EUVD-2026-125034

Wasmtime 47.0.0 before 48.0.8, 49.0.0 before 49.0.5, and 50.0.0 before 50.0.1 contains a cross-engine type confusion vulnerability because StructType::withfinalityandsupertype does not validate that the supplied supertype belongs to the same Engine. Embedders using multiple engines that create a ...

CVE-2026-126409

Wasmtime versions 47.0.0 before 48.0.8, 49.0.0 before 49.0.5, and 50.0.0 before 50.0.1 are vulnerable to a cross-engine type confusion issue. The root cause is that the StructType::with_finality_and_supertype function fails to verify that a supplied supertype belongs to the same Engine . This all...

Exploit for CVE-2026-6460

postgresql-type-confusion-cve-2026-6460 Crash-lab kit for C...

Malicious code in math-helpers-extra-utils (npm)

Source: amazon-inspector cc75601c6416f2ac62b69fb197e0338f1e9a878fe15e83a48fc25c9aea8bbe55 [email protected] is advertised as 'Extra math helper utilities' and ships an empty index.js, but also includes thunderboltRegistry.js which registers factories under Wix-internal registry names...

Malicious code in axon-web (npm)

Source: amazon-inspector 395db55c618565f281d33b84b001d9c395ddcd7456ecc8906e5fd6577c16b3f5 On module load, index.js reads os.hostname and process.env.USER/USERNAME and encodes them into a subdomain of an interactsh oast.fun out-of-band collector, then performs a DNS resolution against that subdoma...

Malicious code in @securihackbot/depconf-flow-1792484611 (npm)

Source: amazon-inspector 6dc8c3628b1d44eca51a5cde6143c1760a5d393b45729f174bab73f76f8641e8 Package publishes under the @securihackbot scope as a public dependency-confusion squat of an internal name. The declared postinstall script executes postinstall.js, which on npm install collects host...

Malicious code in internallib_v811 (npm)

Source: amazon-inspector cee312ec1c8c2f9177c54179b22a3f493ba30ee35b5f3c41952b5bdbbfd4eed0 package.json declares the dependency internallib-helper with a source of http://10.0.77.5:8000/internallib-helper-1.0.1.tgz — a plain-HTTP tarball URL on a private IP, not a registry version range. On npm...

CVE-2026-34344

CVE-2026-34344 Information This vulnerability was originally discovered by @angelboy. I reproduced the vulnerability independently for educational and case-study purposes. Microsoft update detail: CVE-2026-34344 PoC has demonstrate crash by Type Confusion vulnerability. However, I don't have any...

wp2shell-poc

How does this work at all How this PoC differs from the public wp2shell exploits all pocs weaponize the same two bugs - the REST batch route confusion CVE-2026-63030 and the authornotin SQL injection CVE-2026-60137 - with the same double-nested batch shape. What differs between them is the RCE pa...

SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit

= doi.org/10.5281/zenodo.18278825 = orcid.org/0009-0007-7728-256X RECONSTRUCTIONANALYSIS CVE-2026-21858: Ni8mare - n8n RCE Full Chain Exploit 1. Executive Summary & Overview This document presents a deterministic technical reconstruction analysis of the CVE-2026-21858 vulnerability, internally...

My-Presentation-Slides

My-Presentation-Slides Orange Tsai's public presentation slides. You can find me at: Blog: https://blog.orange.tw/ Mail: [email protected] Twitter: @orange8361 2026 The Last Proof of Human Craft: Forging a Microsoft Edge Full Chain with Logic Bugs Only! Hexacon ↖乂古法挖洞乂↘ 純邏輯 Microsoft Edge...

MAL-2026-19230 Malicious code in internallib_v811 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee312ec1c8c2f9177c54179b22a3f493ba30ee35b5f3c41952b5bdbbfd4eed0 package.json declares the dependency internallib-helper with a source of http://10.0.77.5:8000/internallib-helper-1.0.1.tgz — a plain-HTTP tarball UR...

CVE-2019-11707-from-an-IonMonkey-type-confusion-to-SYSTEM-

CVE-2019-11707 WINDOWS EXPLOIT POC Full research here: https://blog.grunt.ar/bin-exploitation/binary-gecko-academy/cve-2019-11707-firefox-ionmonkey-to-system-en/ Video POC https://youtu.be/5Q5SkR7qslg...

CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box

CVE-2026-2796 + CVE-2026-2768 — Escape the Wasm Box Full-chain Firefox exploitation research: a WebAssembly type confusion for renderer code execution , chained toward a parent-process bug for a sandbox escape. Both bugs were fixed in Firefox 148 MFSA-2026-13; the target here is a Firefox...

CVE-2024-23222-Coruna-Exploit-Kit-Deobfuscated

🏴‍☠️ Coruna iOS Exploit Kit: CVE-2024-23222 Research 📌 Overview This repository contains a comprehensive technical analysis and deobfuscation research of the Coruna iOS Exploit Kit. The research focuses on documenting how the exploit chain targets CVE-2024-23222 — a high-severity type confusion...

CVE-2026-63030

LANGZ — wp2shell Exploit Tool Author: LANGZ CVE: CVE-2026-63030 Chained with CVE-2026-60137 Severity: Critical CVSS 9.8 Type: Pre-Authentication Remote Code Execution RCE ⚠️ Disclaimer This tool is provided strictly for educational purposes and authorized security testing only. By using this tool,...

User Profile Builder 3.16.4 - Unauthenticated Authentication Bypass

The User Profile Builder plugin for WordPress version 3.16.4 is vulnerable to an authentication bypass via type confusion. Profile Builder's automatic-login-after-registration handler passes the return value of wpinsertuser through absint before testing it with iswperror, so the error check runs...

MantisBT < 2.28.1 - SOAP API Authentication Bypass

Mantis Bug Tracker 2.28.1 on MySQL databases contains an authentication bypass caused by improper type checking on the password parameter in the SOAP API, letting attackers login without the actual password using a crafted SOAP envelope, exploit requires knowing the victim's username. id:...

N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 id: CVE-2026-86206 info: name: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing author:...

CVE-2018-0114-PoC

CVE-2018-0114 PoC Wrote this for PentesterLab If you are from PentesterLab's don't cheat, it's alot better to learn. Hope it's useful to someone, if not to me in the future : Example $ python3 script.py Making keys... 'alg': 'RS256', 'jwk': 'kty': 'RSA', 'kid': '[email protected]', 'use':...