31.GitLab CE/EE Unauthenticated Arbitrary File Read Exploit PoC (CVE-2026-85706)vulnerability | Critical | Actively exploited | 2026-09-28 05:17 | CVE-2026-85706 | github.com | Original ↗ | .md | #active-exploitation | #bug-bounty | #zero-day
32.GOG Galaxy Local Privilege Escalation (LPE) PoC via DLL Search-Order Hijackingvulnerability | High | 2026-10-02 16:53 | github.com | Original ↗ | .md | #privilege-escalation | #windows | #lpe
33.From XSS to RCE: Two Exploit Chains in ConcreteCMSvulnerability | 2026-10-04 00:00 | tenzai.com | Original ↗ | .md | #rce | #web-security | #xss
34.Cato VPN Client: Split-Tunnel and Privilege Escalation (CVE-2026-10739)vulnerability | 2026-09-30 22:00 | CVE-2026-10739 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #exploit
35.Next.js next/og SVG Injection to Native RCE Exploit PoC (CVE-2026-94545)vulnerability | Critical | 2026-09-29 07:52 | CVE-2026-94545 | github.com | Original ↗ | .md | #bug-bounty | #rce | #red-team
36.[Pt-Br] Por Trás do Espelho: Investigando Vulnerabilidades no MagicMirror² (CVE-2026-63642, CVE-2026-63643)vulnerability | 2026-10-01 19:57 | CVE-2026-63642 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research | #ssrf
37.MicroTrick: MikroTik RouterOS Unauthenticated Takeover Exploit PoC (CVE-2026-86060)vulnerability | Critical | Actively exploited | 2026-09-22 13:41 | CVE-2026-86060 | github.com | Original ↗ | .md | #active-exploitation | #rce | #zero-day
38.From AI Agents to RCE - Building a Vulnerability Research Workflowvulnerability | 2026-09-28 22:00 | blog.quarkslab.com | Original ↗ | .md | #ai-security | #rce | #vulnerability-research
39.[CVE-2024-23692] Horizon3’s Tales from the Trenches: Anthropic’s Mythos and Rejetto HFSvulnerability | 2026-09-30 10:00 | CVE-2024-23692 | horizon3.ai | Original ↗ | .md | #ai-security | #rce | #vulnerability-research
40.simple-git Command Injection to Remote Code Execution PoC (CVE-2026-6951)vulnerability | High | 2026-09-28 08:48 | CVE-2026-6951 | github.com | Original ↗ | .md | #rce | #supply-chain | #poc
41.No Time to Pwn: CVE-2026-72018vulnerability | 2026-09-28 18:02 | CVE-2026-72018 | xbow.com | Original ↗ | .md | #vulnerability-research | #lpe | #linux-kernel
42.CVE-2026-86950: The Great Glyph Griftvulnerability | 2026-09-30 00:00 | CVE-2026-86950 | calif.io | Original ↗ | .md | #vulnerability-research | #apple | #zero-click
43.VectorFreed: librsvg Use-After-Free (CVE-2026-96889) Leading to RCE in Next.js and Downstream Frameworksvulnerability | Critical | 2026-09-24 06:35 | CVE-2026-96889 | github.com | Original ↗ | .md | #rce | #supply-chain | #red-team
44.[PT-BR] CVE-2026-16764: Uma validação faltando, acesso totalvulnerability | 2026-09-25 20:03 | CVE-2026-16764 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #web-security | #research
45.[CVE-2025-39964] How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Failvulnerability | 2026-09-25 00:00 | CVE-2025-39964 | idnsec.com | Original ↗ | .md | #vulnerability-research | #linux-kernel | #memory-corruption
46.WordPress Core Unauthenticated Path Traversal to LFI & RCE PoC (CVE-2026-87902)vulnerability | High | 2026-09-22 18:40 | CVE-2026-87902 | github.com | Original ↗ | .md | #bug-bounty | #rce | #wordpress
47.The Vercel Bug Bounty Program is now publicly availablevulnerability | 2026-09-24 07:00 | vercel.com | Original ↗ | .md | #bug-bounty | #cloud-security | #web-security
48.SharePoint CVE-2026-65660: From Anonymous Access to Pre-Auth RCE via EditingPageParser Type-Check Bypassvulnerability | 2026-09-22 03:03 | CVE-2026-65660 | blog.viettelcybersecurity.com | Original ↗ | .md | #rce | #pre-auth | #sharepoint
49.CVE-2026-78902: XSS to RCE in pfSense with one DNS requestvulnerability | 2026-09-22 00:00 | CVE-2026-78902 | netspi.com | Original ↗ | .md | #rce | #xss | #vulnerability-analysis
50.[CVE-2026-93485] Comment2XSS: Zero-Click Pre-Auth XSS to Potential RCE in WordPress Corevulnerability | 2026-09-21 00:00 | CVE-2026-93485 | idnsec.com | Original ↗ | .md | #rce | #vulnerability-research | #wordpress
51.[CVE-2026-66804] Windows Exploitation Techniques: Dangling COM Object Registrationsvulnerability | 2026-09-21 00:00 | CVE-2026-66804 | projectzero.google | Original ↗ | .md | #privilege-escalation | #windows | #exploitation
52.Responder Guidance for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)vulnerability | 2026-09-18 00:00 | bishopfox.com | Original ↗ | .md
53.[CVE-2026-67279] MikroTrick: Inside the RouterOS Takeover Chainvulnerability | 2026-09-17 00:00 | CVE-2026-67279 | bishopfox.com | Original ↗ | .md | #authentication-bypass | #network-security | #mikrotik
54.Click2Shell: Preauth WordPress Core Theme Preview Injection to RCE Chainvulnerability | 2026-09-18 15:05 | pwn.ai | Original ↗ | .md | #ai-security | #rce | #wordpress
55.Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainersvulnerability | 2026-09-18 00:00 | vercel.com | Original ↗ | .md | #rce | #cloud-security | #vulnerability-research
56.[CVE-2026-90894] ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shellvulnerability | 2026-09-15 13:16 | CVE-2026-90894 | jfrog.com | Original ↗ | .md | #privilege-escalation | #lpe | #macos
57.CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Keyvulnerability | 2026-09-11 00:00 | CVE-2026-82329 | bishopfox.com | Original ↗ | .md | #authentication-bypass | #jfrog | #bishop-fox
58.Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329vulnerability | 2026-09-10 19:04 | wiz.io | Original ↗ | .md | #jfrog | #artifactory | #wiz
59.Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490vulnerability | 2026-09-09 00:00 | CVE-2026-19490 | bishopfox.com | Original ↗ | .md | #authentication-bypass | #citrix | #netscaler
60.CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gapvulnerability | 2026-09-09 07:11 | CVE-2023-54391 | yeswehack.com | Original ↗ | .md | #ai-security | #exploit | #vulnerability-disclosure