[POC] CVE-2026-54597 — CVE-2026-54597Jun 16, 2026
pocexploitCVE-2026-54597
CVE-2026-54597 - Authenticated Time-Based Blind SQL Injection in ITFlow
CVE-2026-54596 - Authenticated SQL Injection via recurring_invoice_frequency Parameter Enables Full Database Exfiltration
TryHackMe SOC Level 1 — Follina CVE-2022-30190, Nim C2, Chisel, PrintSpoofer, backdoor accounts
PoC exploit for CVE-2026-53519.
Python RCE PoC with reverse-shell listener for CVE-2026-42945 (NGINX Rift)
Defensive research notes for CVE-2026-5950, a BIND 9 resolver DoS vulnerability credited to Billy Baraja (BielraX).
CVE-2025-55182 exploit script
PoC educacional do CVE-2021-4034, o PwnKit, LPE via pkexec do polkit. Uso autorizado apenas.
JupyterHub XSRF bypass via cross-origin form POST (Sec-Fetch-Mode: no-cors) — CWE-352
HTTP/2 Bomb (CVE-2026-49975) non-destructive vulnerability detector for Nginx / Apache httpd. Zero-dependency Python.
HTTP/2 Bomb: HPACK indexed-reference amplification + flow-control stall. A high school student's full protocol analysis (LaTeX). CVE-2026-49975, CVE-2026-47774.
Safely detect whether a SolarWinds Serv-U host is vulnerable to CVE-2026-28318
Cisco Unified Communications Manager (Unified CM) deployments affected by CVE-2026-20230.