php2shell-619-poc

CVE-2026-109619 — PHP Session Upload Progress OOM → RCE Explo...

sshole-poc

sshole-poc Self-contained lab reproducing CVE-2026-123158...

sshole

\sshole — OpenSSH + musl libc Authentication Bypass A detail...

Exploit for CVE-2026-120491

CVE-2026-120491: Wing FTP Server legacy Activity XSS This rep...

sshole

CVE-2026-123158 PoC Proof of Concept PoC exploit for CVE-...

jeecg-tiplus

jeecgboot-tiplus vulnerability detection by dollmarker v1.0 J...

Exploit for Use After Free in Linux Linux_Kernel

No d...

Exploit for CVE-2026-123158

Alpine Linux OpenSSH Password Authentication Bypass CVE-2026-...

Exploit for CVE-2026-116214

CVE-2026-116214 1. CVE metadata | Field | Value | |---|--...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109619 — PHP Session Upload Progress UAF → RCE A GDB...

Exploit for Deserialization of Untrusted Data in Openidentityplatform Openam

CVE-2026-33439 — Remote Code Execution in OpenAM An unauthen...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Guard Scanner kerentanan PHP2Shell — CVE-20...

Exploit for CVE-2026-122158

CVE-2026-122158 — InvoiceShelf cross-tenant privilege escalati...

OpenSSH: Auth Bypass

sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass related to misinterpretation of whether a string is intended to be a password hash. For some configurations of accounts, any password between 256 and 1024 characters...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit

pk2root — CVE-2026-41651 Independent C implementation of the...

Dell Wyse Management Suite Unauthenticated Remote Code Execution

Dell Wyse Management Suite versions prior to 5.5 contain missing authorization and unrestricted dangerous file upload vulnerabilities. This proof of concept chains the issues to create a Global Administrator account and optionally upload a JSP web shell for remote code execution...

Wing FTP Server 8.2.5 Cross Site Scripting

Wing FTP Server versions before 8.2.6 contain a stored cross site scripting vulnerability allowing authenticated web-client users to forge a connection ID through the nowpath parameter in webclient/makethumb.html. The legacy administrator Activity page renders it without HTML escaping...

OpenSSH 10.6p1 Password Authentication Bypass

OpenSSH version 10.6p1 contains a password authentication bypass when built with musl libc and PAM disabled. Affected configurations with password authentication enabled can accept logins to accounts with a password field under stated conditions. https://packetstorm.news/download/239810...

OPNsense os-acme-client 4.17 Command Injection

OPNsense os-acme-client version 4.17 contains an authenticated OS command injection in Google Cloud DNS validation, allowing WebGUI/API users with certificate issuance or renewal privileges to execute commands as root. A proof of concept is included. https://packetstorm.news/download/239793...

HONOR AMG-AN00 Android 16 Kernel 6.1.157 Privilege Escalation

HONOR AMG-AN00 Android 16 kernel version 6.1.157 contains a POSIX CPU timer use-after-free vulnerability. The supplied proof of concept triggers the flaw to obtain a temporary uid 0 shell. https://packetstorm.news/download/239799...