CVE-2021-26855

CVE-2021-26855 PoC der Proxylogon-Kette SSRF CVE-2021-26855 zum Schreiben einer Datei von testanull, von GitHub zensiert Warum entfernt GitHub diesen Exploit, weil er gegen die Nutzungsrichtlinie verstößt – aber viele andere Proof-of-Concept-Exploits und Frameworks sind in Ordnung?...

CVE-2025-2783

Chromium CVE-2025-2783: Sandbox-Escape & Full-Chain-RCE-Exploit Dieses Repository enthält eine Full-Chain-Exploit-Implementierung für CVE-2025-2783. Die Schwachstelle befindet sich in der Ipcz -Kommunikationsebene von Chromium und ermöglicht es einem Angreifer, aus einem eingeschränkten...

wp2shell

wp2shell - WordPress RCE PoC CVE-2026-63030 + CVE-2026-60137 Nicht authentifizierte Remote-Code-Ausführung im WordPress Core von: JohenLastGen 📌 Übersicht Dieses Tool verkettet zwei kritische WordPress-Sicherheitslücken, um eine nicht authentifizierte RCE zu erreichen: Sicherheitslücke| CVE|...

darksword-Exploit

🗡️ DarkSword — iOS Full-Chain Exploit Analysis Reference:...

PT-2026-23506

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.10 Description A time-of-check-time-of-use TOCTOU issue exists in the validateScriptFileForShellBleed function. A TOCTOU issue is a software bug where a system checks a condition such as a security credential...

📄 n8n 2.0.0-rc.4 Remote Command Execution

n8n version 2.0.0-rc.4 PHP port of a research exploit that chains together multiple vulnerabilities including arbitrary file read and sandbox escape in order to achieve remote command execution...

Kyverno ignores subjectRegExp and IssuerRegExp

Summary Kyverno ignores subjectRegExp and IssuerRegExp while verifying artifact's sign with keyless mode. It allows the attacker to deploy kubernetes resources with the artifacts that were signed by unexpected certificate. Details Kyverno checks only subject and issuer fields when verifying an...

SOFARPC Code Issue Vulnerability

SOFARPC is a high-performance , highly scalable , production-grade Java RPC framework for SOFAStack . A code issue vulnerability exists in SOFARPC versions prior to 5.12.0, which stems from a gadget chain that bypasses the SOFA Hessian blacklist protection mechanism and relies only on the JDK, no...

Dissecting TriangleDB, a Triangulation spyware implant

Over the years, there have been multiple cases when iOS devices were infected with targeted spyware such as Pegasus, Predator, Reign and others. Often, the process of infecting a device involves launching a chain of different exploits, e.g. for escaping the iMessage sandbox while processing a...

Google offers up to $1.5 million bounty for remotely hacking Titan M chip

With its latest announcement to increase bug bounty rewards for finding and reporting critical vulnerabilities in the Android operating system, Google yesterday set up a new challenging level for hackers that could let them win a bounty of up to $1.5 million. Starting today, Google will pay $1...

Exploit Reseller Offering Up To $2.5 Million For Android Zero-Days

Well, there's some good news for hackers and vulnerability hunters, though terrible news for Google, Android device manufacturers, and their billions of users worldwide. The zero-day buying and selling industry has recently taken a shift towards Android operating system, offering up to $2.5 milli...