← CVE

PoC mới public

Repo GitHub mới tạo có chứa mã CVE trong tên. Cập nhật 2 giờ trước.

• CVE-2026-111943 Chưa chấm 15 giờ trước
  phpc0de/CVE-2026-111943-Remediator ★ 1

  针对 CVE-2026-111943（eMudhra / emSign 根证书密钥熵坍塌惨案）的突发供应链应急排查与修复工具：一键清洗 Kali、Python、Node.js、uv、Go、Java 与 Docker 中的致命弱私钥信任链。Emergency audit & remediation toolkit for CVE-2026-111943 (eMudhra / emSign CA Private Key Entropy Collapse). Purges weak intermediate/root CAs across Kali, Python, Node.js, Rust uv, Go, Java, and Docker toolchains.

• CVE-2026-109618 Nghiêm trọng 9.2 15 giờ trước
  nukIeer/CVE-2026-109618-109619-checker ★ 0

  Passive PHP version checker for CVE-2026-109618 / CVE-2026-109619 (php2shell)

• CVE-2026-86478 Nghiêm trọng 9.8 15 giờ trước
  LHeiakim/CVE-2026-86478-PoC ★ 0

  CVE-2026-86478 - JetBrains YouTrack Helpdesk unauthenticated account takeover via self-asserted email (CVSS 9.8)

• CVE-2026-86478 Nghiêm trọng 9.8 15 giờ trước
  LHeiakim/CVE-2026-86478 ★ 0

  CVE-2026-86478 - JetBrains YouTrack Helpdesk unauthenticated account takeover via self-asserted email (CVSS 9.8)

• CVE-2026-109618 Nghiêm trọng 9.2 15 giờ trước
  frnmrls/php70-cve-2026-backport ★ 2

  Unofficial minimal source backport of CVE-2026-109618 and CVE-2026-109619 (php2shell) for PHP 7.0.33

• CVE-2026-110936 Cao 8.4 15 giờ trước
  DAS-Bodhi/CVE-2026-110936-Siemens-Attack ★ 0

  A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

• CVE-2026-109619 Nghiêm trọng 9.2 16 giờ trước
  basesixtythree/B63-POC-CVE-2026-109619 ★ 0

  PoC and verification material for CVE-2026-109619 (PHP stale worker-global state)

• CVE-2026-109618 Nghiêm trọng 9.2 16 giờ trước
  basesixtythree/B63-POC-CVE-2026-109618 ★ 0

  PoC and verification material for CVE-2026-109618 (PHP OOM bailout state corruption)

• CVE-2026-109618 Nghiêm trọng 9.2 17 giờ trước
  1amrahul/php2shell-cve-2026-109618-cve-2026-109619 ★ 2

  Independent verification of CVE-2026-109618 & CVE-2026-109619 (php2shell): kernel-proven session-lock-leak DoS on PHP 8.4.24, clean on patched 8.4.27, vendor OOM test suite 5-fail vs 0-fail. Lab, PoC scripts and full results - no weaponized exploit :)

• CVE-2026-109618 Nghiêm trọng 9.2 17 giờ trước
  skwirrel/php-cve-2026-109618-check ★ 0

  Check whether your own PHP 7.x-8.1 server still has the CVE-2026-109618 out-of-memory handling (install-on-server probe, not a scanner)

• CVE-2026-109618 Nghiêm trọng 9.2 17 giờ trước
  hoehyeonlab/php-cve-2026-109618-check ★ 0

  Read-only checker + field-tested response guide for PHP CVE-2026-109618/109619 (unauthenticated RCE, CVSS 9.2). Detects vulnerable PHP on hosts and in Docker.

• CVE-2026-63030 Nghiêm trọng 9.8 18 giờ trước
  Tersurrr/Orga-Tersur-Daniel-CVE-2026-63030 ★ 0

  WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution.

• CVE-2026-97629 Cao 8.3 18 giờ trước
  PhiNode-Labs/nginx-cve-2026-97629 ★ 0

  CVE-2026-97629 — nginx TLS session-ticket forgery that can bypass client-certificate (mTLS) authentication. Root cause, one-line patch, proof-of-concept exploit and reproduction evidence. Found and disclosed by PhiNode Labs; credited by F5. Fixed in nginx 1.31.7 / 1.30.6.

• CVE-2026-109618 Nghiêm trọng 9.2 18 giờ trước
  waksboy/fixed-fpm-cve-2026-109618-and-109619-images ★ 6

  Patches, Docker images and proofs for CVE-2026-109618 / CVE-2026-109619 on PHP 5.0 to 8.1 without an official release

• CVE-2026-109618 Nghiêm trọng 9.2 18 giờ trước
  cj667113/OCI-Ansible-Fix-CVE-2026-109618_CVE-2026-109619 ★ 0

  PHP2Shell Audit and Fix