Catálogo de exploits

nginx heap buffer overflow PoC — CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.

A POC for the recently discovered Qualys bug on COW with XFS

CVE-2026-57973 is a medium-severity (CVSS 6.3) TOCTOU race condition flaw in Windows Subsystem for Linux (WSL2). It allows a local, low-privileged attacker to bypass security boundaries and perform unauthorized kernel-level tampering on the host machine without user interaction.

CVE-2026-63030 + CVE-2026-60137+poc

CVE-2026-43499: Linux kernel futex PI use-after-free research package

Read-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators (CVE-2026-63030 / CVE-2026-60137) across all hosted sites — per-user email reports, core file diff against clean WordPress, PHP/JS/htaccess/image analysis, and optional AI evaluation via Claude API.

The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users' bookings.

A poc for a vulnerability in ZTE File Manager (zte.com.cn.filer) which allows to read arbitrary files from other apps as the privileges of this file manager

Security Advisory: Unchecked Room Lookup Leads to Server Crash (Let's Chat)

Security Advisory: Remote Denial of Service via Reachable Assertion in URL Prefix Handling (rouille)

Adding --insecure to skip ssl

Security Advisory: HTTP Header Injection via Unvalidated CR and LF in Header Values (tiny_http)

PoC, IOCs, and detection logic for the SharePoint /_trust WS-Federation BinaryFormatter deserialization chain. Lab reconstruction covering unauthenticated RCE, in-process machine key theft, and the artifacts each variant leaves behind. SharePoint 2016, 2019, and Subscription Edition. CVE-2026-50522, CVE-2026-45659, CVE-2026-56164, CVE-2026-58644.

Security Advisory: Insufficient Access Controls Allow for Unauthorized Room Deletion (Let's Chat)

Security Advisory: Insufficient Access Controls Allow for Unauthorized File Downloads (Let's Chat)

Critical authentication bypass exploit for cPanel/WHM CVE-2026-41940. Leverages CRLF injection in cpsrvd daemon to gain root WHM access without credentials. Includes version detection, verbose logging, proxy support, JSON reporting, and post-exploitation account enumeration. For authorized security testing only.

Security Advisory: Unauthenticated Path Traversal Allows Arbitrary File Read (TinyWeb)

Security Advisory: HTTP Request Smuggling Enables Front-End Access Control Bypass (rouille)

Security Advisory: Unauthenticated Memory Leak Leads To Memory Exhaustion (TinyWeb)

Security Advisory: HTTP Response Splitting via Unvalidated Response Header Values (rouille)

Security Advisory: HTTP Request Smuggling via Unparsed Transfer-Encoding Values (tiny_http)

Docker-based isolated proof-of-concept lab for analysing CVE-2021-44228 (Log4Shell) for the COMP6441 Security Engineering project.

Security Advisory: Unauthenticated NULL Pointer Dereference Crashes the Server (TinyWeb)

soralis0912/CVE-2026-43499-warhol-root

CVE-2026-43499 research port for Galaxy S24 Ultra SM-S928U1 DZF2 (in progress)

SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter

Security Advisory: HTTP Request Smuggling via Transfer-Encoding Desynchronization (rouille)

基于内核漏洞CVE-2026-43499的本地提权适配，集成嵌入式 KernelSU.CVE-2026-43499+KernelSU越狱模式

Slidev presentation for Certighost (CVE-2026-54121), with Mermaid diagrams and exported assets.

WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering