poc-archive

poc-archive A structured archive of security research proof-o...

CVE-2026-46431

creationtimestamp| type| source ---|---|--- 2026-05-14 09:15:35+00:00| published-proof-of-concept| https://github.com/xyproto/algernon/security/advisories/GHSA-hw27-4v2q-5qff...

CVE-2026-46430

creationtimestamp| type| source ---|---|--- 2026-05-14 09:10:41+00:00| published-proof-of-concept| https://github.com/xyproto/algernon/security/advisories/GHSA-gj84-924c-48fx...

CVE-2026-46426

creationtimestamp| type| source ---|---|--- 2026-05-14 08:35:54+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-82rc-gxrg-v4gf 2026-05-27 19:19:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmu7ynnjzd2q...

CVE-2026-46424

creationtimestamp| type| source ---|---|--- 2026-05-14 08:33:39+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-6vp2-6r7m-2jvx 2026-05-27 19:31:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmuamzumeb2o...

Exploit-POC

🛡️ Exploit-POC A curated collection of Proof-of-Concept Po...

Exploit for CVE-2026-46300

⚠️ Security Research & Legal Disclaimer 📌 Purpose of This...

New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruption

Details have emerged about a new variant of the recent Dirty Frag Linux local privilege escalation LPE vulnerability that allows local attackers to gain root access, making it the third such bug to be identified in the kernel within a span of two weeks. Codenamed Fragnesia , the security...

CVE-2026-45709

creationtimestamp| type| source ---|---|--- 2026-05-14 04:53:50+00:00| published-proof-of-concept| https://github.com/axllent/mailpit/security/advisories/GHSA-j3fj-qppj-fmmc...

CVE-2026-45711

creationtimestamp| type| source ---|---|--- 2026-05-14 04:53:32+00:00| published-proof-of-concept| https://github.com/axllent/mailpit/security/advisories/GHSA-qx5x-85p8-vg4j...

CVE-2026-45713

creationtimestamp| type| source ---|---|--- 2026-05-14 04:53:02+00:00| published-proof-of-concept| https://github.com/axllent/mailpit/security/advisories/GHSA-fpxj-m5q8-fphw 2026-07-20 17:01:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3ri4xgy22g...

CVE-2026-45785

creationtimestamp| type| source ---|---|--- 2026-05-14 03:12:49+00:00| published-proof-of-concept| https://github.com/openmcdf/openmcdf/security/advisories/GHSA-5qwm-7pvp-w988...

CVE-2026-45270

creationtimestamp| type| source ---|---|--- 2026-05-14 01:57:53+00:00| published-proof-of-concept| https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-gqr2-7hcg-rchf 2026-07-20 16:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3o36ycb32d 2026-07-20...

CVE-2026-45139

creationtimestamp| type| source ---|---|--- 2026-05-14 01:57:46+00:00| published-proof-of-concept| https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-245j-xjvr-xvm5...

CVE-2026-45138

creationtimestamp| type| source ---|---|--- 2026-05-14 01:57:30+00:00| published-proof-of-concept| https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-2m69-jmvh-6chr 2026-07-20 01:55:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr26t62ufj2e...

PJPROJECT 2.16 - Heap Bufferoverflow

Exploit Title: PJPROJECT 2.16 - Heap Bufferoverflow Google Dork: CVE-2026-25994 PJSIP PJNATH pjsip ≤ 2.16 Date: Apr 6 2026 Exploit Author: V.Nos - BinSmaser Team Vendor Homepage: https://github.com/pjsip/pjproject Software Link: https://github.com/VABISMO/cve-2026-25994PJSIP Version: rxufrag; -...

UGen: An Agentic Framework for Generating Microarchitectural Attack PoCs

Microarchitectural attacks continue to evolve, uncovering new exploitation vectors in modern processors. From a defensive perspective, assessing a system's susceptibility to such attacks remains challenging. Developing functional attack implementations is labor-intensive, requires deep...

PT-2026-41185

Name of the Vulnerable Software and Affected Versions CodeWhale versions prior to 0.8.26 Description Server-Side Request Forgery SSRF occurs when the application fails to properly validate IPv6 addresses provided directly in a URL, such as http://::1. While the system validates hostnames that...

CVE-2026-46338

creationtimestamp| type| source ---|---|--- 2026-05-13 22:22:58+00:00| published-proof-of-concept| https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-62q4-447f-wv8h...

CVE-2026-46378

creationtimestamp| type| source ---|---|--- 2026-05-13 20:50:17+00:00| published-proof-of-concept| https://github.com/TomWright/dasel/security/advisories/GHSA-m6xr-fvfg-5g64 2026-07-16 19:41:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrykn3wqb22...