[POC] MAL-2026-2307 — cve-2026-9082-drupalJun 30, 2026
pocexploitMAL-2026-2307
Proof-of-concept exploit for CVE-2024-24824 demonstrating how an arbitrary class loading primitive can be transformed into remote code execution on vulnerable Graylog deployments.
CVE-2026-55200 - Critical libssh2 Remote Code Execution Vulnerability
iCagenda Unauthenticated File Upload to RCE
CVE-2025-0133 Scanner | Palo Alto GlobalProtect XSS Checker
Proof of Concept for the CVE-2026-22226
cve-2026-48907 scanner
Python Proof of Concept for DirtyClone (CVE-2026-43503) - Linux kernel LPE via page-cache corruption
Windows utility that demonstrates user-mode interaction with the vulnerable WiseDelfile64.sys driver and uses CVE-2025-66680 to perform kernel-assisted file deletion.
Goal is to triage well known attacks and learn how security teams quickly respond.
Goal is to triage well known attacks and learn how security teams quickly respond.
React2Shell (CVE-2025-55182) PoC
Unauthenticated RCE PoC for CVE-2026-48908 SP Page Builder (Joomla) arbitrary file upload and remote code execution exploit with mass scaning support.
OpenSTAManager v2.9.8 and earlier contain a critical Error-Based SQL Injection vulnerability in the bulk operations handler for the Scadenzario (Payment Schedule) module.
Double-free in Apache httpd mod_http2 stream cleanup leading to pre-auth RCE
CVE-2018-18778 - ACME mini_httpd Arbitrary File Read
Copy fake in-memory files to disk using overlayFS
Python poc, exploit for CVE-2025-69212
CVE-2026-49048 — JoomCCK 6.4.0 Unauthenticated SQL Injection (CVSS 9.8)