administrator-01001/CVE-2026-63030 Proof-of-concept exploit for CVE-2026-63030, a pre-authentication vulnerability in WordPress (versions 6.9.0 through 7.0.1). Create: 2026-07-20 01:20:53 +0000 UTC Push: 2026-07-20 01:20:54 +0000 UTC |

fm0ss/cve-2025-9951-ffmpeg-jp2-poc Create: 2026-07-19 19:56:08 +0000 UTC Push: 2026-07-19 20:06:58 +0000 UTC |

skelersecurity/wordpress-skelersecurity-core-security-CVE-2026-63030 The wp2shell vulnerability chain represents one of the most significant WordPress Core security issues in recent years. Because exploitation begins with an unauthenticated request and can ultimately result in Remote Code Execution, organizations should treat remediation as an emergency. Create: 2026-07-19 19:15:24 +0000 UTC Push: 2026-07-19 19:16:10 +0000 UTC |

Lukols-Dev/wp-cve-2026-63030-check Non-intrusive exposure checker for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 / CVE-2026-60137). Create: 2026-07-19 19:00:06 +0000 UTC Push: 2026-07-19 19:00:06 +0000 UTC |

dewcode91/CVE-2026-60137-POC Create: 2026-07-19 16:58:48 +0000 UTC Push: 2026-07-19 16:58:49 +0000 UTC |

dewcode91/CVE-2026-63030-POC Create: 2026-07-19 16:58:48 +0000 UTC Push: 2026-07-19 17:07:11 +0000 UTC |

4B3R4M4-607D/CVE-2026-63030-POC CVE-2026-63030 / wp2shell Create: 2026-07-19 15:52:33 +0000 UTC Push: 2026-07-19 15:52:34 +0000 UTC |

mumaosong/CVE-2026-43499-cloudflare-gate CVE-2026-43499-cloudflare-gate签名授权计算 Create: 2026-07-19 14:26:09 +0000 UTC Push: 2026-07-19 14:26:09 +0000 UTC |

VeronnX666/CVE-2026-3891 This tool was created solely for educational purposes, not for criminal activities or anything of the sort. Do not misuse this tool. Good luck trying it out. Create: 2026-07-19 14:10:36 +0000 UTC Push: 2026-07-19 14:10:37 +0000 UTC |

0xh7ml/CVE-2026-63030 Create: 2026-07-19 14:07:29 +0000 UTC Push: 2026-07-19 14:07:41 +0000 UTC |

KitSkater/legacyshield-CVE-2017-0144 Defensive Windows security application providing compensating controls for CVE-2017-0144 (EternalBlue/MS17-010) through SMB monitoring, attack detection, automated firewall response, configuration auditing, and security reporting for legacy and unsupported systems. Create: 2026-07-19 13:51:12 +0000 UTC Push: 2026-07-19 13:59:13 +0000 UTC |

NESTle19/CVE-2019-2215 Create: 2026-07-19 12:38:28 +0000 UTC Push: 2026-07-19 12:38:29 +0000 UTC |

matesz44/CVE-2025-64512 CVE-2025-64512: pdfminer.six pickle deserialization rce; pickle.gz + pdf generator w/ custom payloads Create: 2026-07-19 10:49:05 +0000 UTC Push: 2026-07-19 10:49:05 +0000 UTC |

CerberusMrXi/Langflow-cve-2026-33017-exploit CVE-2026-33017 exploitation tool for Langflow <1.9.0. Features reverse shells, command execution, file operations, persistence, and automated testing. Validates critical RCE vulnerability impact. For authorized security assessments only. Create: 2026-07-19 10:44:19 +0000 UTC Push: 2026-07-19 10:44:20 +0000 UTC |

ChiefYoru/CVE-2026-48907_PoC Unauthenticated Remote Code Execution (RCE) vulnerability in the JCE (Joomla Content Editor) extension for Joomla Create: 2026-07-19 08:21:14 +0000 UTC Push: 2026-07-19 08:21:30 +0000 UTC |

ChiefYoru/CVE-2026-56290_PoC The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE. Create: 2026-07-19 08:07:26 +0000 UTC Push: 2026-07-19 08:07:44 +0000 UTC |

TomorrowX6/CVE-2026-63030-poc Create: 2026-07-19 07:29:49 +0000 UTC Push: 2026-07-19 07:30:35 +0000 UTC |

bluedragonsecurity/CVE-2026-46215-exploit-linux-7.0-uaf-stable CVE-2026-46215 DRM GEM UAF Exploit for Linux 7.0 - by Antonius (sw0rdm4n, w1sdom, ev1lut10n) Create: 2026-07-19 05:37:45 +0000 UTC Push: 2026-07-19 05:37:46 +0000 UTC |

r00tali/CVE-2026-39200 The value of the produk request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. The payload xbnw0"><script>alert(1)</script>skc2h was submitted in the produk parameter. This input was echoed as xbnw0\"><script>alert(1)</script>skc2h in the application's response. Create: 2026-07-19 00:43:32 +0000 UTC Push: 2026-07-19 00:43:32 +0000 UTC |

Jvr2022/CVE-2026-46420 PoC for CVE-2026-46420, command injection in shivammathur/setup-php via repository-controlled PHP version resolution. Create: 2026-07-18 22:27:39 +0000 UTC Push: 2026-07-18 22:27:39 +0000 UTC |