Recent Advisories

Severity ID Title Vendor Product Date Type
NONE F4DB36D1-16B3-

Exploit for CVE-2026-11551_F4DB36D1-16B3-5D76-9EDA-1FCB95DDC7E9

2026-11551 CVE-2026-11551: Branda Plugin - Unauthenticated Privilege Escalation via Account Takeover...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.9 44B81EDD-C298-

Exploit for Execution with Unnecessary Privileges in Percona Monitoring_And_Management_44B81EDD-C298-593E-9EA3-5225EF88AC36

CVE-2026-25212 POC for CVE-2026-25212...

N/A N/A GITHUBEXPLOIT
NONE 06A48C34-3736-

ARES_06A48C34-3736-5F41-A155-BAA9C3EE3639

Ares — AI Penetration Testing Engine Autonomous AI pentesting: recon → exploitation → structured report. Zero external dependencies. Zero cloud LLM...

N/A N/A GITHUBEXPLOIT
NONE MSF:EXPLOIT-MULTI-

Joplin Plugin Persistence_MSF:EXPLOIT-MULTI-PERSISTENCE-JOPLIN_PLUGIN-

This module installs a malicious Joplin plugin .jpl into the target's Joplin plugin directory. The plugin executes the payload each time Joplin is ...

N/A N/A METASPLOIT
NONE MSF:AUXILIARY-SERVER-

Quectel Cellular Modem Pivot (Serial AT)_MSF:AUXILIARY-SERVER-QUECTEL_MODEM-

Opens a serial connection to a Quectel cellular modem and registers it as a 'modem' session capable of network pivoting. The Quectel modems have a ...

N/A N/A METASPLOIT
CRITICAL 10 FF7344F1-411D-

Exploit for Deserialization of Untrusted Data in Facebook React_FF7344F1-411D-55F1-B276-7221215B98DB

CVE-2025-55182 — React2Shell Unauthenticated RCE in React Server Components Author: TYehan --- TL;DR A single unauthenticated HTTP request can exec...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.2 B132E072-36D8-

Exploit for CVE-2026-42530_B132E072-36D8-5390-949D-A06FA9ADC7B5

CVE-2026-42530 Scanner for CVE-2026-42530, a use-after-free in nginx's HTTP/3 module. Affected: nginx 1.31.0, 1.31.1 Fixed: nginx 1.31.2 Usage pip ...

N/A N/A GITHUBEXPLOIT
CRITICAL 10 A52A5B67-31DB-

Exploit for SQL Injection in Sangoma Freepbx_A52A5B67-31DB-5B86-B528-C2F4F2A57FB3

FreePBX 16 — Unauthenticated SQLi to RCE Proof-of-concept exploit chaining two FreePBX vulnerabilities to go from zero access to remote code execut...

N/A N/A GITHUBEXPLOIT
NONE EA26B6D2-E45A-

cortex-plugin-hexstrike_EA26B6D2-E45A-5D45-930B-37F1EE561AD6

Example Plugin Brief one-line description of what this plugin does. Installation bash From marketplace cortex plugin install marketplace:example-pl...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 B7F3888A-67A2-

Exploit for OS Command Injection in Ray_Project Ray_B7F3888A-67A2-5DAE-904A-1F178F5B69DD

CVE-2023-6019 - Anyscale Ray Dashboard Unauthenticated RCE PoC exploit for CVE-2023-6019 — Remote Code Execution via unauthenticated Ray Dashboard ...

N/A N/A GITHUBEXPLOIT