emilliewatson96/spryCVE-2026-10520 Create: 2026-07-01 15:28:39 +0000 UTC Push: 2026-07-01 15:28:40 +0000 UTC |

do4choo/CVE-2026-53694-NoMachine-LPE Create: 2026-07-01 15:22:38 +0000 UTC Push: 2026-07-01 15:22:47 +0000 UTC |

rootdirective-sec/CVE-2026-56011-Lab Create: 2026-07-01 14:20:44 +0000 UTC Push: 2026-07-01 14:23:07 +0000 UTC |

NoXiVaR/CVE-2026-48907 CVE-2026-48907 PoC Create: 2026-07-01 14:05:26 +0000 UTC Push: 2026-07-01 14:05:27 +0000 UTC |

0xsha/CVE-2026-6307 Google Chrome CVE-2026-6307 PoC Create: 2026-07-01 13:23:25 +0000 UTC Push: 2026-07-01 13:32:36 +0000 UTC |

bakano98/cve-2026-23111-poc scuffed PoC for CVE-2026-23111. Made and ran on Linux Kernel 6.12.69 Create: 2026-07-01 13:21:55 +0000 UTC Push: 2026-07-01 13:21:56 +0000 UTC |

dem0ns/CVE-2026-43735 Safari 跨域信息读取 Create: 2026-07-01 12:13:18 +0000 UTC Push: 2026-07-01 12:13:19 +0000 UTC |

T0tooro/cve-2025-24054-lab Create: 2026-07-01 10:14:14 +0000 UTC Push: 2026-07-01 10:14:15 +0000 UTC |

aratane/CVE-2026-42945 A flaw was found in NGINX, specifically within the ngx_http_rewrite_module. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests under specific rewrite configurations. This can lead to a heap buffer overflow in the NGINX worker process, which may result in arbitrary code execution Create: 2026-07-01 08:30:57 +0000 UTC Push: 2026-07-01 08:30:58 +0000 UTC |

timtimxs/CVE-2026-51947-Advisory Pivotal CRM's patch for an initial deserialization vulnerability was incomplete. The fix switched from BinaryFormatter to JSON.NET but left TypeNameHandling set to 4 without implementing SerializationBinder, allowing attackers to execute arbitrary code through malicious $type payloads. Fixed in 6.6.5.10 and Patch_CWE502_20260316.zip Create: 2026-07-01 04:35:26 +0000 UTC Push: 2026-07-01 04:35:27 +0000 UTC |

V0IDNETWORK/CVE-2026-46331 pedit COW Create: 2026-07-01 02:19:29 +0000 UTC Push: 2026-07-01 02:19:30 +0000 UTC |

BilalAlshiekh912/Incident-Response-Report-TeamCity-Compromise-CVE-2024-27198- CyberDefenders JetBrains Lab Create: 2026-07-01 01:36:30 +0000 UTC Push: 2026-07-01 01:36:31 +0000 UTC |

thecodeb0ss/CVE-2026-55488 motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read Create: 2026-07-01 01:10:43 +0000 UTC Push: 2026-07-01 01:10:44 +0000 UTC |

derekpreston81/CVE_ADC_IOC_2026 Citrix NetScaler CVE Preconditions Checker as per CTX696604 | Supported CVE : CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474 Create: 2026-06-30 22:15:49 +0000 UTC Push: 2026-06-30 22:15:50 +0000 UTC |

BiiTts/CVE-2026-58138-Conductor-Unauth-RCE CVE-2026-58138 — Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root). Create: 2026-06-30 19:48:56 +0000 UTC Push: 2026-06-30 19:48:59 +0000 UTC |

AlexanderGumeniuk/CVE-2025-32434 Create: 2026-06-30 19:24:30 +0000 UTC Push: 2026-06-30 19:24:31 +0000 UTC |

BiiTts/CVE-2026-46490-samlify-SAML-Attribute-Injection CVE-2026-46490 — samlify <2.13.0 SAML AttributeValue XML injection -> signed-assertion privilege escalation. Self-contained PoC, verified e2e. Create: 2026-06-30 19:13:30 +0000 UTC Push: 2026-06-30 19:13:33 +0000 UTC |

MadExploits/CVE-2025-40271 CVE-2025-40271 Modifed By MadEploits Create: 2026-06-30 18:40:57 +0000 UTC Push: 2026-06-30 18:41:13 +0000 UTC |

yashswarup12/CVE-2021-27877-PoC A modified Metasploit module for validating CVE-2021-27877 by enabling direct command execution through the Veritas Backup Exec Agent. Includes documentation and the changes made to simplify exploitation during authorized security assessments. Create: 2026-06-30 18:35:04 +0000 UTC Push: 2026-06-30 18:35:31 +0000 UTC |

g0thamRabb1t/cve-2026-46331-pedit-cow-auditd-detection Defensive validation of CVE-2026-46331 / pedit COW with auditd, AppArmor, mitigation comparison and detection logic. Create: 2026-06-30 18:29:43 +0000 UTC Push: 2026-06-30 18:29:44 +0000 UTC |