bxploit

BXPLOIT AI-Powered Penetration Testing Framework built on Kim...

Exploit for Improper Input Validation in Google Chrome

--- CVE-2026-11120 – Command Injection via Git URL in CI/CD...

Exploit for Use After Free in Google Chrome

--- CVE-2026-11116 – SNMPv3 Authentication Bypass via Defaul...

Exploit for Improper Input Validation in Google Chrome

--- CVE-2026-11113 – SMTP Header Injection in Contact Form...

CVE-2026-18686

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function nas-web.adduser of the file /cgi-bin/glc of the component nas-web RPC Wrapper. Performing a manipulation results in command injection. The attack can be initiated remotely. The exploit is now publi...

CVE-2026-18685

A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function setupgrade of the file /cgi-bin/glc of the component modem.so. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly...

Exploit for Improper Input Validation in Google Chrome

--- CVE-2026-11112 – XXE via SVG Image Upload Program C...

Exploit for Out-of-bounds Read in Google Chrome

--- CVE-2026-11111 – TOCTOU in File Permission Check Before...

Exploit for Use of Uninitialized Variable in Google Chrome

--- CVE-2026-11110 – AES-GCM Nonce Reuse Leading to Key Reco...

Exploit for Use of Uninitialized Variable in Google Chrome

--- CVE-2026-11109 – Bluetooth Classic KNOB Attack Key Nego...

Exploit for Improper Privilege Management in Google Chrome

--- CVE-2026-11108 – Integer Overflow in Memory Allocator k...

CVE-2026-18686

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function nas-web.adduser of the file /cgi-bin/glc of the component nas-web RPC Wrapper. Performing a manipulation results in command injection. The attack can be initiated remotely. The exploit is now publi...

CVE-2026-18686 GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function nas-web.adduser of the file /cgi-bin/glc of the component nas-web RPC Wrapper. Performing a manipulation results in command injection. The attack can be initiated remotely. The exploit is now publi...

Exploit for Improper Input Validation in Google Chrome

--- CVE-2026-11105 – Stack Buffer Overflow in Custom Base64...

Exploit for Use of Uninitialized Variable in Google Chrome

--- CVE-2026-11104 – Python SSTI via Jinja2 |attr Filter B...

Exploit for Improper Privilege Management in Google Chrome

--- 3. CVE-2026-11103 – GraphQL Batching Alias Rate Limit By...

Exploit for Use of Function with Inconsistent Implementations in Google Chrome

--- CVE-2026-11102 – OAuth2 Implicit Grant Fragment Hijackin...

Exploit for Use of Uninitialized Variable in Google Chrome

CVE-2026-11101 – HTTP Cache Poisoning via Unkeyed Query Parame...

CVE-2026-18684

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affects the function removeprofile of the file /cgi-bin/glc of the component modem.so. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the...

CVE-2026-18685 GL.iNet GL-MT3000 modem.so glc set_upgrade command injection

A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function setupgrade of the file /cgi-bin/glc of the component modem.so. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly...