Premier Cybersecurity Intelligence Platform

[GitHub] CVE-2026-96889-nextjs-rce

Lab PoC for CVE-2026-96889: Next.js Image Optimization SVG typed as AVIF reaches librsvg UAF (RUSTSEC-2026-0305). Unauthenticated RCE on glibc Linux. # CVE-2026-96889 — Image Optimization SVG → l...

CVE-2026-96889 Critical Anonymous 2026-11-14

12

0

[GitHub] xss2shell

CVE-2026-64638 | WordPress < 7.0.3 Pre-Auth Stored XSS → RCE <div align="center"> <img src="img/banner.svg" alt="xss2shell" width="700"> <br><br> [![CVE](https://img.shields.io/badge/CVE--2026--...

CVE-2026-64638 Critical Anonymous 2026-11-14

14

0

[GitHub] CiGaslight

PoC for CVE-2025-7771: abuses ThrottleStop.sys for arbitrary physical r/w, turns DSE off, then spoofs the integrity query so it still reports as enabled. # CiGaslight abuses [CVE-2025-7771](https://...

CVE-2025-7771 Low Anonymous 2026-11-14

12

0

[GitHub] PHP2SHELL-POC

PoC for PHP session.upload_progress RCE (CVE-2026-109618) — race + heap spray to system() <p align="center"> <pre> ██████╗ ██╗ ██╗██████╗ ████�...

CVE-2026-109618 Critical Anonymous 2026-11-14

11

0

[GitHub] php2shell-lab

php2shell (CVE-2026-109618/619) differential lab: ASAN builds of PHP 8.4.26 vs 8.4.27, one two-request trigger, automatic crash/no-crash verdict. Reproduces the fixed state-corruption bug — not RCE....

CVE-2026-109618 Critical Anonymous 2026-11-14

11

0

[GitHub] php2shell-cve-2026-109618-109619

Local-only PoC lab for CVE-2026-109618 / CVE-2026-109619 (php2shell) — two critical RCEs in PHP core, session.upload_progress, on by default since 5.4. Docker A/B (vulnerable vs patched builds), rac...

CVE-2026-109619 Critical Anonymous 2026-11-14

12

0

[GitHub] plex2shell

CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656 # plex2shell Unauth RCE chain for Plex Media Server <= 1.43.3.10828. Fixed in 1.43.3.10861. Update ASAP. **CVSS 3.1: 9.8** `AV:N/AC:L/PR:...

CVE-2026-96652 Critical Anonymous 2026-11-14

13

0

[GitHub] php2shell-poc

# php2shell — PHP 8.4.26 Session Vulnerability Reproduction [中文](#中文) | [English](#english) --- ## English Under the constraints of "fully remote, HTTP only, target page has no `session_...

Medium Anonymous 2026-11-14

12

0

[GitHub] php2shell-exp

Patch-derived PoC and RCE for the PHP session upload-progress pre-RINIT decode (CVE-2026-109618/109619) # php2shell-exp PoC and RCE reverse-engineered from PHP official patch [`3584a98bda`](https://...

CVE-2026-109618 Critical Anonymous 2026-11-14

12

0

[GitHub] php2shell-scanner

php2shell vulnerability scanner (CVE-2026-109618 / CVE-2026-109619) — detects vulnerable PHP servers even when version is hidden. No exploitation performed. # php2shell Scanner **Detection only �...

CVE-2026-109619 Low Anonymous 2026-11-14

11

0