[POC] GHSA-3mgp-fx93-9xv5 — CVE-2026-8461Jun 26, 2026
pocexploitGHSA-3mgp-fx93-9xv5
CVE-2025-8088 exploitation chain + Quasar C2 multi-stage payload delivery
PoC for CVE-2026-13036 — Use-after-free in Blink WidgetBase::UpdateSurfaceAndScreenInfo (Chrome < 149.0.7827.197)
PoC + analysis for CVE-2026-24207 / CVE-2026-24206 — NVIDIA Triton SageMaker & Vertex AI auth-restriction bypass + RCE chain
CVE-2026-26980 - Ghost CMS Content API SQL Injection
CVE-2026-55584 — phpSysInfo IP Allowlist Bypass
POC for CVE-2023-45866 affecting Latest Android devices.
PoC exploit for CVE-2025-8110
CVE-2025-61155 — arbitrary process termination in GameDriverX64.sys (Tower of Fantasy anti-cheat). Original IDA Pro teardown, PoC, YARA, IOCs, mitigation.
Let's hijack our bootchain - CVE-2021-30327
Non-destructive vulnerability scanner for NGINX HTTP/3 (ngx_http_v3_module). It ONLY performs a safe probe: opens an HTTP/3 (QUIC) connection, sends a single HEAD request and inspects the `Server` response header. It NEVER attempts to reopen a QPACK encoder stream or trigger the use-after-free.
Linux Kernel nf_tables Use-After-Free (CVE-2026-23111) — LPE PoC
SCAN END POC THE CVE-2024-4367
Unauthenticated time-based blind SQL injection exploit for CMS Made Simple ≤ 2.2.9 (CVE-2019-9053), ported to Python 3.
CVE-2025-67038 - Draft
POC of CVE-2026-53075
Lab — Privilege Escalation via Dirty Cow CVE-2016-5195 | 4Geeks Academy
CVE-2021-29441 - Nacos Authentication Bypass