Catálogo de exploits

yuimamur/CVE-2024-4367-hands-on

soralis0912/CVE-2026-43499-pmg110-root

A Python-based static patch analysis tool for studying the root cause and remediation of CVE-2021-41773 (Apache HTTP Server Path Traversal) by comparing the vulnerable Apache HTTP Server 2.4.49 source code with the patched 2.4.51 implementation.

Phucc29/CVE-2025-55182

yuimamur/CVE-2024-4367-hands-on-01

The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users' bookings.

Unprivileged user to root on macOS Sonoma, Sequoia, and Tahoe. Patched in macOS 26.6 / 15.7.8 / 14.8.8.

Dungsocool/CVE-2026-60137_CVE-2026-63030

Security Advisory: HTTP Response Splitting via Unvalidated Response Header Values (rouille)

Security Advisory: HTTP Request Smuggling via Unparsed Transfer-Encoding Values (tiny_http)

Security Advisory: Unauthenticated Path Traversal Allows Arbitrary File Read (TinyWeb)

Security Advisory: Unauthenticated Memory Leak Leads To Memory Exhaustion (TinyWeb)

Security Advisory: HTTP Request Smuggling Enables Front-End Access Control Bypass (rouille)

SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter

Security Advisory: HTTP Request Smuggling via Transfer-Encoding Desynchronization (rouille)

CVE-2026-58480 / CVE-2026-15158 — Unauthenticated RCE in Blocksy Companion Pro < 2.1.47 (300K+ installs). Pre-auth arbitrary file upload via double-extension bypass.

基于内核漏洞CVE-2026-43499的本地提权适配，集成嵌入式 KernelSU.CVE-2026-43499+KernelSU越狱模式

Adding --insecure to skip ssl

Docker-based isolated proof-of-concept lab for analysing CVE-2021-44228 (Log4Shell) for the COMP6441 Security Engineering project.

soralis0912/CVE-2026-43499-warhol-root

Security Advisory: HTTP Header Injection via Unvalidated CR and LF in Header Values (tiny_http)

Critical authentication bypass exploit for cPanel/WHM CVE-2026-41940. Leverages CRLF injection in cpsrvd daemon to gain root WHM access without credentials. Includes version detection, verbose logging, proxy support, JSON reporting, and post-exploitation account enumeration. For authorized security testing only.

A C-based Linux security utility for detecting, safely verifying (Proof of Concept), and mitigating CVE-2026-64600 (RefluXFS). It provides kernel vulnerability assessment, XFS reflink detection, a safe race-condition PoC, and layered mitigation using SystemTap and XFS hardening.

CVE-2026-43499 research port for Galaxy S24 Ultra SM-S928U1 DZF2 (in progress)

Security Advisory: Unauthenticated NULL Pointer Dereference Crashes the Server (TinyWeb)

Security Advisory: Unchecked Room Lookup Leads to Server Crash (Let's Chat)

WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering

PoC, IOCs, and detection logic for the SharePoint /_trust WS-Federation BinaryFormatter deserialization chain. Lab reconstruction covering unauthenticated RCE, in-process machine key theft, and the artifacts each variant leaves behind. SharePoint 2016, 2019, and Subscription Edition. CVE-2026-50522, CVE-2026-45659, CVE-2026-56164, CVE-2026-58644.

Slidev presentation for Certighost (CVE-2026-54121), with Mermaid diagrams and exported assets.

Security Advisory: Insufficient Access Controls Allow for Unauthorized Room Deletion (Let's Chat)