[POC] CVE-2021-4034 — WHS4_CVE-2021-4034Jul 9, 2026
pocexploitCVE-2021-4034
Whitehat School 4기 CVE-2021-4034 분석 및 POC 작성
Public disclosure for CVE-2026-52100 (CSRF) & CVE-2026-52101 (SSRF) in linx-server. MITRE assigned the CVEs; this repo provides a public reference and helps affected users understand the risk.
Tracking GhostLock (CVE-2026-43499), the rtmutex/futex stack use-after-free
CVE-2026-54520 / GHSA-cm8g-8jfq-887p: ai-agent-automation workflow path traversal advisory landing page
CVE-2026-54519 / GHSA-qv97-83w4-ff86: ai-agent-automation memory authorization advisory landing page
CVE-2026-50181 / GHSA-fg23-3346-88f5: Langroid path traversal advisory landing page
CVE-2026-50131 / GHSA-xw9q-2mv6-9fr8: Fedify incomplete SSRF mitigation advisory landing page
Blocking the DirtyFrag Linux LPE chain (CVE-2026-43284 / CVE-2026-43500) at runtime with a Cilium Tetragon TracingPolicy | kills the exploit at the kernel-module autoload step. Tested on RHEL 9.8 (kernel 5.14) and Ubuntu 24.04 (kernel 6.8). Policy, lab notes, and evidence.
Reproducer for CVE-2026-40047: Apache Camel camel-docling CLI argument injection / path traversal
CVE-2026-25262 applicability to Snapdragon 8 Gen 1 — experimental results
Tracking ITScape (CVE-2026-46316), the KVM/arm64 guest-to-host escape
Tracking Januscape (CVE-2026-53359), the KVM/x86 guest-to-host escape
CVE-2026-56290 - Mass Exploit for Joomla Com_pagebuilderck component (Unrestricted File Upload → RCE). Multi-threaded, automatic CSRF bypass, PHP shell uploader.
Verificador de Vulnerabilidad: Bad Epoll (CVE-2026-46242)