Exploits

FreePBX Pre-Auth SQLi to RCE (CVE-2025-57819) — All-in-One Exploit

CVE-2025-57819 poc

Redacted cPanel/WHM authentication bypass analysis and authorized checker

Apache ActiveMQ RCE via Jolokia vulnerability analysis and reproduction notes

🚀 CVE-2026-24061 - GNU inetutils-telnetd Auth Bypass Exploit - Full Control 💥 CRLF injection via NEW_ENVIRON leads to auth bypass & instant root shell. ✅ Single/Mass exploitation, multi-threading, custom port/user, pipe mode, session keep-alive, colored output, retries, timeout support. ⚡ Python & Bash versions. Critical CVSS 9.8.

CVE-2026-20245 - Cisco SD-WAN - Draft

react2shell - CVE-2025-55182 (Next.js: CVE-2025-66478) - Unauthenticated RCE in React Server Components (Flight Protocol) - PoC Exploit

Safely detect whether a UniFi OS Server is vulnerable to CVE-2026-34908

Nginx RCE chain PoC with CVE-2026-9256 and CVE-2026-42945

Modern Events Calendar Lite <= 7.33.0 — Unauthenticated SQL Injection

PoC for CVE-2026-26179 / ZDI-26-276, my very own Secure Kernel bug

ARMember Premium <= 7.3.1 Full Admin Account Takeover

react CVE-2025-55182

CVE-2026-20230 - Cisco Unified CM

CVE-2026-49975 HTTP/2 Stream Amplification — Docker PoC with Web Console

Exploit for Copy-Fail Vulnerability - Python3 Version

Safe read-only version checker + Sigma rule for Redis CVE-2026-23479 (authenticated use-after-free → RCE). Find exposed instances, patch left-of-boom. By DugganUSA.

CVE-2026-41940 is a critical authentication bypass vulnerability affecting cPanel and WHM. This repository is designed to demonstrate its Proof-Of-Concept