Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.5 63040014-95CF-

Exploit for CVE-2026-48909_63040014-95CF-53D4-BB60-351E8E8012A4

CVE-2026-48909 — SP LMS PHP Object Injection → RCE Unauthenticated Remote Code Execution via PHP Object Injection in JoomShaper SP LMS comsplms ≤ 4...

N/A N/A GITHUBEXPLOIT
CRITICAL 10 6DFCF1F8-508C-

Exploit for CVE-2026-10735_6DFCF1F8-508C-5B6F-9973-9B8DDDDF9686

CVE-2026-49777-CVE-2026-10735 TELEGRAM GROUP ADRESS: https://t.me/toolsandpoc...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 C558BD70-1D0A-

Exploit for Eval Injection in Xwiki_C558BD70-1D0A-5175-B681-DC19927F031B

CVE-2025-24893 - XWiki Unauthenticated RCE Exploit POC ⚠️ Unauthenticated Remote Code Execution in XWiki 🛠️ PoC implementation by @dollarboysushil ...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 D93E90BB-2B9E-

Exploit for Out-of-bounds Write in Tenda Ac9_Firmware_D93E90BB-2B9E-5BD6-A00A-62EF1D546898

CVE-2025-29384 Proof-of-Concept Exploit Overview This repository contains an advanced proof-of-concept PoC exploit for CVE-2025-29384, a critical s...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.1 8FE1D006-969F-

Exploit for Improper Authorization in Vercel Next.Js_8FE1D006-969F-54DD-8019-0A83146AD040

CVE-2025-29927-PoC-Exploit Proof-of-Concept for Authorization Bypass in Next.js Middleware You can run this against a vulnerable version here: http...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.3 004E17C4-056B-

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo_004E17C4-056B-597E-B74C-0D0FCCC055C2

CVE-2025-32463-sudo-chwoot PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability - Original PoC sudo-chwoot.sh - CTF Demo chwoo...

N/A N/A GITHUBEXPLOIT
CRITICAL 10 89C72402-67E2-

Exploit for Deserialization of Untrusted Data in Facebook React_89C72402-67E2-5AB5-923D-766EE155B081

🛡️ React2Shell CTF 🚀 Welcome to React2Shell-CTF, a Dockerized environment designed to practice exploiting React2Shell CVE-2025-55182. React2Shell ...

N/A N/A GITHUBEXPLOIT
CRITICAL 10 C864AB49-BD5F-

Exploit for Improper Input Validation in N8N_C864AB49-BD5F-550D-849F-BF3E904AB1CF

CVE-2026-21858 + CVE-2025-68613 - n8n Full Chain Unauthenticated Arbitrary File Read → Admin Token Forge → Sandbox Bypass → RCE | | | |---|---| | C...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.4 CVE-2026-56397

SiYuan – Remote Code Execution via Malicious Bazaar Package Metadata and README_CVE-2026-56397

SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious package authors to inject ...

SiYuan SiYuan CVE
CRITICAL 9.4 CVE-2026-56395

SiYuan – Remote Code Execution via Malicious Bazaar Package Metadata and README_CVE-2026-56395

SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious package authors to inject ...

SiYuan SiYuan CVE