Catálogo de exploits

PoC and analysis of CVE-2021-41773

A Python-based static patch analysis tool for studying the root cause and remediation of CVE-2021-41773 (Apache HTTP Server Path Traversal) by comparing the vulnerable Apache HTTP Server 2.4.49 source code with the patched 2.4.51 implementation.

Slidev presentation for Certighost (CVE-2026-54121), with Mermaid diagrams and exported assets.

Docker-based isolated proof-of-concept lab for analysing CVE-2021-44228 (Log4Shell) for the COMP6441 Security Engineering project.

Security Advisory: HTTP Request Smuggling Enables Front-End Access Control Bypass (rouille)

WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering

Security Advisory: Insufficient Access Controls Allow for Unauthorized File Downloads (Let's Chat)

Security Advisory: Remote Denial of Service via Reachable Assertion in URL Prefix Handling (rouille)

Security Advisory: Unchecked Room Lookup Leads to Server Crash (Let's Chat)

Security Advisory: HTTP Response Splitting via Unvalidated Response Header Values (rouille)

Security Advisory: Unauthenticated Memory Leak Leads To Memory Exhaustion (TinyWeb)

PoC, IOCs, and detection logic for the SharePoint /_trust WS-Federation BinaryFormatter deserialization chain. Lab reconstruction covering unauthenticated RCE, in-process machine key theft, and the artifacts each variant leaves behind. SharePoint 2016, 2019, and Subscription Edition. CVE-2026-50522, CVE-2026-45659, CVE-2026-56164, CVE-2026-58644.

Security Advisory: Unauthenticated Path Traversal Allows Arbitrary File Read (TinyWeb)

soralis0912/CVE-2026-43499-warhol-root

CVE-2026-43499 research port for Galaxy S24 Ultra SM-S928U1 DZF2 (in progress)

Critical authentication bypass exploit for cPanel/WHM CVE-2026-41940. Leverages CRLF injection in cpsrvd daemon to gain root WHM access without credentials. Includes version detection, verbose logging, proxy support, JSON reporting, and post-exploitation account enumeration. For authorized security testing only.

CVE-2026-58480 / CVE-2026-15158 — Unauthenticated RCE in Blocksy Companion Pro < 2.1.47 (300K+ installs). Pre-auth arbitrary file upload via double-extension bypass.

Security Advisory: HTTP Request Smuggling via Unparsed Transfer-Encoding Values (tiny_http)

A C-based Linux security utility for detecting, safely verifying (Proof of Concept), and mitigating CVE-2026-64600 (RefluXFS). It provides kernel vulnerability assessment, XFS reflink detection, a safe race-condition PoC, and layered mitigation using SystemTap and XFS hardening.

Security Advisory: HTTP Request Smuggling via Transfer-Encoding Desynchronization (rouille)

Security Advisory: HTTP Header Injection via Unvalidated CR and LF in Header Values (tiny_http)

基于内核漏洞CVE-2026-43499的本地提权适配，集成嵌入式 KernelSU.CVE-2026-43499+KernelSU越狱模式

Security Advisory: Unauthenticated NULL Pointer Dereference Crashes the Server (TinyWeb)

Adding --insecure to skip ssl

SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter

Security Advisory: Insufficient Access Controls Allow for Unauthorized Room Deletion (Let's Chat)

Hunt-Benito/siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization

CypherHippie/CVE-2026-66804

Security Advisory for CVE-2026-51565

Technical analysis, root cause breakdown, and non-destructive detection methodology for CVE-2026-63030.