets de soporte, casos internos y a todos sus archivos adjuntos confidenciales. Al iterar y descargar de forma automatizada los registros de Aranda, dejando la información sensible expuesta a una exfiltración masiva. Create: 2026-04-28 01:04:47 +0000 UTC Push: 2026-04-28 01:42:54 +0000 UTC |

melikesraoz/cve-2022-39227-jwt-auth-bypass-demo Create: 2026-04-27 23:32:48 +0000 UTC Push: 2026-04-27 23:32:49 +0000 UTC |

kaleth4/CVE-2021-44228 Create: 2026-04-27 22:35:05 +0000 UTC Push: 2026-04-27 22:35:06 +0000 UTC |

MohaBars/CVE-2026-21986-VirtualBox-DoS CVE-2026-21986: VirtualBox Shared Folders kernel memory exhaustion DoS Create: 2026-04-27 20:21:54 +0000 UTC Push: 2026-04-27 20:21:55 +0000 UTC |

Pauldechassey/CVE-2026-21636 Create: 2026-04-27 19:48:39 +0000 UTC Push: 2026-04-27 19:48:43 +0000 UTC |

0xdak/CVE-2026-32136_exploit Create: 2026-04-27 18:18:50 +0000 UTC Push: 2026-04-27 18:23:17 +0000 UTC |

shreyas-malhotra/CVE-2026-33439-OpenAM Vulnerable endpoint description for CVE-2026-33439 in OpenAM Create: 2026-04-27 16:22:31 +0000 UTC Push: 2026-04-27 16:23:34 +0000 UTC |

TheMalwareGuardian/CVE-2018-14847 Analysis and PoC for CVE-2018-14847, MikroTik RouterOS Winbox information disclosure vulnerability allowing unauthenticated read access to the credential database. Create: 2026-04-27 13:36:25 +0000 UTC Push: 2026-04-29 15:42:37 +0000 UTC |

ZEROxYakuza/CVE-2026-33826 Create: 2026-04-27 13:32:47 +0000 UTC Push: 2026-04-27 13:32:48 +0000 UTC |

cyhe50/cve-2022-23636-poc Create: 2026-04-27 02:03:37 +0000 UTC Push: 2026-04-27 02:03:47 +0000 UTC |

Hex-Neo/CVE-2026-22812-OpenCode-RCE-exp Create: 2026-04-27 01:38:45 +0000 UTC Push: 2026-04-27 01:39:10 +0000 UTC |

murrez/CVE-2026-0911 CVE-2026-0911 için kimlik doğrulamalı test aracı: Hustle eklentisinde modül içe aktarma üzerinden zayıf dosya yükleme ve “yetim dosya” davranışını kontrol eder; yalnızca izinli ortamlarda ve geçerli WordPress oturumuyla kullanılmalıdır. Create: 2026-04-27 01:00:21 +0000 UTC Push: 2026-04-27 01:00:33 +0000 UTC |