Catálogo de exploits

initial-access

The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users' bookings.

soralis0912/CVE-2026-43499-pmg110-root

soralis0912/CVE-2026-43499-warhol-root

Critical authentication bypass exploit for cPanel/WHM CVE-2026-41940. Leverages CRLF injection in cpsrvd daemon to gain root WHM access without credentials. Includes version detection, verbose logging, proxy support, JSON reporting, and post-exploitation account enumeration. For authorized security testing only.

Security Advisory: Remote Denial of Service via Reachable Assertion in URL Prefix Handling (rouille)

initial-access

initial-access

Security Advisory: Unauthenticated NULL Pointer Dereference Crashes the Server (TinyWeb)

A C-based Linux security utility for detecting, safely verifying (Proof of Concept), and mitigating CVE-2026-64600 (RefluXFS). It provides kernel vulnerability assessment, XFS reflink detection, a safe race-condition PoC, and layered mitigation using SystemTap and XFS hardening.

Security Advisory: HTTP Response Splitting via Unvalidated Response Header Values (rouille)

Security Advisory: Unchecked Room Lookup Leads to Server Crash (Let's Chat)

WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering

Security Advisory: Insufficient Access Controls Allow for Unauthorized Room Deletion (Let's Chat)

Security Advisory: Insufficient Access Controls Allow for Unauthorized File Downloads (Let's Chat)

Adding --insecure to skip ssl

Security Advisory: HTTP Request Smuggling Enables Front-End Access Control Bypass (rouille)

Security Advisory: Unauthenticated Memory Leak Leads To Memory Exhaustion (TinyWeb)

Security Advisory: Unauthenticated Path Traversal Allows Arbitrary File Read (TinyWeb)

CVE-2026-43499 research port for Galaxy S24 Ultra SM-S928U1 DZF2 (in progress)

Security Advisory: HTTP Header Injection via Unvalidated CR and LF in Header Values (tiny_http)

initial-access

Slidev presentation for Certighost (CVE-2026-54121), with Mermaid diagrams and exported assets.

Docker-based isolated proof-of-concept lab for analysing CVE-2021-44228 (Log4Shell) for the COMP6441 Security Engineering project.

initial-access

CVE-2026-58480 / CVE-2026-15158 — Unauthenticated RCE in Blocksy Companion Pro < 2.1.47 (300K+ installs). Pre-auth arbitrary file upload via double-extension bypass.

SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter

Security Advisory: HTTP Request Smuggling via Unparsed Transfer-Encoding Values (tiny_http)

PoC, IOCs, and detection logic for the SharePoint /_trust WS-Federation BinaryFormatter deserialization chain. Lab reconstruction covering unauthenticated RCE, in-process machine key theft, and the artifacts each variant leaves behind. SharePoint 2016, 2019, and Subscription Edition. CVE-2026-50522, CVE-2026-45659, CVE-2026-56164, CVE-2026-58644.

Hunt-Benito/siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization