Premier Cybersecurity Intelligence Platform

[GitHub] eip-pocs-and-cves

Proof-of-concept exploits and reproduction labs for CVEs analyzed by the Exploit Intelligence Platform <p align="center"> <a href="https://exploit-intel.com"> <img src="https://cdn.jsdelivr.net...

Medium Anonymous 2026-11-06

8

0

[GitHub] Debian_security

DSA and DLA for Debian last 14 days # Debian Security Advisories (DSA & DLA) - for the last 14 days **2026-11-05** - **[DLA-4883-1](https://security-tracker.debian.org/tracker/DLA-4883-1)** - ntfs-3...

Low Anonymous 2026-11-06

7

0

[GitHub] CVE-2026-104748

Unauthenticated privilege escalation in SimpleForm WordPress plugin <= 3.10.0. Registers an administrator account without authentication <h1 align="center">SimpleForm &lt;= 3.10.0 Unauthenticated Pri...

CVE-2026-104748 High Anonymous 2026-11-06

4

0

[GitHub] CVE-2026-47644

CVE-2026-47644 ($12,000): Edge Copilot Prompt Injection Leads to Cross-Tab Data Exfiltration - PoC & full writeup # CVE-2026-47644 ($12,000): Edge Copilot Prompt Injection Leads to Cross-Tab Data Exf...

CVE-2026-47644 Low Anonymous 2026-11-06

6

0

[GitHub] CVE-2026-96889-nextjs-rce

Lab PoC for CVE-2026-96889: Next.js Image Optimization SVG typed as AVIF reaches librsvg UAF (RUSTSEC-2026-0305). Unauthenticated RCE on glibc Linux. # CVE-2026-96889 — Image Optimization SVG → l...

CVE-2026-96889 Critical Anonymous 2026-11-06

5

0

[GitHub] xss2shell

CVE-2026-64638 | WordPress < 7.0.3 Pre-Auth Stored XSS → RCE <div align="center"> <img src="img/banner.svg" alt="xss2shell" width="700"> <br><br> [![CVE](https://img.shields.io/badge/CVE--2026--...

CVE-2026-64638 Critical Anonymous 2026-11-06

6

0

[GitHub] CiGaslight

PoC for CVE-2025-7771: abuses ThrottleStop.sys for arbitrary physical r/w, turns DSE off, then spoofs the integrity query so it still reports as enabled. # CiGaslight abuses [CVE-2025-7771](https://...

CVE-2025-7771 Low Anonymous 2026-11-06

4

0

[GitHub] php2shell-lab

php2shell (CVE-2026-109618/619) differential lab: ASAN builds of PHP 8.4.26 vs 8.4.27, one two-request trigger, automatic crash/no-crash verdict. Reproduces the fixed state-corruption bug — not RCE....

CVE-2026-109618 Critical Anonymous 2026-11-06

6

0

[GitHub] php2shell-cve-2026-109618-109619

Local-only PoC lab for CVE-2026-109618 / CVE-2026-109619 (php2shell) — two critical RCEs in PHP core, session.upload_progress, on by default since 5.4. Docker A/B (vulnerable vs patched builds), rac...

CVE-2026-109618 Critical Anonymous 2026-11-06

5

0

[GitHub] php2shell-exp

Patch-derived PoC and RCE for the PHP session upload-progress pre-RINIT decode (CVE-2026-109618/109619) # php2shell-exp PoC and RCE reverse-engineered from the PHP official patch [`3584a98bda`](http...

CVE-2026-109618 Critical Anonymous 2026-11-06

6

0