CVE-2026-8054

1. 漏洞概述 CVE-2026-8054 是一个存在于 dotCMS Core 发布审计 API（Publish Audit API）中的高危前台无需认证 SQL 注入漏洞 （Pre-auth SQL Injection）。该漏洞由官方追踪为安全事件 SI-75 ，并于 2026 年 5 月底被正式收录披露。由于攻击者无需任何账号权限即可远程触发，其潜在危害非常严重。 属性| 值 ---|--- CVE编号| CVE-2026-8054 官方追踪| SI-75 漏洞类型| SQL注入 CWE-89 影响组件| dotCMS Core - Publish Audit API CVSS评分...

CVE-2025-32433-Exploit-edited

CVE-2025-32433 Exploit Windows Compatible Erlang/OTP SSH Unauthenticated Remote Code Execution Description This repository contains an exploit for CVE-2025-32433, a critical unauthenticated remote code execution vulnerability in Erlang/OTP SSH server. Key Features: ✅ Pre-authentication RCE exploi...

CVE-2025-55182-realistic-poc

CVE-2025-55182: React Server Components RCE A minimal proof of concept demonstrating the critical Remote Code Execution vulnerability in [email protected]. What is CVE-2025-55182? A pre-authentication RCE vulnerability in React Server Components that allows attackers to execute arbitrary cod...

CVE-2026-64638-XSS-to-Shell-PoC

CVE-2026-64638 — XSS2Shell Proof of Concept A proof-of-concept PoC tool for validating CVE-2026-64638 , a pre-authentication reflected Cross-Site Scripting XSS vulnerability affecting WordPress installations versions 6.4 – 7.0.2. Overview This tool automates the process of fingerprinting,...

CVE-2026-64638-PoC-Exploit

🌀 CVE‑2026‑64638 – WordPress XSS2Shell Security Suite ⚠️ ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse...

2025-Oracle-SSO-LDAP-Attack-Post-Incident-Written-Report

Informe Escrito Posterior al Incidente de Ataque a Oracle SSO/LDAP 2025 Este informe posterior al incidente examina la brecha en la cadena de suministro de 2025 dirigida a la infraestructura de identidad y autenticación de Oracle Cloud. Detalla cómo los actores de amenazas explotaron una...

CVE-2026-64638

CVE-2026-64638 Reflected XSS on Login Screen Leading to PHP Code Execution — WordPress Core Software: WordPress Core ≤ 7.0.2 all versions prior to 7.0.3 CVSS: 8.9 High CWE: CWE-79 — Improper Neutralization of Input During Web Page Generation Authentication Required: None Pre-Auth User Interaction...

CVE-2026-64638-POC

CVE-2026-64638 — XSS2Shell Pre-Authentication Reflected XSS → Remote Code Execution in WordPress Core ⚠️ DISCLAIMER: This repository is for authorized security research and educational purposes only. Do not use against systems you do not own or have explicit written permission to test. Unauthorize...

CVE-2026-64638

XSS2Shell Alert PoC CVE-2026-64638 WordPress Pre-Auth Reflected XSS Proof of Concept Single-file HTML proof of concept for the CVE-2026-64638 XSS2Shell parser-differential XSS in WordPress Core. Demonstrates unauthenticated JavaScript execution in the WordPress origin via a crafted login request...

CVE-2026-64638

🛡️ CVE-2026-64638 - XSS2Shell WordPress Pre-Authentication Reflected XSS with potential escalation to PHP Code Execution 📌 Overview CVE-2026-64638 is a high-severity pre-authentication reflected Cross-Site Scripting XSS vulnerability affecting the WordPress login screen. Under specific conditions,...

CVE-2026-42533

CVE-2026-42533 — nginx two-pass capture clobbering Pre-auth heap overflow + info leak in nginx 0.9.6–1.30.3 / mainline ≤1.31.2 complex-value script engine; CVSS 9.2. Two trigger surfaces share the same root cause: HTTP regex location + regex map and stream sslpreread + SNI + regex map. In-depth...

POC-WP-XSS2Shell-CVE-2026-64638

XSS2Shell — PoC for CVE-2026-64638 Educational Proof of Concept for the XSS2Shell chain CVE-2026-64638, a pre-authentication XSS → RCE vulnerability in WordPress Core discovered independently by pwn.ai and disclosed on August 7, 2026. Table of contents 1. Executive Summary 2. Legal notice 3. Chai...

CVE-2026-42533-POC

CVE-2026-42533 Pre-auth heap buffer overflow and heap information leak in nginx, caused by missing save/restore of PCRE capture state across the two passes of the script engine. A regex map variable evaluated between two capture references overwrites r-captures, so the LEN pass and the VALUE pass...

CVE-2026-19490-check

Citrix NetScaler SAML nFactor Context Authentication Bypass — Script de detección de vulnerabilidades Una comprobación de vulnerabilidad segura y no autenticada para CVE-2026-19490 , el bypass de autenticación previo a la autenticación en la ruta del proveedor de servicios SAML de Citrix NetScale...

CVE-2022-26134

CVE-2022-26134 Confluence Pre-Auth Object-Graph Navigation Language OGNL Injection Confluence is a web-based workspace collaboration product that is developed by Atlassian. It can be deployed on-prem or as part of Atlassian Cloud. It consists of 3 key features: page, space and page tree. Page: Yo...

cve-2026-86060

CVE-2026-86060 — Escalada de privilegios preautenticación en SSH de MikroTik RouterOS hasta el control administrativo total Campo| Valor ---|--- CVE| CVE-2026-86060 Producto| MikroTik RouterOS servicio SSH Versiones afectadas| RouterOS 6.x y 7.0.0 – 7.23.3 inclusive Versiones corregidas| RouterOS...

CVE-2026-28496

CVE-2026-27604 + CVE-2026-28496 — Cadena de RCE Pre-Auth en FOSSBilling Resumen Ejecutivo Este repositorio contiene un laboratorio Docker local para reproducir y validar la cadena de RCE Pre-Auth en FOSSBilling, compuesta por dos vulnerabilidades encadenadas: CVE| Tipo| CVSS v4| GHSA| Descripción...

CVE-2026-20253

Entorno de Laboratorio CVE-2026-20253 RCE Pre-Auth en Splunk Enterprise a través del Servicio Sidecar de PostgreSQL | ---|--- CVE| CVE-2026-20253 CVSS| 9.8 Crítico Tipo| Ejecución Remota de Código No Autenticada CWE| CWE-306: Autenticación Faltante para Función Crítica Producto| Splunk Enterprise...

CVE-2026-39987-Lab

CVE-2026-39987 — Laboratorio de RCE por WebSocket de Terminal Pre-Auth en marimo Laboratorio Docker solo-local para reproducir y comprender CVE-2026-39987 en marimo. Este proyecto compara un servicio marimo vulnerable con un servicio marimo parcheado lado a lado, y luego demuestra la diferencia...

cpanel-cve-2026-41940-fix

cpanel-cve-2026-41940-fix Detección y remediación en un solo paso para servidores cPanel/WHM comprometidos mediante CVE-2026-41940 y la campaña del botnet nuclear.x86. Qué es esto El 28 de abril de 2026 , cPanel reveló una vulnerabilidad de omisión de autenticación pre-autenticación CVE-2026-4194...