BishopFox/CVE-2026-11374-check Detection script for CVE-2026-11374 Create: 2026-07-20 15:52:06 +0000 UTC Push: 2026-07-20 15:52:10 +0000 UTC |

UnusualGiraffe/PoC-Unauthenticated-RCE-in-WatchGuard-Fireware-12.7-Build-640389-CVE-2025-9242 Version-pinned archival PoC for CVE-2025-9242 on WatchGuard Fireware 12.7 build 640389. Includes safe detection, offline payload analysis, and an explicitly gated reverse-shell exploit using a caller-supplied IPv4 callback endpoint. Create: 2026-07-20 15:11:40 +0000 UTC Push: 2026-07-20 15:11:40 +0000 UTC |

dinhvaren/cve-2026-55685-PoC Create: 2026-07-20 14:22:29 +0000 UTC Push: 2026-07-20 14:22:30 +0000 UTC |

soverineg/cve-2026-41940-PoC A cPanel and WHM authentication bypassing tool Create: 2026-07-20 14:15:54 +0000 UTC Push: 2026-07-20 14:23:26 +0000 UTC |

HELLBOY3110/cve-2026-16219-croogo-lab Create: 2026-07-20 14:01:52 +0000 UTC Push: 2026-07-20 14:01:53 +0000 UTC |

oscerd/CVE-2026-49097 PoC reproducer for CVE-2026-49097 (Apache Camel camel-irc): the non-Camel-prefixed irc.sendTo header escapes the HTTP header filter and overrides the producer's configured channel, redirecting an IRC message to an attacker-chosen destination. Fixed in 4.14.8/4.18.3/4.21.0. Create: 2026-07-20 13:41:41 +0000 UTC Push: 2026-07-20 13:41:44 +0000 UTC |

berraesen/apache-cve-2021-42013-lab Docker ortamında Apache HTTP Server 2.4.49 (CVE-2021-42013) zafiyetinin gösterildiği laboratuvar çalışması. Create: 2026-07-20 13:24:03 +0000 UTC Push: 2026-07-20 13:24:05 +0000 UTC |

oscerd/CVE-2026-49086 PoC reproducer for CVE-2026-49086 (Apache Camel camel-dapr): the pub/sub consumer copies the untrusted CloudEvent's pubsubName/topic into producer-routing headers, letting an attacker redirect a republished message to an arbitrary Dapr pub/sub component+topic (confused deputy). Fixed in 4.14.8/4.18.3/4.21.0. Create: 2026-07-20 12:12:06 +0000 UTC Push: 2026-07-20 12:12:10 +0000 UTC |

0x00phantom-hat/CVE-2026-5029-Exploit Create: 2026-07-20 11:43:06 +0000 UTC Push: 2026-07-20 11:43:07 +0000 UTC |

GhostInExile/CVE-2026-63030-Wp2Shell WordPress REST API SQLi to RCE (CVE-2026-63030) Create: 2026-07-20 10:59:36 +0000 UTC Push: 2026-07-21 03:20:59 +0000 UTC |

OffByOn3/CVE-2026-63030-Wp2Shell WordPress REST API SQLi to RCE (CVE-2026-63030) Create: 2026-07-20 10:59:36 +0000 UTC Push: 2026-07-20 11:02:41 +0000 UTC |

Dungsocool/CVE-2024-23897 Create: 2026-07-20 10:59:31 +0000 UTC Push: 2026-07-20 10:59:52 +0000 UTC |

N3xtGenH4cker/CVE-2026-63030-CVE-2026-60137_wp2shell-checker Create: 2026-07-20 10:25:32 +0000 UTC Push: 2026-07-20 10:25:33 +0000 UTC |

HORKimhab/CVE-2026-60121-CVE-2026-61498 CVE-2026-60121, CVE-2026-61498 - Draft Create: 2026-07-20 08:55:36 +0000 UTC Push: 2026-07-20 08:55:41 +0000 UTC |

oscerd/CVE-2026-49042 PoC reproducer for CVE-2026-49042 (Apache Camel camel-langchain4j-tools): a prompt-injected LLM's tool-call arguments become unfiltered Exchange headers, hijacking the tool route's exec: sink for RCE. Fixed in 4.14.8/4.18.3/4.21.0. Create: 2026-07-20 08:23:46 +0000 UTC Push: 2026-07-20 08:23:49 +0000 UTC |

oscerd/CVE-2026-48206 Reproducer for CVE-2026-48206: Apache Camel camel-jira IssueKey (and other non-Camel-prefixed) header injection driving arbitrary JIRA issue operations with the endpoint's service-account credentials (fixed in 4.14.8/4.18.3/4.21.0) Create: 2026-07-20 07:19:04 +0000 UTC Push: 2026-07-20 07:19:08 +0000 UTC |

EvtDanya/CVE-2026-4858 CVE-2026-4858 research Create: 2026-07-20 06:52:54 +0000 UTC Push: 2026-07-20 06:52:55 +0000 UTC |

Neobee714/CVE-2025-57819-POC FreePBX 未认证SQL注入导致远程代码执行，FreePBX 15 (低于 15.0.66)、16 (低于 16.0.89)、17 (低于 17.0.3)。该漏洞位于商业化“endpoint”模块中，因对用户输入过滤不严，允许未认证的攻击者绕过管理员权限，执行SQL注入，并最终实现远程代码执行 Create: 2026-07-20 06:20:30 +0000 UTC Push: 2026-07-20 06:20:30 +0000 UTC |

joaovicdev/EXPLOIT-CVE-2026-63030 Create: 2026-07-20 04:58:59 +0000 UTC Push: 2026-07-20 04:59:00 +0000 UTC |

kaiw-icspark25/PrintNightmare-CVE-2021-1675-Analysis Create: 2026-07-20 04:57:22 +0000 UTC Push: 2026-07-20 04:57:23 +0000 UTC |