## Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w5f2-9q9c-ff4h. This link is maintained to preserve external references. ## Original Description LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. Messages on that socket are msgpack. Extension code 1 is passed to DeviceIPCWrapper.Deserialize, which calls pickle.loads, while the server is still decoding request arguments and before the handler runs. A single unauthenticated ZMQ DEALER message to the transport port (default 5555) therefore executes code as the user the LMCache process runs as. Official container images run that process as root. The transport binds to localhost unless the operator sets a routable address with --host, which is how multi-node deployments let peers connect.
PoC: CVE-2026-112688-backboardd
CVE-2026-112688 CoreMedia PoC: controlled saved-LR corruption in backboardd, stopped by PAC, plus evidence of a constrained write-1 primitive.
PoC: cve-2026-111497-wordpress-pingback-brotli
Local WordPress pingback/Brotli RCE reproduction with a one-use Podman lab
PoC: scanner-syno
This is a scanner designed for security researchers to safely detect (using a read-only approach, without executing any exploits) two Synology vulnerabilities discussed in the SVRForum post: [Synology Ransomware Vulnerability CVE-2024-10441 / Synology-SA-24:20](https://svrforum.com/nas/3232929).
PoC: CVE-2026-115904
OS Command Injection PoC & Write-up - CVE-2026-115904
PoC: omnicheck_CVE-2026-98432
Non-destructive checker for CVE-2026-98432 (Linux kernel TCP use-after-free): patch status, exposed listeners and mitigation verification. By OMNIVERSE.
PoC: CVE-2026-111497
Node2Shell
PoC: minecraft-rce-lab
Proof of Concept (PoC) for Remote Code Execution (RCE) via CVE-2021-44228 (Log4Shell) in Minecraft Java Edition.
PoC: cve-2026-112816-poc
Independent lab reproduction and post-patch verification tool for CVE-2026-112816 (LXD/MicroCloud mTLS chain bypass).
PoC: CVE-2026-116296
Gitea archived repository write-protection bypass — milestones, releases and labels unprotected (CVE-2026-116296)
PoC: NODE2SHELL
Read-only Node2Shell detection for CVE-2026-111497 using verified Node.js artifact identities.
PoC: PHP2SHELL
Evidence-based PHP2Shell assessment for CVE-2026-109618 and CVE-2026-109619.
PoC: SamTimer
One-tap Android root for Samsung Galaxy devices, built around the CVE-2026-98260 timer exploit.
PoC: cve-2026-98432-mitigation
Interim mitigation for CVE-2026-98432 on Ubuntu
PoC: salesforce-cve-remediation-demo
Unofficial demo built with Devin - synthetic data: CVE-2026-117561 command-injection remediation walkthrough
PoC: CVE-2026-98432
CVE-2026-98432
PoC: cve-2026-98432-linux
Checklist para proteger Linux (desktop e VPS) da CVE-2026-98432
PoC: php_vulnerability_scanner
A Python-based security scanner designed to identify potential exposure to critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, which may lead to Out-of-Memory (OOM) conditions and Remote Code Execution (RCE).
PoC: CVE-2026-98432-Checker-v-1.0-
El script hace una revisión de tu Linux frente a esa vulnerabilidad, sin tocar nada por defecto: osea mira tu kernel — lee tu versión real de Linux (uname -r) y la compara con la lista de versiones donde ya está arreglado el fallo.
PoC: infinitylock-app
Android app that checks a supported Vivo X200 Ultra, then uses Shizuku to attempt temporary root with CVE-2026-98260 and load KernelSU. Optional boot auto-root; one attempt per boot.
PoC: CVE-2026-105863
just a poc
PoC: kernel98scan
Is your Linux host exposed to CVE-2026-98432?
PoC: cve-2026-98432-dkms
DKMS mitigation for CVE-2026-98432
PoC: sc3010
Local-only educational demo of CVE-2025-29927 (Next.js middleware authorization bypass) with defense-in-depth
PoC: cve-2026-98432-check
Verifica se um host descarta SYN TCP IPv4 com IP options (mitigação do CVE-2026-98432)
PoC: GreenshotShell-CVE-2023-34634
Command execution (shell) through CVE-2023-34634.
PoC: cve-2026-98432-kernel-upgrade
Safe kernel upgrade for CVE-2026-98432 on Ubuntu 24.04 with NVIDIA, and an analysis of the bug
PoC: B63-POC-CVE-2026-42945
PoC and verification material for CVE-2026-42945 (CWE-122 heap overflow in ngx_http_rewrite_module -> attacker-shaped cleanup hijack -> system() RCE in the ASLR-off worker; patched-twin negative + 5/5 reliability captured in the shipped lab)
PoC: DFIR-CVE-2021-3156-Incident-Response
DFIR investigation of SSH brute force attack and privilege escalation via CVE-2021-3156.
PoC: CVE-2026-63030-wp2shell-repro
WordPress REST Batch route confusion + SQLi RCE chain reproduction (CVE-2026-63030 & CVE-2026-60137)
PoC: CVE-2024-4367
PoC for CVE-2024-4367
PoC: CVE-2026-98432-scan
CVE-2026-98432 - LINUX KERNEL IPv4 TCP USE-AFTER-FREE AUDIT CVSS 9.8 (Critical) | Remote Code Execution & Kernel Denial-of-Service
PoC: wazuh-php2shell
Rule Wazuh untuk mendeteksi eksploitasi PHP2Shell (CVE-2026-109618 / CVE-2026-109619) pada server web berbasis PHP (Apache/`mod_php`, Nginx + PHP-FPM)
PoC: log4j-xz-lessons
Engineering sync brief: lessons from Log4Shell (CVE-2021-44228) and xz-utils backdoor (CVE-2024-3094)
PoC: CVE-2026-110447
CVE-2026-110447 — Collabora Online "Built-in CODE Server"
PoC: CVE-2026-56190-RCE
Full RCE exploit chain for CVE-2026-56190 on Windows Server 2022. Bypasses CFG, XFG, and DEP
PoC: mitigate-cve-2026-98432
Use puppet to mitigate CVE-2026-98432 until vendor fixes are available.
PoC: cve-2026-98432-root-shell
CVE-2026-98432 lab root-shell kit (aid kernel; not a stock remote exploit)
PoC: B63-POC-CVE-2026-33186
CVE-2026-33186 (grpc-go): authorization bypass via a slash-less HTTP/2 :path -- b63 showcase, lab-verified with patched and config-leg negatives
PoC: CVE-2026-14900-PoC
CVE-2026-14900: Unauthenticated RCE in Cost Calculator Builder Pro (<= 4.0.3) via XOR Gadget
PoC: CVE-2026-74583
CVE-2026-74583: use-after-free in Linux net/sched cls_route (route4) - write-up, KASAN reproducer, A/B evidence
PoC: CVE-2025-8110
Proof of concept for CVE-2025-8110: Gogs authenticated symlink write
PoC: IONSTACK-S22E
CVE-2026-43499 (IonStack/GhostLock) port for Samsung Galaxy S22 SM-S901E (r0q) on S901EXXSAEXF8 — verified uid=0
PoC: php2shell-scanner
Read-only scanner for PHP2Shell (CVE-2026-109618 / CVE-2026-109619): finds vulnerable PHP, stale processes and webshells, and prints a remediation plan
PoC: CVE-2026-53157
CVE-2026-53157: use-after-free in Linux Phonet phonet_device_destroy() - write-up, reproducer, KASAN evidence
PoC: php2shell-wazuh-detections
Wazuh rules and Sigma equivalents for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) on Apache mod_php: a non-root shell execve rule for confirmed execution, plus the Apache-wrapped PHP fatal memory-exhaustion line that stock rules decode at level 0.
PoC: lxd-scanner
Detection-only local triage scanner for CVE-2026-112816 (CVSS 10.0) in Canonical LXD and MicroCloud: grades LXD, MicroCloud and Incus versions against the fixed builds, catches the 6.10.0 trap. No payloads, no remote probing.
PoC: hdu-is-work1-copyparty-cve-2023-37474
HDU IS Work 1: secure Flask REST API, security CI, and CVE-2023-37474 (copyparty) reproduction and remediation
PoC: linux-tcp-uaf-cve-2026-98432
CVE-2026-98432 (Linux IPv4 TCP inet_opt UAF): read-only diagnostic script, no-reboot nftables/sysctl mitigations, Ansible rollout and response guide (EN/KO)
PoC: cve-2026-98432-check
A script for cve-2026-98432 vuln
PoC: security-digest-modern-classics
Modern Classics — Quarterly Security Digest: Log4Shell, Heartbleed, Shellshock, xz backdoor (CVE-2021-44228, CVE-2014-0160, CVE-2014-6271, CVE-2024-3094) with GHSA ids, CVSS, first fixed versions, links and logo images
PoC: CVE-2026-98432
Mitigates CVE-2026-98432 via firewall rules
PoC: CVE-2026-98432
CVE-2026-98432: Linux Kernel TCP/IPv4 Race Condition Use-After-Free (CVSS 9.8) — PoC, Scanner, Detection Rules
PoC: php-search
PHP2Shell scanner - CVE-2026-109618 and CVE-2026-109619
PoC: edex-afterlife
Unofficial revival of eDEX-UI: runs on modern Windows, fixes CVE-2023-30856. Sci-fi terminal emulator.
PoC: zero-day-php-rce-mitigation
Incident Response Case Study: Zero-Day RCE Vulnerability Mitigation & Zero-Downtime Container Hotfix on AWS + Docker (CVE-2026-109618)
PoC: CVE-2026-9151
Authenticated OS command injection in the TP-Link Archer AX17 v1 VPN client import.
PoC: CVE-2026-116512
Exploit for CVE-2026-116512 - weDevs Project Manager <= 4.1.1 Unauthenticated RCE. For educational and authorized security testing only.
PoC: cve-2026-98432-mitigation-rpm
RPM package that applies an nftables mitigation for CVE-2026-98432 (RHSB-2026-016) on EL 8/9/10
PoC: B63-POC-CVE-2026-105192
CVE-2026-105192 (LMCache): pre-auth pickle deserialization RCE over the unauth ZMQ transport (single frame) — b63 showcase, lab-verified with patched-build negative + reliability/matrix evidence
PoC: log4shell-audit-25
Log4Shell (CVE-2021-44228) security audit and remediation tracking
PoC: log4shell-audit-24
Log4Shell (CVE-2021-44228) security audit and remediation tracking
PoC: log4shell-audit-tracking
Quarterly security briefing tracking repo for Log4Shell (CVE-2021-44228) remediation
PoC: log4shell-audit-23
Log4Shell (CVE-2021-44228) security audit and remediation tracking
PoC: log4shellsecurity-audit
Log4Shell (CVE-2021-44228) security audit and remediation tracking
PoC: log4shell-audit-briefing
Log4Shell (CVE-2021-44228) security audit and remediation tracking
PoC: log4shell-audit-new
Log4Shell (CVE-2021-44228) security audit and remediation tracking
PoC: log4shell-audit-q4
Log4Shell (CVE-2021-44228) security audit and remediation tracking
PoC: B63-POC-CVE-2026-60004
CVE-2026-60004 (Gitea): unauth RCE via diffpatch add/add collision -> live git hook in bare temp clone (KEV) — b63 showcase, lab-verified with patched + unaffected negatives
PoC: log4shell-security-audit
Log4Shell (CVE-2021-44228) security audit and remediation tracking
PoC: log4shell-audit3
Quarterly security briefing notes and remediation tracking for Log4Shell (CVE-2021-44228).
PoC: log4shell-audit-22
Log4Shell (CVE-2021-44228) remediation audit and tracking for the quarterly security briefing.
PoC: log4shell-audit-21
Log4Shell (CVE-2021-44228) remediation audit and tracking for the quarterly security briefing.
PoC: log4shell-audit-19
Log4Shell (CVE-2021-44228) remediation audit and tracking for the quarterly security briefing.
PoC: CVE-2021-43798
CVE-2021-43798 – Grafana (8.0.0-beta1–8.3.0) arbitrary file read PoC
PoC: CVE-2026-98260-for-OPD2501
A CVE-2026-98260 adapt for OPPO Pad Air 5
PoC: Poc-exploit-for-CVE-2026-116779-FreeSWITCH-
🚨 CVE ID: CVE-2026-116779 📦 Product: FreeSWITCH 💉 Type: Command Injection (via SIP MESSAGE) 🔥 Score: 9.8 (Critical(RCE)) +20K target
PoC: SWITCH2-WEBKIT-JAILBREAK
Switch 2 WebKit jailbreak research: CSSFontFace UAF (CVE-2026-43715) primitives + fs escalation path + launcher
PoC: CVE-2026-109618-PHP2SHELL
SAHMSEC classroom lab for CVE-2026-109618(PHP2SHELL)
PoC: laravel-type-juggling-auth-bypass
Simulasi type juggling & implicit type conversion CVE-2026-114509 pada query autentikasi
PoC: phq110-root
PHQ110（OPPO OP5613 / Android 14 / C.53）内存态 uid0 研究快照：CVE-2026-43499 GhostLock 链 + uid0 rootd + Shizuku。不写分区、不持久化。
PoC: CVE-2023-30861-flask-lab
Educational Docker lab reproducing CVE-2023-30861 (Flask session cookie disclosure via missing Vary: Cookie), with exploit, patch verification and a full write-up
PoC: CVE-2026-98260-iQOO-Neo9-Pro-Root
基于CVE-2026-98260的iQOO Neo9 Pro 临时Root实现，AwA
PoC: CVE-2026-19971_guest
LB-LINK WR1210M (CVE-2026-19971) 未授权配置泄露漏洞与访客网络扩展攻击链分析
PoC: drop-ipv4-opt
XDP program to mitigate CVE-2026-98432
PoC: brotli-decoder-overflow
Analysis of buffer overflow in Google Brotli decoder (CVE-2026-111497)
PoC: CVE-2026-63765
PoC exploit for CVE-2026-63765 — Chatwoot < 4.16.0 unauthenticated arbitrary file write via ActiveStorage Direct Upload
PoC: php56-php2shell-rpm
PHP 5.6.40 RPM packages with PHP2Shell security patches for CVE-2026-109618 and CVE-2026-109619 on EL6.
PoC: xboard-core
Xboard 节点后端：基于 Xray-core v26.10.31，单补丁实现设备数/限速，严格对齐 Xboard V2 契约，内置 CVE-2026-98432 缓解
PoC: CVE-2026-107406
Citrix NetScaler RCE/DoS CVE-2026-107406
PoC: poc-CVE-2026-98258
Proof-of-Concept for CVE-2026-98258.
PoC: log4shell-audit-18
Log4Shell (CVE-2021-44228) security audit and remediation tracking
PoC: log4shell-audit-17
Log4Shell (CVE-2021-44228) security audit and remediation tracking
PoC: log4shell-audit-16
Quarterly security briefing research and tracking for Log4Shell (CVE-2021-44228) remediation.
PoC: log4shell-audit-15
Quarterly security briefing research and tracking for Log4Shell (CVE-2021-44228) remediation.
PoC: log4shell-audit-14
Quarterly security briefing notes and remediation tracking for Log4Shell (CVE-2021-44228).
PoC: log4shell-audit-20
Log4Shell (CVE-2021-44228) security audit and remediation tracking
PoC: log4shell-audit-2025
Quarterly security briefing notes and remediation tracking for Log4Shell (CVE-2021-44228) and related Log4j 2 vulnerabilities.
PoC: log4shell-audit2
Quarterly security briefing audit notes for Log4Shell (CVE-2021-44228) and remediation tracking.
PoC: log4shell-audit-followup
Log4Shell (CVE-2021-44228) security research notes and remediation tracking
PoC: CVE-2026-115965
CVE-2026-115965
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free