1.CVE-2026-84636: Apple iOS/macOS SCDynamicStore Wi-Fi SSID Info Disclosure PoCvulnerability | Medium | 2026-10-27 11:20 | CVE-2026-84636 | github.com | Original ↗ | .md | #data-exposure | #github | #red-team
2.cowcups: CUPS cups-fontpath Local Privilege Escalation (LPE) to Root PoCvulnerability | High | 2026-10-24 18:13 | codeberg.org | Original ↗ | .md | #linux | #privilege-escalation | #red-team
3.CVE-2026-109618/109619: Two Independent Pre-Auth RCE Chains on PHP 8.5.11 (Lab Reproduction & PoC)vulnerability | Critical | 2026-10-21 14:30 | CVE-2026-109618 | github.com | Original ↗ | .md | #rce | #pre-auth | #exploitation
4.open62541: Integer Overflow → Heap Overflow → RCE.vulnerability | 2026-10-24 00:00 | CVE-2026-116014 | bugpwn.com | Original ↗ | .md | #rce | #vulnerability | #cve
5.Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysisresearch | 2026-10-25 21:48 | github.com | Original ↗ | .md | #bug-bounty | #rce | #web3
6.Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Researchresearch | 2026-10-16 15:36 | github.com | Original ↗ | .md | #linux | #privilege-escalation | #android
7.gVisor Sandbox Escape PoC: Host Root RCE via directfs openHandle Type Confusionvulnerability | Critical | 2026-10-10 01:06 | github.com | Original ↗ | .md | #cloud | #rce | #zero-day
8.MySQL Community Server 26.7.0 mysqldump SHOW TABLES Stack Buffer Overflowvulnerability | High | 2026-10-07 00:36 | github.com | Original ↗ | .md | #poc | #database | #buffer-overflow
9.CVE-2025-54769: Authenticated LPAR2RRD Upgrade Remote Code Execution PoCvulnerability | High | 2026-10-05 12:03 | CVE-2025-54769 | github.com | Original ↗ | .md | #rce | #red-team | #poc
10.GitLab CE/EE Unauthenticated Arbitrary File Read Exploit PoC (CVE-2026-85706)vulnerability | Critical | Actively exploited | 2026-09-28 05:17 | CVE-2026-85706 | github.com | Original ↗ | .md | #active-exploitation | #bug-bounty | #zero-day
11.GOG Galaxy Local Privilege Escalation (LPE) PoC via DLL Search-Order Hijackingvulnerability | High | 2026-10-02 16:53 | github.com | Original ↗ | .md | #privilege-escalation | #windows | #lpe
12.Next.js next/og SVG Injection to Native RCE Exploit PoC (CVE-2026-94545)vulnerability | Critical | 2026-09-29 07:52 | CVE-2026-94545 | github.com | Original ↗ | .md | #bug-bounty | #rce | #red-team
13.MicroTrick: MikroTik RouterOS Unauthenticated Takeover Exploit PoC (CVE-2026-86060)vulnerability | Critical | Actively exploited | 2026-09-22 13:41 | CVE-2026-86060 | github.com | Original ↗ | .md | #active-exploitation | #rce | #zero-day
14.simple-git Command Injection to Remote Code Execution PoC (CVE-2026-6951)vulnerability | High | 2026-09-28 08:48 | CVE-2026-6951 | github.com | Original ↗ | .md | #rce | #supply-chain | #poc
15.WordPress Core Unauthenticated Path Traversal to LFI & RCE PoC (CVE-2026-87902)vulnerability | High | 2026-09-22 18:40 | CVE-2026-87902 | github.com | Original ↗ | .md | #bug-bounty | #rce | #wordpress
16.Comment2Shell: Zero-Click Pre-Auth RCE Exploit Kit for WordPress (CVE-2026-93485)tool | 2026-09-25 00:13 | CVE-2026-93485 | github.com | Original ↗ | .md | #bug-bounty | #rce | #zero-day
17.Heap Use-After-Free and Double Free in libheif ImageItem Encoding (GHSA-qwpf-5wf7-r996)advisory | Medium | 2026-09-21 18:27 | github.com | Original ↗ | .md | #rce | #cve | #libheif
18.PoC for CVE-2026-67401: cPanel/WHM EmailTrack SQL Injection Leading to Root RCEtool | 2026-09-17 06:53 | CVE-2026-67401 | github.com | Original ↗ | .md | #cloud | #rce | #privilege-escalation
19.ShieldCrash: Windows Defender 0-Day PoC Bypassing ShieldBreak (CVE-2026-69414) Patchvulnerability | High | 2026-09-07 20:36 | CVE-2026-69414 | github.com | Original ↗ | .md | #cloud | #zero-day | #arbitrary-file-read
20.CVE-2026-32475: Elementor Pro Forms Unauthenticated Arbitrary File Upload to RCE Lab & PoCvulnerability | Critical | 2026-09-05 06:23 | CVE-2026-32475 | github.com | Original ↗ | .md | #bug-bounty | #rce | #wordpress
21.FalconFlank: CrowdStrike Falcon Sensor 0-Day Local Privilege Escalation Exploitvulnerability | High | 2026-09-03 02:48 | github.com | Original ↗ | .md | #zero-day | #privilege-escalation | #windows
22.CVE-2026-19478 GitLab GraphQL unauthenticated project deletionvulnerability | Critical | 2026-08-27 06:30 | CVE-2026-19478 | github.com | Original ↗ | .md | #gitlab | #access-control | #authentication
23.Log4j FilteredObjectInputStream Bypass: Pre-auth RCE via MarshalledObjectvulnerability | Critical | 2026-08-26 15:44 | github.com | Original ↗ | .md | #rce | #public-poc | #java
24.dinosn/givewp-cve-2026-82222-rce-lab: GiveWP CVE-2026-82222 RCE Docker Lab & PoCresearch | 2026-08-30 05:15 | CVE-2026-82222 | github.com | Original ↗ | .md | #rce | #php | #wordpress
25.CVE-2026-63077: JetBrains TeamCity unauthenticated RCE with public PoC and active exploitationvulnerability | Critical | Actively exploited | 2026-08-07 08:38 | CVE-2026-63077 | github.com | Original ↗ | .md | #active-exploitation | #rce | #public-poc
26.Dojo challenge #53 Hacker Club solutionblog | 2026-08-26 07:42 | yeswehack.com | Original ↗ | .md | #bug-bounty | #rce | #pentesting
27.CVE-2026-8452 PoC: Citrix NetScaler pre-auth RCE detection and exploitationvulnerability | Critical | 2026-08-14 15:01 | CVE-2026-8452 | github.com | Original ↗ | .md | #rce | #public-poc | #pre-auth
28.CVE-2026-66804 PoC: Windows Cross Device virtual camera local privilege escalation to SYSTEMvulnerability | High | 2026-08-13 01:42 | CVE-2026-66804 | github.com | Original ↗ | .md | #public-poc | #privilege-escalation | #windows-security
29.CVE-2026-68398 PoC: Ubuntu PPPoL2TP kernel UAF local privilege escalationvulnerability | High | 2026-08-12 15:04 | CVE-2026-68398 | github.com | Original ↗ | .md | #public-poc | #kernel-security | #privilege-escalation
30.CVE-2026-50656 PoC: Microsoft Defender RoguePlanet elevation-of-privilege patch bypassvulnerability | High | 2026-08-11 19:35 | CVE-2026-50656 | github.com | Original ↗ | .md | #zero-day | #public-poc | #privilege-escalation