Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.8 D93E90BB-2B9E-

Exploit for Out-of-bounds Write in Tenda Ac9_Firmware_D93E90BB-2B9E-5BD6-A00A-62EF1D546898

CVE-2025-29384 Proof-of-Concept Exploit Overview This repository contains an advanced proof-of-concept PoC exploit for CVE-2025-29384, a critical s...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.1 8FE1D006-969F-

Exploit for Improper Authorization in Vercel Next.Js_8FE1D006-969F-54DD-8019-0A83146AD040

CVE-2025-29927-PoC-Exploit Proof-of-Concept for Authorization Bypass in Next.js Middleware You can run this against a vulnerable version here: http...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.3 004E17C4-056B-

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo_004E17C4-056B-597E-B74C-0D0FCCC055C2

CVE-2025-32463-sudo-chwoot PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability - Original PoC sudo-chwoot.sh - CTF Demo chwoo...

N/A N/A GITHUBEXPLOIT
CRITICAL 10 89C72402-67E2-

Exploit for Deserialization of Untrusted Data in Facebook React_89C72402-67E2-5AB5-923D-766EE155B081

🛡️ React2Shell CTF 🚀 Welcome to React2Shell-CTF, a Dockerized environment designed to practice exploiting React2Shell CVE-2025-55182. React2Shell ...

N/A N/A GITHUBEXPLOIT
CRITICAL 10 C864AB49-BD5F-

Exploit for Improper Input Validation in N8N_C864AB49-BD5F-550D-849F-BF3E904AB1CF

CVE-2026-21858 + CVE-2025-68613 - n8n Full Chain Unauthenticated Arbitrary File Read → Admin Token Forge → Sandbox Bypass → RCE | | | |---|---| | C...

N/A N/A GITHUBEXPLOIT
MEDIUM 5.1 C90CEE4A-6BE7-

Exploit for Infinite Loop in Pypdf_Project Pypdf_C90CEE4A-6BE7-53CA-8B7A-A5DA2843514F

CVE-2026-24688 - pypdf - Circular Reference DoS Vulnerability This repo includes proof of concept code for triggering CVE-2026-24688. Summary Criti...

N/A N/A GITHUBEXPLOIT
NONE 100EB90F-41EE-

github-trending-xss-vulnerability-scanner_100EB90F-41EE-5C0A-A5FB-674097998814

XSS Vulnerability Scanner Plugin Comprehensive cross-site scripting XSS vulnerability detection with context-aware analysis and bypass technique te...

N/A N/A GITHUBEXPLOIT
NONE 7CA75EAE-A0F0-

elevate-kit_7CA75EAE-A0F0-5208-961E-2A8AB16A5A95

elevate-kit Local privilege escalation enumeration scripts for Linux and Windows. Both tools assume you already have a foothold a shell / session o...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.4 CVE-2026-56397

SiYuan – Remote Code Execution via Malicious Bazaar Package Metadata and README_CVE-2026-56397

SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious package authors to inject ...

SiYuan SiYuan CVE
HIGH 8.7 CVE-2026-56396

phpMyFAQ – Privilege Escalation via Missing Authorization in editUser() and updateUserRights()_CVE-2026-56396

phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints that allow authenticated admini...

phpMyFAQ phpMyFAQ CVE