Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.3 CF51C38E-52F7-

cve-research_CF51C38E-52F7-5CB5-9ACE-2BCD8F86C0BE

CVE Research Notes and code from going through public CVEs that caught my attention. Each folder has a writeup of how the bug actually worked, a de...

N/A N/A GITHUBEXPLOIT
NONE 2DBFA02A-1FF8-

pentest-cheatsheet_2DBFA02A-1FF8-528D-8CBD-0BB4657AC723

pentest-cheatsheet Commands, techniques and notes for penetration testing — web, AD, network, post-exploitation. Pentest Cheatsheet Commands, techn...

N/A N/A GITHUBEXPLOIT
HIGH 8.8 25DE60F3-D53C-

Exploit for Path Traversal in Tp-Link Tapo_C260_Firmware_25DE60F3-D53C-5F5C-9C45-E27FA387E1AA

Tapo C260 RCE Chain CVE-2026-0651 / CVE-2026-0652 / CVE-2026-0653 Proof-of-concept exploit chain for TP-Link Tapo C260 IP camera achieving unauthen...

N/A N/A GITHUBEXPLOIT
NONE MSF:POST-WINDOWS-

SMB to Meterpreter Upgrade via PsExec_MSF:POST-WINDOWS-MANAGE-SMB_TO_METERPRETER-

Upgrades an authenticated SMB session to a Meterpreter session using PsExec techniques. This module uploads a service-wrapped executable payload to...

N/A N/A METASPLOIT
CRITICAL 10 MSF:EXPLOIT-LINUX-

Dalfox Found-Action Deserialization RCE_MSF:EXPLOIT-LINUX-HTTP-DALFOX_SERVER_RCE_CVE_2026_45087-

When dalfox version use exploit/linux/http/dalfoxserverrcecve202645087 msf exploitdalfoxserverrcecve202645087 show targets ...targets... msf exploi...

N/A N/A METASPLOIT
CRITICAL 10 PACKETSTORM:224334

📄 Dalfox Found-Action Deserialization Remote Code Execution_PACKETSTORM:224334

When dalfox versions less than or equal to 2.12.0 is started in REST API server mode dalfox server, the server binds to 0.0.0.0:6664 by default and...

N/A N/A PACKETSTORM
MEDIUM 6.3 1455C226-77CD-

Exploit for Improper Authentication in Google Android_1455C226-77CD-5803-A0CE-7D7BC815D6F6

BlueDucky Ver 2.1 Android 🦆 Thanks to all the people at HackNexus. Make sure you come join us on VC ! https://discord.gg/HackNexus NOTES: I will n...

N/A N/A GITHUBEXPLOIT
NONE A34DF1A1-2F25-

pentest-agent-vs-llm-benchmark-effectiveness_A34DF1A1-2F25-5439-9D41-0DCBBBB34A45

Backbone or Backbone-Architecture? A controlled study of LLM agents on web-penetration-testing CTFs. The scaffold around the model often decides mo...

N/A N/A GITHUBEXPLOIT
HIGH 8.5 BD307E81-25CC-

Exploit for OS Command Injection in Tp-Link Tl-Wr802N_Firmware_BD307E81-25CC-59FA-B6D0-3D9C36E25857

CVE-2026-3227: TP-Link Router OS Command Injection For more Information see https://vulners.com/cve/CVE-2026-3227 A persistent, authenticated OS Co...

N/A N/A GITHUBEXPLOIT
HIGH 8.8 A8E5D800-F075-

Exploit for Path Traversal in Gogs_A8E5D800-F075-509D-A604-E092148C4F7B

CVE-2025-8110 Gogs Repository Symlink Remote Code Execution Made by oguiii --- Table of Contents - Overview - Features - Requirements - Installatio...

N/A N/A GITHUBEXPLOIT