Exploits

Sanitized XenForo write-up and proof of concept for CVE-2026-73313.

Sanitized XenForo write-up and proof of concept for CVE-2026-73312.

Sanitized XenForo write-up and proof of concept for CVE-2026-73311.

Sanitized XenForo write-up and proof of concept for CVE-2026-73310.

Sanitized XenForo write-up and proof of concept for CVE-2026-73309.

CVE-2026-59903 / CVE-2026-33870: offline checker for the 14 io.netty:netty-codec-http CVEs. Netty ships all modules under one version number but each has its own fix version — 4.1.136.Final (the netty-codec-http2 answer) still leaves this module exposed; it needs 4.1.137.Final / 4.2.17.Final.

PoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <= 7.109 via regex de replace_table_values. Laboratorio Docker + payload derivado (leak de ai1wm_secret_key por REST anonima) + RCE con importacion anonima.

Public reference for CVE-2026-52307

Reproducible Docker lab + raw-socket exploit for CVE-2015-3306 (ProFTPD mod_copy pre-auth arbitrary file copy) — a patch-diffing learning exercise

PoC for the CVE-2026-69451 - Fastprox EoP

gitssrf-gim CVE-2025-48384 parent

Linux Kernel Exploits -> CVE-2006-2451 + CVE-2006-3626

CVE-2026-67276 MikroTik RouterOS SSH Authentication Bypass Exploit

Security-research lab: reproduction of CVE-2026-41249 (GHSA-q58j-g3f4-h26h) — pull_request_target pwn request in .github/workflows/static.yml, snapshot of coreshop/CoreShop@cc1e3f54

CVE-2025-57819 - FreePBX 16 Endpoint Manager unauthenticated SQL injection to RCE (PoC)

CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC

CVE-2026-67276 - Draft or TODO

este laboratorio puede estar bien o mal preguntale a la IA estoy probando pero debe funcionar hahahah