CVE-2026-5615

CVE-2026-5615 — VvvebJs Stored Cross-Site Scripting RXSS Overview This repository contains a Python proof-of-concept PoC script demonstrating a Stored Cross-Site Scripting RXSS vulnerability affecting VvvebJs ⚠️ This project is intended strictly for authorized security testing , educational...

CVE-2026-2005_lab

CVE-2026-2005 — PostgreSQL pgcrypto Heap Overflow Lab A self-contained Docker lab for practicing exploitation of CVE-2026-2005, a heap buffer overflow in PostgreSQL's pgcrypto extension that enables remote code execution without superuser privileges. Affected versions: PostgreSQL ≤ 17.7 / 16.11 /...

CVE-2026-42228

GHSA-f77h-j2v7-g6mw — n8n Unauthenticated Chat Execution Hijacking CVE: CVE-2026-42228 Severity: High Affected: n8n 1.123.32 Fixed in: n8n 1.123.32 / 2.17.4 / 2.18.1 Vulnerability Summary chat-service.ts :: startSession accepts an executionId from the WebSocket query string and only checks that t...

CVE-2026-42231

GHSA-q5f4-99jv-pgg5 — n8n XML Webhook Prototype Pollution → RCE CVE: CVE-2026-42231 Severity: Critical CVSS 10.0 Affected: n8n element. xml2js 0.6.2 uses Object.defineProperty with a data descriptor to set element keys on parsed objects. Because is always , wraps the value in an array and stores ...

Apache-CVE-2026-23918-fix

Apache HTTP Server: http2: Double Free and possible RCE on early reset CVE-2026-23918. Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issu...

rogue-jndi

Rogue JNDI Un servidor LDAP malicioso para ataques de inyección JNDI. Descripción El proyecto contiene servidores LDAP y HTTP para explotar la API Java JNDI insegura por defecto. Para realizar un ataque, puedes iniciar estos servidores localmente y luego provocar una resolución JNDI en el cliente...

CVE-2026-34197-Lab

CVE-2026-34197 — Apache ActiveMQ Classic Jolokia RCE Lab Overview This repository is a local Docker lab for studying CVE-2026-34197 , an Apache ActiveMQ Classic remote code execution issue reachable through the Jolokia JMX-HTTP API. The lab compares two ActiveMQ Classic instances side by side:...

CVE-2026-34159-Vulnerability-Research-Analysis-Detection

CVE-2026-34159-Vulnerability-Research-Analysis-Detection Critical buffer validation bypass in deserializetensor llama.cpp b8492. Null tensor buffer skips bounds check, enabling unauthenticated arbitrary R/W via GRAPHCOMPUTE. ASLR bypass + RCE over TCP 50052. Contains: Technical analysis & exploit...

CVE-2026-0300-PANOS

CVE-2026-0300-PANOS 🔓 Unauthenticated Remote Code Execution RCE in Palo Alto Networks PAN-OS User-ID Portal 📋 Vulnerability Details...

CVE-2026-75604-poc

CVE-2026-75604 RCE PoC Python proof of concept for CVE-2026-75604, an unauthenticated remote command execution vulnerability in Windows-hosted Next.js applications that use both the Pages Router and App Router without Cache Components. Demonstration Requirements Next.js =13.4 =16.0 16.3.3 Native...

PAN-OS-User-ID-Buffer-Overflow-PoC

🛡️ CVE-2026-0300: PAN-OS User-ID™ Portal RCE Analysis Research Proof-of-Concept: CWE-787 Out-of-bounds Write 📌 Overview CVE-2026-0300 is a high-severity buffer overflow vulnerability identified in the Palo Alto Networks PAN-OS User-ID™ Authentication Portal Captive Portal. This research repository...

CVE-2026-41044

CVE-2026-41044 Note: Educational Purposes Only From Advisory to RCA in an Afternoon: How AI Collapses N-Day Analysis A short, honest walkthrough of CVE-2026-41044 in Apache ActiveMQ using the exact pre and post patch code. CVE-2026-41044 was disclosed on April 24, 2026. It's a remote code executi...

cve-2024-4577-lab

CVE-2024-4577 — PHP-CGI Argument Injection → RCE Docker Lab / CTF A self-contained, from-scratch Docker lab that demonstrates the real argument-injection → Remote Code Execution primitive behind CVE-2024-4577. Exploit it over http://localhost:8080, pop a shell, and read the flag from inside the...

CVE-2026-7669-PoC

CVE-2026-7669 SGLang silently overrides trustremotecode=False to True and re-invokes AutoTokenizer.frompretrained whenever transformers v5 returns a TokenizersBackend object. A model with a custom tokenizerclass and an automap pointing at tokenizer.py reaches arbitrary code execution inside the...

ghes-cve-scanner

GHES CVE Scanner Detects whether GitHub Enterprise Server GHES instances are affected by CVE-2026-3854 and CVE-2026-4821. CVE Background CVE-2026-3854 CVSS 8.7 Git Push RCE — The babeld component does not sanitize semicolons in git push options, allowing remote code execution. Affected versions:...

CVE-2026-17532-lab

CVE-2026-17532 Lab - Seraphinite Accelerator: unauth XSS → 1-click RCE A Docker lab for CVE-2026-17532 , an unauthenticated reflected XSS in the WordPress plugin Seraphinite Accelerator that chains into remote code execution the moment a logged-in administrator opens one crafted link. Full writeu...

POC_CVE-2026-41940

POCCVE-2026-41940 Quick start root@kitploit: python3 pocCVE-2026-41940.py -h Usage examples Scan one host root@kitploit: python3 pocCVE-2026-41940.py -u https://target.example:2086 List accounts after successful chain root@kitploit: python3 pocCVE-2026-41940.py -u https://target.example:2086...

CVE-2026-42167-PoC

CVE reported by ZeroPath Research original writeup: https://zeropath.com/blog/proftpd-cve-2026-42167-auth-bypass-privesc-rce my version : https://jimmexploit.vercel.app/cve/proftpd-unauthenticated-sql-injection-leads-to-rce Description This repository contains a functional exploit for...

cve-2026-2005

CVE-2026-2005 — PostgreSQL pgcrypto Heap Overflow → RCE Remote code execution via a single SQL query targeting PostgreSQL's pgcrypto extension. The vulnerability is a heap buffer overflow in pgpparsepubencsesskey that allows corruption of PostgreSQL's internal MemoryContext allocator metadata,...

CVE-2026-42779

CVE-2026-42779 — Apache MINA Deserialization Filter Bypass to RCE CVSS 3.1: 9.8 CRITICAL AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE: CWE-502 Deserialization of Untrusted Data Reporter: Venkatraman Kumar, Securin Advisory: Apache Mailing List Overview Apache MINA versions 2.1.0 through 2.1.11 and 2.2...