CVE-2026-112621 POC

Just dropped a PoC for CVE-2026-43786. Local privilege escalation... to root through macOS CoreServices. Patched in Sequoia 15.8, Tahoe 26.7 and Golden Gate 27. Malwationshow more

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ,... exploiting the vm:// protocol to achieve Remote Code Executionshow more

Rooting Android: Exploiting Your GPU On Smartphone (CVE-2024-23380) by... Eugene Rodionov PoC exploit is not available for download. [slides] #BlackHatshow more

⚠️CVE-2026-85706 (CVSS 10.0)⚠️ Your GitLab will hand a stranger... its files. 😱 No login. No account. An attacker just URL-encodes one letter of commits → %63ommits, and GitLab-Workhorse waves the request through — so a single unauthenticated POST to the repository commits API reads files straight off the server filesystem. Config, internal logs, source paths, versions… all without ever signing in. Already in CISA KEV — exploited in the wild. 🚨 If you self-host GitLab, patch to 19.1.8 / 19.2.6 / 19.3.2 now. 🔥PoC + setup: #GitLab #ArbitraryFileRead #CVE #PoC #Exploit #CyberSecurity #CVE_2026_85706show more

I was able to reproduce the MacOS screensharing pre-auth... RCE. Patched in 26.6.1 (CVE-2026-65400)show more

Video of my PoC for CVE-2023-43641: out-of-bounds array access... in libcue. libcue is used by tracker-miners, which automatically scans new files in ~/Downloads, so the bug is triggered by downloading a file.show more

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an... attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in repliesshow more

reported a chrome fullchain (web -> shell) on pixel... 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome. now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k. despite cve + shell :|show more

I've confirmed Samsung's MagicINFO 21.1050 is VULNERABLE to the... publicly reported POC in the blog below. The media is reporting this as CVE-2024-7399, but if it is then the patch is incomplete. There is currently NO PATCH AVAILABLE!show more

Exploit Demo & Analysis Article by 78ResearchLab(78ResearchLab) CVE-2026-20817 :... Windows Error Reporting(WER) Service Elevation of Privilege Vulnerability #CVE_2026_20817 #LPE #Windowsshow more

📞 Microsoft fixed an authenticated RCE in Windows Telephony... Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:show more

“se um homem fala pra mim tome poc poc... eu mando ele embora” KKKKKKKKKKKKKKshow more

“POC solidarity”

Exim 4.99.3 is out, patching CVE-2026-45185, a critical RCE... found by XBOW! Check out our post linked in the reply; I'll summarize some details in this thread.show more

Today's exploit is for the latest Fedora 44, a... UAF in netfilter, CVE-2026-52912. It was introduced in Mar 2016 and fixed upstream in May 2026. Discovered and exploited by the NebuSec security pipeline. (RANDOM_KMALLOC_CACHES + SELinux) Exp source code:show more

Least favorite weekend... bye far #GoCougs #CVE #byefelicia #pleasecomeback

Our team has just successfully reproduced the IngressNightmare vulnerability... (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Security @quimerax_asmshow more