amnsecurity/CVE-2026-6307-Chrome-V8-Sandbox-Escape CVE-2026-6307 - Google Chrome V8 Turbofan Type Confusion Sandbox Escape - PoC & Analysis | CVSS 8.8 HIGH | AMN SECURITY Create: 2026-07-13 13:22:00 +0000 UTC Push: 2026-07-13 13:22:06 +0000 UTC |

surajpandeyp/CVE-2024-40453 Create: 2026-07-13 13:21:15 +0000 UTC Push: 2026-07-13 13:21:15 +0000 UTC |

oscerd/CVE-2026-46454 Reproducer for CVE-2026-46454 — Apache Camel camel-cometd inbound Bayeux header injection (unauthenticated Camel control-header injection → downstream producer steering / RCE) Create: 2026-07-13 12:58:04 +0000 UTC Push: 2026-07-13 12:58:07 +0000 UTC |

oscerd/CVE-2026-46453 Reproducer for CVE-2026-46453 — Apache Camel camel-elasticsearch-rest-client unprefixed-header injection (operation/query override via inbound HTTP headers) Create: 2026-07-13 12:30:14 +0000 UTC Push: 2026-07-13 12:30:18 +0000 UTC |

sentinel-aidefense/CVE-2025-33073 Create: 2026-07-13 11:47:39 +0000 UTC Push: 2026-07-13 11:48:33 +0000 UTC |

addman2/uaf-exploit-cve-2026-23415 Create: 2026-07-13 11:21:08 +0000 UTC Push: 2026-07-13 11:59:13 +0000 UTC |

Qurclinc/CVE-2026-38526 Create: 2026-07-13 10:31:54 +0000 UTC Push: 2026-07-13 10:31:54 +0000 UTC |

mehdi-G/CVE2024 Create: 2026-07-13 09:52:21 +0000 UTC Push: 2026-07-13 09:58:39 +0000 UTC |

0xmrma/CVE-2026-34048 Admin-only terminal bootstrap routes checked only for login state, which let a normal team member drive Coolify's realtime terminal backend and execute commands on team servers. Create: 2026-07-13 09:16:42 +0000 UTC Push: 2026-07-13 09:16:43 +0000 UTC |

oscerd/CVE-2026-43867 Reproducer for CVE-2026-43867 — Apache Camel camel-pqc AwsSecretsManagerKeyLifecycleManager unsafe key-metadata deserialization (RCE) Create: 2026-07-13 08:42:42 +0000 UTC Push: 2026-07-13 08:42:45 +0000 UTC |

4qu4r1um/tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE A combination of CVE-2026-55494 and CVE-2026-62308 to get root privilege RCE in tugtainer Create: 2026-07-13 08:42:15 +0000 UTC Push: 2026-07-14 01:49:02 +0000 UTC |

Is4yev/CVE-2026-57830 Unauthenticated Arbitrary File/Folder Deletion in Joomla Helix Ultimate (JoomShaper) <= 2.2.6 — CVE-2026-57830 Create: 2026-07-13 08:12:57 +0000 UTC Push: 2026-07-13 08:13:18 +0000 UTC |

Is4yev/CVE-2026-57829 Unauthenticated Stored XSS in Joomla Helix Ultimate (JoomShaper) <= 2.2.6 Create: 2026-07-13 08:08:24 +0000 UTC Push: 2026-07-13 08:08:25 +0000 UTC |

HORKimhab/CVE-2026-53805 CVE-2026-53805 - Draft Create: 2026-07-13 07:29:43 +0000 UTC Push: 2026-07-13 07:29:47 +0000 UTC |

1beelze/CVE-2026-5118 Create: 2026-07-13 05:45:30 +0000 UTC Push: 2026-07-13 05:45:31 +0000 UTC |

joehquak/Mi8E5-Unlocker-by-CVE-2026-43499 Multi OS Support: Version for MacOS/Linux and Windows, Fully translated to English Create: 2026-07-13 05:10:04 +0000 UTC Push: 2026-07-13 05:10:05 +0000 UTC |

hacbs-release-tests/collectors-no-cve-2083b95d Create: 2026-07-13 02:20:32 +0000 UTC Push: 2026-07-13 02:21:13 +0000 UTC |

dunihiz/Ph-n-t-ch-CVE-2024-40842-XProtectRemediatorDubRobber-Information-Leak-tr-n-macOS Create: 2026-07-13 01:18:07 +0000 UTC Push: 2026-07-13 01:18:40 +0000 UTC |

Linuxoid-cn/Mi8G3-Unlocker-by-CVE-2026-43499 基于 CVE-2026-43499 的 8E5 机型自动化解锁辅助工具，仅限授权安全研究与自有设备使用。 Create: 2026-07-12 22:59:55 +0000 UTC Push: 2026-07-12 22:59:56 +0000 UTC |

Linuxoid-cn/Mi8E5-Unlocker-by-CVE-2026-43499 基于 CVE-2026-43499 的 8E5 机型自动化解锁辅助工具，仅限授权安全研究与自有设备使用。 Create: 2026-07-12 22:59:55 +0000 UTC Push: 2026-07-12 23:09:51 +0000 UTC |