PoC mới public

Repo GitHub mới tạo có chứa mã CVE trong tên. Cập nhật 9 giờ trước.

⚠ PoC trên GitHub chưa được kiểm duyệt, đã có nhiều repo "PoC" giả chứa mã độc. Chỉ đọc code và chạy trong máy ảo cô lập, không chạy trên máy cá nhân.

CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

WoYinDao/CVE-2026-109618-CVSS-9.2-Critical ★ 7

PHP CVE-2026-109618/-109619 research archive: lab-conditioned chains (A/C), P1-P5 primitives, 3x ASAN conviction of an INDEPENDENT var_destroy UAF still alive on 8.4.27 (chainB/), official-patch diff analysis, 18-shot negative matrix. Patched: 8.2.35/8.3.36/8.4.27/8.5.12
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

AmpedWasTaken/PHP2Shell-CVE-2026-109618-CVE-2026-109619 ★ 2

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVE-2026-51954 Chưa chấm 1 ngày trước

Envincion/CVE-2026-51954 ★ 0
CVE-2026-77680 Trung bình 5.3 1 ngày trước

OJ01-creates/CVE-2026-77680-Security-Analysis ★ 0

Cybersecurity research and vulnerability analysis
CVE-2026-110372 Nghiêm trọng 9.8 1 ngày trước

BIBILZERODAY/CVE-2026-110372-MASS-EXPLOIT-WEBSHELL.STORE ★ 0

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.
CVE-2026-104736 Nghiêm trọng 9.8 1 ngày trước

BIBILZERODAY/CVE-2026-104736-Mass-Webshell-CVE ★ 0

The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request parameter during the checkout AJAX action. The value is passed through sanitize_text_field(), which does not strip serialized object syntax, then stored in the LearnPress session table and later fed to LP_Helper::maybe_unserialize() → unserialize() (without an allowed_classes restriction) by LP_Session_Handler::get() on subsequent requests. This makes it possible for unauthenticated attackers to inject a PHP Object.
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

xuehuolll/php2shell-CVE-2026-109618-109619 ★ 27

CVE-2026-109618/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

zhaoboy9692/CVE-2026-109618_ ★ 0

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

Zer061/CVE-2026-109618 ★ 61

PoC CVE-2026-109618 / -109619 (PHP session.upload_progress heap UAF)
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

SeanDishman/php2shell-CVE-2026-109618-CVE-2026-109619 ★ 0

Example lab for CVE-2026-109618 / CVE-2026-109619 (php2shell): unpatched PHP session.upload_progress site + Python client.
CVE-2026-9618 Trung bình 4.3 1 ngày trước

SleepTheGod/cve-2026-9618-Patch ★ 0

cve-2026-9618 Poc Patch
CVE-2026-59774 Nghiêm trọng 9.8 1 ngày trước

asvorg/CVE-2026-59774-poc ★ 0

PoC for Gitea versions before 1.27.1 is vulnerable to Path Traversal (CWE-22), which leads to unauthenticated arbitrary file read / information disclosure leading to RCE CVSS 9.8
CVE-2026-62911 Cao 8.0 1 ngày trước

fahise/cve-2026-62911 ★ 1

cve-2026-62911-exploit
CVE-2026-86950 Cao 8.8 1 ngày trước

jpdagostin0/CVE-2026-86950-POC ★ 1

Proof of Concept for CVE-2026-86950
CVE-2026-72867 Nghiêm trọng 9.9 2 ngày trước

Lulztigre/CVE-2026-72867 ★ 0

Working, stdlib-only PoC. A low-privileged authenticated user stores a shell palistener