pocexploitCVE-2026-48907
CVE-2026-48907: Unauthenticated RCE in JCE (Proof Of Concept)
Insert PHP Plugin PHP Code Injection
I created simple react2shell CVE-2025-55182 python exploit
Patched google_gax 0.4.1 for Tesla 1.18.3+ compatibility (CVE-2026-48598)
Running OWASP cve-lite-cli against the pi monorepo: scan journey and key finding (vitest CVE-2026-47429).
CVE-2025-43529 safari fakeobj
GNU-InetUtils-telnetd-Authentication-Bypass-Vulnerability
A PoC exploit for CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass
Disclosed on June 3, 2026, the "HTTP/2 Bomb" is an unauthenticated remote DoS that combines an HPACK compression bomb with a Slowloris-style hold to exhaust server memory. It affects default HTTP/2 configurations of **nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora**.
Mitigation scripts for CVE-2026-50751
Unauthenticated SQL Injection to Remote Code Execution in FreePBX — CVE-2025-57819
Unauthenticated SQL injection in FreePBX Endpoint Manager (CVE-2025-57819) that injects a cron-scheduled PHP webshell for remote code execution.