[POC] GHSA-652q-gvq3-74qv — tchuin2609.github.ioJul 25, 2026
pocexploitGHSA-652q-gvq3-74qv
Manage BitLocker encrypted drives on Windows 10 and 11. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.
Manage BitLocker encrypted drives on Windows. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.
Security Advisory: Camaleon CMS - Authenticated RCE via `select_eval` Custom Field
is an advanced security research framework designed to model, analyze, and demonstrate Local Privilege Escalation (LPE) mechanics associated with kernel-level race conditions and filesystem structure vulnerabilities (CVE-2026-64600 / RefluXFS)
Security Advisory: Negative Chunk-Size Parsing Causes Memory Corruption in facil.io
Security Advisory: Infinite Loop DoS in facil.io MIME Parser (Partial Boundary)
Security Advisory: Out-of-Bounds Read in facil.io MIME Parser leads to Server crash
👾 CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework ⚡Bash & Python versions. Features: --detect safe check, --exploit combo/unsigned/xsw/nameid/all, --shodan integration, --tor support, mass scanning, JSON/CSV/JSONL output, cookie validation. 🛡️ CVSS 9.9 Critical - Use Ethically, Stay Legal. 🔒
IBM Langflow Unauthenticated RCE via Auto-Login Bypass
Discuz! X5.0 Authentication Bypass Exploit Framework (CVE-2026-49952) - Critical vulnerability allowing unauthenticated database backup access via UC_KEY encryption oracle token reuse. CVSS 9.1. Full-featured tool with version detection, multi-payload attacks, interactive shell, and automated exploitation. Authorized testing only.
Path Traversal vulnerability in TahaBakhtari/SubtitleGenerator - CVE-2026-51592
IPC to SYSTEM Barrier 2.4.0 service
React2Shell is a proof-of-concept exploit for CVE-2025-55182 affecting vulnerable React Server Components (RSC) implementations in Next.js
Path Traversal in AgentDVR
Evidence-driven C/C++ vulnerability remediation pipeline + http-parser case study (CVE-2024-22019-class). Python core, React 19 console, 17-test verification suite.
Linux Kernel 3.13.0 < 3.19 (Ubuntu 12.04/14.04/14.10/15.04) - 'overlayfs' Local Privilege Escalation
最原始的
exploit for CVE-2025-27520 A Remote Code Execution (RCE) vulnerability caused by insecure deserialization in the latest version (v1.4.2) of BentoML. It allows any unauthenticated user to execute arbitrary code on the server. It exists an unsafe code segment in serde.py. This vulnerability is fixed in 1.4.3.
Pedit COW – Linux Kernel Local Privilege Escalation (CVE-2026-46331)
PoC for CVE-2026-65650 - Elgg avatar upload DoS