Exploits

Laboratory validation of CVE-2026-48282 in Adobe ColdFusion RDS, covering arbitrary CFM file write, code execution as the ColdFusion service user, auditd and PCAP evidence, event timeline reconstruction, and SOC detection recommendations. Includes Polish and English reports.

Linux 内核升级指南 - 修复 CVE-2026-53359

IOCs and a read-only triage checklist from a real Linux root compromise: RedTail miner, XorDDoS persistence, MoneroOcean miner, DirtyFrag LPE (CVE-2026-43284/43500). CC0.

Stored Cross-Site Scripting (XSS) in osTicket via Vulnerable Bootstrap Tooltip Component

Vtiger CRM 8.3.0, 8.4.0 Module Import Authenticated RCE PoC

Vtiger CRM 8.3.0 Authenticated RCE via .phar Upload

Krayin CRM v2.2.x - Authenticated Remote Code Execution

Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure

Langflow 1.9.0 - RCE

Joomla Page Builder CK 3.5.10 - Arbitrary File Upload

Zero-downtime livepatch for CVE-2026-53359 (Januscape), a guest-to-host escape vulnerability in the KVM/x86 shadow MMU.

CVE-2026-14191 - Draft

CVE-2026-11405 - Draft

CVE-2026-53359

🐳 docker-compose 를 활용한 취약한 환경 구성 및 검증 (vulhub 한글판)

CVE-2026-53359 - Draft

Go implementation of NoPac, exploiting CVE-2021-42278 and CVE-2021-42287

CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH