[POC] GHSA-6vch-q96h-7gc3 — CVE-2026-10818Jul 26, 2026
pocexploitGHSA-6vch-q96h-7gc3
WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering
CVE-2026-58480 / CVE-2026-15158 — Unauthenticated RCE in Blocksy Companion Pro < 2.1.47 (300K+ installs). Pre-auth arbitrary file upload via double-extension bypass.
Docker-based isolated proof-of-concept lab for analysing CVE-2021-44228 (Log4Shell) for the COMP6441 Security Engineering project.
Path traversal vulnerability in Input-Leap
Auth Bypass in inetutils-telnetd
Unauthenticated RCE version-pinned proof of concept + mass scanner for WatchGuard Fireware CVE-2025-9242.
👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework ⚡Weaponized tool with rogue DC/LDAP servers, certificate abuse, PKINIT hash extraction. Features: detect safe check, exploit full multi-threaded. 🛡️ CVSS 8.8 High - Use Ethically, Stay Legal. 🔒
CVE-2026-32194 - Draft or Todo
Security Advisory for CVE-2026-51564
CVE-2026-54121 - Draft
Security Advisory for CVE-2026-51565
Technical analysis and Proof-of-Concept for CVE-2026-60206, a critical Oracle WebLogic Server SAML authentication bypass vulnerability.
Scan LLM outputs and AI-generated content for data exfiltration signals (EchoLeak, CVE-2025-32711) before they reach users or downstream systems
Technical analysis and advisory for CVE-2026-48908: Unauthenticated Arbitrary File Upload to RCE in JoomShaper SP Page Builder.
Technical analysis, root cause breakdown, and non-destructive detection methodology for CVE-2026-63030.
7-Zip XZ Decoder Heap Buffer Overflow - Full analysis, root cause, PoC, and RCE exploitation roadmap
PoC for CVE-2026-65694 — Microweber CMS (<=2.0.20) unauthenticated path traversal → arbitrary file read (.env / secrets)
CVE-2026-54900, CVE-2026-54902 - Draft