[POC] GHSA-8gj2-2cvc-6xx7 — CVE-2026-31431Aug 5, 2026
pocexploitGHSA-8gj2-2cvc-6xx7
WordPress All-in-One Exploit Framework — detector, scanner, enumerator, exploit, escalation. 10 CVEs from the 2026-08 wave incl. CVE-2026-63030 (wp2shell).
pgAdmin 4 Import/Export RCE (CVE-2026-17566) PoC - TO PROGRAM injection via backslash-escape mismatch
Gitea diffpatch RCE (CVE-2026-60004) PoC - repo-write to RCE as Gitea service account
🚨 Threat intel & incident response research on SharePoint "ToolShell" RCE zero-day (CVE-2025-53770). 🕵️♂️ Covers root-cause deserialization flaws, attack timelines, risk metrics, and defensive EDR validation playbooks. 🛡️
CVE-2026-43499 x86 Exploit
Safe PowerShell validator for PHP CVE-2026-17543 exposure via HTTP headers and non-destructive login-form probes.
CVE-2026-45033 PoC for Claude Code, not Github Copilot. Worked for Haiku 4.5.
CVE-2026-63223 — CI4RCE: CodeIgniter 4 is_image/mime_in File Upload RCE. Magic bytes bypass (getExtension vs getClientExtension). CVSS 9.8 | CWE-434 | CI4 < 4.7.4
Mobile Mouse 3.6.0.4 - Remote Code Execution - CVE-2023-31902
Proof of concept with GDB‑assisted exploitation (educational / lab use only)
Offline scanner for CVE-2026-29000 (CVSS 10.0) in pac4j-jwt — also finds the 4 packages the official advisory does not list. Single 25KB jar, zero dependencies, Java 8+.
Security research project
Technical analysis and PoC of CVE-2026-52824: default APP_SECRET in the Kimai Docker image enabling unauthenticated login link forgery. Affects <= 2.57.0, fixed in 2.58.0.
CVE-2026-66066 — KindaRails2Shell: Rails Active Storage/libvips Arbitrary File Read → RCE. MATLAB/HDF5 dual-identity file → SECRET_KEY_BASE theft → forged variation. CVSS 9.5 | Rails < 8.1.3.1
Rail-OT-Protector (ROP) — free, open-source cybersecurity scanning tool for rail and transit OT/SCADA networks. PowerShell + Bash scanners for CVE-2025-1727, RailSafe legacy API, ICS protocol exposure, and remote access risk.
Arbitrary code execution in Ghidra 12.1.2 via the Swift demangler analyzer. A shared project file carries a saved tool-directory option that Ghidra silently restores and executes. Advisory GHSA-pcfh-853f-q3gh, fixed in 12.1.3.