PoC mới public
Repo GitHub mới tạo có chứa mã CVE trong tên. Cập nhật 8 giờ trước.
-
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
-
CVE-2026-91858 Trung bình 6.5 1 ngày trước
Reproducer for CVE-2026-91858 — Apache Camel camel-fop XML External Entity (XXE) via a third-party TransformerFactory (CWE-611). Camel Spring Boot + Camel Quarkus.
-
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước
Local-only PoC lab for CVE-2026-109618 / CVE-2026-109619 (php2shell) — two critical RCEs in PHP core, session.upload_progress, on by default since 5.4. Docker A/B (vulnerable vs patched builds), race harness, ASAN proof.
-
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
-
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
-
CVE-2026-88901 Cao 8.2 1 ngày trước
Reproducer for CVE-2026-88901 — Apache Camel camel-smooks XML External Entity (XXE) processing (CWE-611, HIGH). Camel Spring Boot.
-
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước
Checks Linux and Windows servers for PHP CVE-2026-109618 / CVE-2026-109619 (php2shell) and offers fixes, asking before each change
-
CVE-2026-85317 Trung bình 4.8 1 ngày trước
Reproducer for CVE-2026-85317 — Apache Camel camel-http OAuth2 token cache confusion (CWE-524). Camel Spring Boot.
-
CVE-2026-85316 Trung bình 4.8 1 ngày trước
Reproducer for CVE-2026-85316 — Apache Camel camel-platform-http unintended proxy mode from a path prefix (CWE-1220). Camel Spring Boot + Camel Quarkus.
-
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
-
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước
Temp fix with Ansible (CVE-2026-109618/CVE-2026-109619)
-
CVE-2026-102764 Nghiêm trọng 9.3 1 ngày trước
CVE-2026-102764 — BeyondTrust Remote Support Exploit
-
CVE-2026-85315 Trung bình 5.3 1 ngày trước
Reproducer for CVE-2026-85315 — Apache Camel camel-grpc consumer exception disclosure (CWE-209). Camel Spring Boot + Camel Quarkus.
-
CVE-2026-72867 Nghiêm trọng 9.9 1 ngày trước
Dokploy <=0.29.12 compose branch stored command injection (CVSS 9.9 Critical) — clean-room exploit, swarm lab orchestration, reproduced live against v0.29.12 with host-takeover channel proof
-
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước
PHP2Shell (CVE-2026-109618 / CVE-2026-109619) Docker lab and PoC. Use-After-Free in PHP's session.upload_progress.