📈 GH Trending Explorer 🎲 Surprise me

Search: cve-2026 · Language: C · clear

HOSTED-POWER / php_uploadprogress_guard

Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.

▲ 143/7d ★ 143 C today
LSPosed / LSPromise

Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combination of CVE-2026-49881 and CVE-2026-43284

▲ ~9/7d ★ 472 C 1mo ago
R0rt1z2 / GhostLock

Kernel root exploit (CVE-2026-43499) for some Amazon devices

▲ ~2/7d ★ 44 C 4d ago
Malwation / CVE-2026-43786

Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that allows an application to gain root privileges.

▲ ~0/7d ★ 31 C 1mo ago
aramosf / CVE-2026-64468

Linux Binder binder_free_transaction() process-lifetime use-after-free (CVE-2026-64468): unprivileged PoC + x86_64 LPE. Authorised security research.

▲ ~0/7d ★ 29 C 2mo ago
sgkdev / bad_garbage

CVE-2026-53361 AF_UNIX GC vs MSG_PEEK use-after-free container escape

▲ ~0/7d ★ 26 C 2mo ago