Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284

Remote git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284 && gcc -O0 -Wall -o exp exp.c -lutil && ./exp git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd...

spip-cve-2023-27372-rce

SPIP CVE-2023-27372 Unauthenticated RCE Exploit Web Shell Upload This Python script exploits CVE-2023-27372, an unauthenticated remote code execution vulnerability in SPIP CMS versions prior to 4.2.1. It leverages a cache poisoning flaw in the password reset mechanism to upload a web shell and...

Dirty-Frag-CVE-2026-43284

Dirty Frag CVE-2026-43284 and CVE-2026-43500 Exploit Reproduction and Detection Lab for a Linux kernel local privilege escalation chain. Status: VERIFIED. I completed the reproduction, the fileless verification, and the syscall-level detection in the lab kernel 6.18.9+kali-amd64. This document is...

wp2shell-poc

How does this work at all How this PoC differs from the public wp2shell exploits all pocs weaponize the same two bugs - the REST batch route confusion CVE-2026-63030 and the authornotin SQL injection CVE-2026-60137 - with the same double-nested batch shape. What differs between them is the RCE pa...

CVE-2022-24637

Vulnerable Application Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with ' and get IPAddress, e.g 172.22.0.2 Database...

CVE-2026-3844-Lab

CVE-2026-3844 — Breeze Cache Unauthenticated Arbitrary File Upload to RCE Lab Local-only Docker lab for reproducing and comparing CVE-2026-3844 behavior in the WordPress Breeze Cache plugin. This repository demonstrates the vulnerable behavior in Breeze Cache 2.4.4 and compares it with the patche...

CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache

CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache CVE-2024-12008 information exposure vulnerability in W3 Total Cache...

gpg_reaper

GPG Reaper TL;DR: Obtener/Robar/Restaurar Claves Privadas GPG de la caché/memoria de gpg-agent Este POC demuestra un método para obtener claves privadas GPG de la memoria de gpg-agent en Windows. Normalmente esto solo debería ser posible dentro de un período de 10 minutos valor de...

fockcache

fockcache FockCache - Envenenamiento de caché de prueba minimizado Detalle del envenenamiento de caché: https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache intenta realizar envenenamiento de caché probando las cabeceras X-Forwarded-Host y X-Forwarded-Scheme en págin...

CVE-2026-3844

CVE-2026-3844 PoC exploit for CVE-2026-3844, a critical unauthenticated file upload vulnerability in the WordPress Breeze plugin leading to RCE. 📌 Overview CVE-2026-3844 is a CRITICAL unauthenticated arbitrary file upload vulnerability in the Breeze Cache WordPr...

meltdown-exploit

POC DE EXPLOTACIÓN DE MELTDOWN Las optimizaciones especulativas ejecutan código de manera no segura dejando rastros de datos en la microarquitectura, como en la caché. Lipp et al. 2018 publicaron su código el 2018-01-09 en https://github.com/IAIK/meltdown. Consulte su artículo para más detalles:...

Linux-Kernel-Dirty-Pipe-Exploitation-Logic-Bug-

Linux Kernel Dirty Pipe Exploitation Logic Bug by: Antonius w1sdom https://www.bluedragonsec.com https://github.com/bluedragonsecurity Dirty Pipe CVE-2022-0847 is one of the most significant security vulnerabilities in Linux Kernel 5.8 – 5.15.24, discovered by Max Kellermann in 2022. This...

cve-2026-31431-checker

CVE-2026-31431 "Copy Fail" — Vulnerability Detection Script Shell-based scanner for CVE-2026-31431 "Copy Fail" , a local privilege escalation vulnerability in the Linux kernel's cryptographic subsystem algifaead / AFALG interface. An unprivileged local user can write 4 bytes into the in-memory pa...

SUSE CVE-2024-14029

Tornado before 6.4.1 ignores duplicate Transfer-Encoding: chunked headers, treating requests as having no message body and parsing the chunked body as a subsequent request. Attackers can exploit this inconsistency when Tornado is deployed behind proxies to perform HTTP request smuggling, enabling...

CVE-2026-108772: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/downloadcache.go of the component Cache Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched...

PT-2026-110349

Name of the Vulnerable Software and Affected Versions bleenco abstruse versions prior to 2.1.1 Description A path traversal issue exists in the Cache Endpoint component within the file server/api/worker/download cache.go. The flaw occurs in the filepath.Join function when processing the File...

CVE-2026-3844-Breeze-Cache-WordPress-Plugin-Remote-Code-Execution

CVE-2026-3844 – Breeze Cache WordPress Plugin Unauthenticated RCE -red?style=flat-square CVE-2026-3844 is a critical unauthenticated arbitrary file upload vulnerability in the Breeze Cache WordPress plugin versions ≤ 2.4.4. An attacker can post a comment containing a malicious tag pointing to a P...

w3-total-cache-cve-2013-2010

w3-total-cache-cve-2013-2010 Remote code execution running on w3 total cache cve 2013-2010 Usage: python3 w3tcrceexploit.py -u http://example.com -p "system'whoami';" Output: Targeting: http://example.com + Payload sent successfully. + Check the target for execution of the payload. import request...

CVE-2023-1521

PoC gcc -shared -o libpoc.so poc.c -fPIC export LDPRELOAD=fullpathtolibpoc.so sccache gcc foo.c -o foo...

PoC-CVE-2026-46331

This repository contains a proof-of-concept PoC exploit for CVE-2026-46331, a Linux kernel local privilege escalation vulnerability in the traffic-control subsystem. Vulnerability Summary The flaw exists in the actpedit packet-editing action, where the kernel may calculate the copy-on-write...