CVE-2026-86325

creationtimestamp| type| source ---|---|--- 2026-10-02 12:07:33+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mwvdkcvyiu2u 2026-10-02 13:28:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117371549173385024 2026-10-02 14:43:05+00:00| seen|...

teamcity-CVE-2026-63077-pcap

teamcity-CVE-2026-63077-pcap teamcity teamcity-CVE-2026-63077 exploitation pcap info: https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/ https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077/ Target: teamcity server 2025.11.3 docker 192.168.64.31 po...

gitlab-rce-demo

GitLab Oj RCE Demo This repository contains a self-contained demo for the GitLab notebook-diff RCE chain described in our research. It starts a fresh GitLab 18.11.3 container, creates an ordinary user through the public HTTP interface, and runs the PoC against that instance. Technical details:...

CVE-2026-96990

creationtimestamp| type| source ---|---|--- 2026-10-02 11:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/avq7nxgz2fe7l...

CVE-2026-103336

creationtimestamp| type| source ---|---|--- 2026-10-02 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mwvbyfvbtv2c...

MITM6-Kerberos-CNAME-Abuse

Kerberos Authentication Relay - CNAME Abuse Technique PoC Background This tool is the proof-of-concept for Kerberos CNAME Abuse Relay technique, based on the MITM6 tool. The research uncovered a flaw in Windows Kerberos client behavior: when a DNS CNAME record is returned, the client follows the...

XSS2Shell-CVE-2026-64638

XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/scanning utility for authorized WordPress security testing. The project contains a single-target exploitation workflow and a concurrent multi-target scan-only mode. Important: Use this project only on WordPress installations that you own or...

cpanel2shell-scanner

cpanel2shell-scanner A high-fidelity scanner for the cPanel/WHM authentication bypass tracked as CVE-2026-41940. It identifies vulnerable hosts without producing the false-negatives common to public proofs-of-concept and detections, and without triggering the account lockout and root-IP-allowlist...

Copy-Fail-CVE-2026-31431-Kubernetes-PoC

Copy Fail CVE-2026-31431 — Kubernetes Container Escape PoC A proof-of-concept demonstrating how a fully unprivileged container can achieve node-level code execution on Kubernetes by exploiting the CVE-2026-31431 Linux kernel page-cache corruption bug through shared container image layers. The cor...

Januscape

Januscape: Guest-to-Host Escape in KVM/x86 Abstract This document describes the Januscape CVE-2026-53359 vulnerability discovered and reported by Hyunwoo Kim @v4bel. It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/x86 environment. To the best of public knowledge, th...

ResetNightmare

ResetNightmare Proof-of-concept POC tool for ResetNightmare CVE-2026-27912. ResetNightmare is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched...

Automated-scanner-CVE-2026-41940

CPANEL CVE EXPLOIT English | فارسی Persian ██████╗██████╗ █████╗ ███╗ ██╗███████╗██╗ ██╔════╝██╔══██╗██╔══██╗████╗ ██║██╔════╝██║ ██║ ██████╔╝███████║██╔██╗ ██║█████╗ ██║ ██║ ██╔═══╝ ██╔══██║██║╚██╗██║██╔══╝ ██║ ╚██████╗██║ ██║ ██║██║ ╚████║███████╗███████╗ ╚═════╝╚═╝ ╚═╝ ╚═╝╚═╝...

CVE-2026-63030-poc

This repository does not have a README...

CVE-2026-93697

creationtimestamp| type| source ---|---|--- 2026-10-02 09:47:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mwv3p4ed3b2t...

RegPwn

RegPwn Exploit for blog post - https://www.mdsec.co.uk/2026/03/rip-regpwn/ Exploit code for LPE in Windows clients and servers Tested versions: Windows 11 25h2 Windows 11 24h2 Windows 10 21h2 Windows Servers 2016/2019/2022 Tracked as CVE-2026-24291 Author : Filip Dragovic...

XSS2Shell

XSS2Shell XSS2Shell is an educational proof of concept for CVE-2026-64638 , demonstrating the impact of a pre-authentication XSS issue in vulnerable WordPress installations. With an administrator's explicit participation, the PoC captures a WordPress Application Password, publishes a temporary...

wp2shell-scan

wp2shell-scan A scanner and proof-of-concept toolkit for CVE-2026-63030 wp2shell, a pre-authenticated remote code execution vulnerability in WordPress core Features Two non-destructive detection methods: --check-type time-based SLEEP timing and --check-type error-based TRUE/FALSE/broken...

CVE-2026-97663

creationtimestamp| type| source ---|---|--- 2026-10-02 09:29:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/aw72p422ezqpb...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: podman: podman-6.1.3-1.hum1 aarch64, x8664 podman-docker-6.1.3-1.hum1 noarch podman-machine-6.1.3-1.hum1 aarch64, x8664 podman-remote-6.1.3-1.hum1 aarch64, x8664 podmansh-6.1.3-1.hum1 aarch64,...

zombie-zip

Zombie ZIP ZIP format confusion technique that evades 98% of antivirus engines. CVE-2026-0866 | VU976247 | Published March 10, 2026 The Technique Create a ZIP file where: Compression Method = 0 STORED Actual data = DEFLATE compressed CRC-32 = Checksum of uncompressed payload AV Engine: Reads Meth...