oscerd/CVE-2026-49099 PoC reproducer for CVE-2026-49099 (Apache Camel camel-salesforce): the non-Camel-prefixed sObjectQuery header escapes the HTTP header filter and overrides the producer's configured SOQL (SOQL injection / broken access control). Fixed in 4.14.8/4.18.3/4.21.0. Create: 2026-07-21 09:20:20 +0000 UTC Push: 2026-07-21 09:20:23 +0000 UTC |

johnhsb/dirty-frag-cve-2026-mitigation Create: 2026-07-21 08:59:31 +0000 UTC Push: 2026-07-21 08:59:36 +0000 UTC |

qianlijaingshan/n8n-cve-2026-21858 CVE-2026-21858 + CVE-2025-68613 — n8n unauthenticated file read to RCE chain exploit Create: 2026-07-21 08:36:18 +0000 UTC Push: 2026-07-21 08:36:39 +0000 UTC |

Ghalendar/CVE-2026-27971_POC CVE-2026-27971 qwik rce Create: 2026-07-21 07:55:45 +0000 UTC Push: 2026-07-21 07:57:04 +0000 UTC |

HORKimhab/CVE-2026-6875 CVE-2026-6875 - Draft Create: 2026-07-21 07:53:18 +0000 UTC Push: 2026-07-21 07:53:22 +0000 UTC |

YumeSecurity/CVE-2018-3214 my exploit for PrimeFaces EL Injection Create: 2026-07-21 05:36:23 +0000 UTC Push: 2026-07-21 05:36:24 +0000 UTC |

suominen/CVE-2026-42533 Create: 2026-07-21 05:27:18 +0000 UTC Push: 2026-07-21 05:27:19 +0000 UTC |

zavikhttak/Follina-CVE-2022-30190-Analysis Threat analysis writeup for Follina (CVE-2022-30190) — Microsoft MSDT RCE zero-day exploited in the wild. Covers static analysis, VirusTotal, OSINT, MITRE ATT&CK T1059, and detection engineering using Windows Event ID 4688. Create: 2026-07-21 03:59:10 +0000 UTC Push: 2026-07-21 03:59:10 +0000 UTC |

DappaNISM/mass_cve-2021-41773 Mirrored from tegal1337/mass_cve-2021-41773 Create: 2026-07-21 03:07:17 +0000 UTC Push: 2026-07-21 03:07:21 +0000 UTC |

DappaNISM/CVE-2022-0441 Mirrored from tegal1337/CVE-2022-0441 Create: 2026-07-21 03:01:11 +0000 UTC Push: 2026-07-21 03:01:12 +0000 UTC |

HydraSoft/CVE-2026-41089-Netlogon-RCE Technical analysis and Proof-of-Concept (PoC) for CVE-2026-41089, a critical unauthenticated Remote Code Execution (RCE) vulnerability in the Windows Netlogon service affecting Domain Controllers. Create: 2026-07-21 02:05:07 +0000 UTC Push: 2026-07-21 02:05:08 +0000 UTC |

MinhHK68/CVE-2026-13156 CVE-2026-13156 Vulnerability Advisory & PoC — Discovered by Huynh Kien Minh (MinhHK). Create: 2026-07-21 01:46:42 +0000 UTC Push: 2026-07-21 01:46:43 +0000 UTC |

NicPWNs/CVE-2026-62183 Apache Syncope: User self-service privilege escalation Create: 2026-07-20 22:56:04 +0000 UTC Push: 2026-07-20 22:56:05 +0000 UTC |

hakaioffsec/CVE-2026-12191 PoC for CVE-2026-12191 Create: 2026-07-20 19:23:29 +0000 UTC Push: 2026-07-20 19:23:30 +0000 UTC |

Ch4120N/CVE-2026-63030 Create: 2026-07-20 18:20:41 +0000 UTC Push: 2026-07-20 18:20:42 +0000 UTC |

mysterioinfinino-rgb/YellowKey-Bitlocker-CVE-2026-45585 YellowKey BitLocker CVE-2026-45585 is an open-source utility to extract, backup, and organize BitLocker recovery keys on Windows encrypted drives. Automate volume decryption, manage drive encryption states via command-line tools, export secure configuration files, and track recovery key logs. Download direct repository setup files. Create: 2026-07-20 18:10:40 +0000 UTC Push: 2026-07-20 18:10:41 +0000 UTC |

yellowkeys/YellowKey-Bitlocker-CVE-2026-45585 YellowKey BitLocker CVE-2026-45585 is an open-source utility to extract, backup, and organize BitLocker recovery keys on Windows encrypted drives. Automate volume decryption, manage drive encryption states via command-line tools, export secure configuration files, and track recovery key logs. Download direct repository setup files. Create: 2026-07-20 18:10:40 +0000 UTC Push: 2026-07-20 18:14:38 +0000 UTC |

CerberusMrXi/CVE-2026-44680-MikroORM-SQL-Injection-Exploit-Framework PoC tool for CVE-2026-44680 affecting MikroORM ≤7.0.13. Exploits JSON path injection to extract database contents via UNION-based attacks. Features vulnerability detection, automated data extraction, table enumeration, and blind injection support. Includes proxy integration for Burp Suite and WAF evasion techniques. Create: 2026-07-20 17:46:14 +0000 UTC Push: 2026-07-20 17:46:15 +0000 UTC |

oscerd/CVE-2026-49098 PoC reproducer for CVE-2026-49098 (Apache Camel camel-kafka): the non-Camel-prefixed kafka.OVERRIDE_TOPIC header escapes the upstream HTTP header filter and overrides the producer's configured topic, injecting an attacker-forged record onto a privileged Kafka topic (cross-topic injection). Fixed in 4.14.8/4.18.3/4.21.0. Create: 2026-07-20 16:39:45 +0000 UTC Push: 2026-07-20 16:39:48 +0000 UTC |

baktistr/cve-2026-23550-poc Create: 2026-07-20 16:03:51 +0000 UTC Push: 2026-07-20 16:03:52 +0000 UTC |