Curated security research, vulnerabilities, advisories and tools for practitioners.

#exploit

Security coverage tagged exploit.

1.

cowcups: CUPS cups-fontpath Local Privilege Escalation (LPE) to Root PoC

vulnerability | High | 2026-10-24 18:13 | codeberg.org | Original ↗ | .md | #linux | #privilege-escalation | #red-team

2.

CVE-2026-106173: Fortinet FortiSIEM gRPC Path Traversal to Pre-Auth RCE PoC

vulnerability | Critical | 2026-10-20 12:43 | CVE-2026-106173 | github.com | Original ↗ | .md | #ai-security | #github | #authentication

3.

[CVE-2026-85046] Mind the (Patch) Gap , Part 3: Analysis with Volexity Volcano, Threat Intel, and MCP

vulnerability | 2026-10-16 18:27 | CVE-2026-85046 | volexity.com | Original ↗ | .md | #zero-day | #vulnerability-research | #threat-intelligence

4.

MyReport Updater: From gRPC to SYSTEM

vulnerability | 2026-10-12 22:00 | CVE-2026-110632 | blog.quarkslab.com | Original ↗ | .md | #rce | #supply-chain | #git

5.

go2shell: Rooting Home Assistant through SSDP

research | 2026-10-07 22:05 | mccaulay.co.uk | Original ↗ | .md | #rce | #vulnerability-research | #privilege-escalation

6.

Cato VPN Client: Split-Tunnel and Privilege Escalation (CVE-2026-10739)

vulnerability | 2026-09-30 22:00 | CVE-2026-10739 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #exploit

7.

Next.js next/og SVG Injection to Native RCE Exploit PoC (CVE-2026-94545)

vulnerability | Critical | 2026-09-29 07:52 | CVE-2026-94545 | github.com | Original ↗ | .md | #bug-bounty | #rce | #red-team

8.

Inside the Sandbox: How pwn Escaped Google kvmCTF (Before the Watershed)

blog | 2026-09-28 17:03 | pwn.ai | Original ↗ | .md | #ai-security | #vulnerability-research | #sandbox-escape

9.

Linux Container Escape PoCs for CVE-2026-52910 & CVE-2026-80521

tool | 2026-09-16 21:04 | github.com | Original ↗ | .md | #linux | #privilege-escalation | #red-team

10.

CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap

vulnerability | 2026-09-09 07:11 | CVE-2023-54391 | yeswehack.com | Original ↗ | .md | #ai-security | #exploit | #vulnerability-disclosure

11.

Liquid Network Incident Analysis

incident | 2026-09-07 22:00 | certik.com | Original ↗ | .md | #web3 | #exploit | #blockchain

12.

Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon

research | 2026-08-27 00:00 | CVE-2026-7899 | nebusec.ai | Original ↗ | .md | #ai-security | #bug-bounty | #rce

13.

CVE-2026-66804 PoC: Windows Cross Device virtual camera local privilege escalation to SYSTEM

vulnerability | High | 2026-08-13 01:42 | CVE-2026-66804 | github.com | Original ↗ | .md | #public-poc | #privilege-escalation | #windows-security

14.

CVE-2023-25157 PoC: GeoServer jsonArrayContains SQL injection to PostgreSQL RCE

tool | 2026-08-13 21:11 | CVE-2023-25157 | gist.github.com | Original ↗ | .md | #rce | #public-poc | #sql-injection

15.

CVE-2026-68138 PoC: Linux qdisc rate-table race local privilege escalation

tool | 2026-08-11 22:22 | CVE-2026-68138 | github.com | Original ↗ | .md | #public-poc | #kernel-security | #privilege-escalation

16.

CVE-2026-26119 PoC: Windows Admin Center authenticated RCE

tool | 2026-08-09 20:21 | CVE-2026-26119 | github.com | Original ↗ | .md | #ai-security | #rce | #public-poc

17.

Route of Root: Bring a "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF

research | 2026-08-08 00:00 | CVE-2023-2156 | nebusec.ai | Original ↗ | .md | #privilege-escalation | #linux-kernel | #exploit

18.

CVE-2026-17543 PoC: PHP ext-pgsql SQL injection via backslash breakout

tool | 2026-08-06 17:05 | CVE-2026-17543 | github.com | Original ↗ | .md | #public-poc | #data-exposure | #php

19.

Verus Incident Analysis

incident | 2026-07-30 22:00 | certik.com | Original ↗ | .md | #web3 | #defi | #exploit

20.

CVE-2026-66066 PoC: Rails Active Storage file-read-to-RCE chain

tool | 2026-07-29 21:08 | CVE-2026-66066 | github.com | Original ↗ | .md | #rce | #public-poc | #ruby-on-rails

21.

CVE-2026-55040 PoC: Microsoft SharePoint JWT authentication bypass

tool | 2026-07-28 08:46 | CVE-2026-55040 | github.com | Original ↗ | .md | #public-poc | #authentication-bypass | #microsoft

22.

DefiTuna Incident Analysis

incident | 2026-07-16 22:00 | certik.com | Original ↗ | .md | #web3 | #defi | #exploit

23.

JaredFromSubway MEV bot Incident Analysis

incident | 2026-06-25 22:00 | certik.com | Original ↗ | .md | #web3 | #defi | #exploit

24.

Pwning Minecraft: 4-byte heap overflow to RCE

research | 2026-06-02 12:00 | osec.io | Original ↗ | .md | #rce | #exploit | #memory-corruption

25.

[CVE-2024-56326] RCEliteLLM – LiteLLM 1.83.14: Chaining an Environment Variable Leak with Jinja2 SSTI for Remote Code Execution

vulnerability | 2026-05-11 16:39 | CVE-2024-56326 | mccaulay.co.uk | Original ↗ | .md | #rce | #vulnerability-research | #exploitation

26.

What we know about Copy Fail (CVE-2026-31431)

vulnerability | High | Actively exploited | 2026-04-29 22:26 | CVE-2026-31431 | bugcrowd.com | Original ↗ | .md | #active-exploitation | #ai-security | #zero-day

27.

From a Netfilter Bug to kernelCTF: Exploiting CVE-2026-23274 in the Linux Kernel and winning a $10500 Bounty

vulnerability | High | 2026-04-14 00:00 | CVE-2026-23274 | nebusec.ai | Original ↗ | .md | #ai-security | #kernel-security | #privilege-escalation

28.

Claude Mythos: Preparing for a World Where AI Finds and Exploits Vulnerabilities Faster Than Ever

blog | 2026-04-10 15:25 | wiz.io | Original ↗ | .md | #ai-security | #zero-day | #vulnerability-research

29.

From virtio-snd 0-day to hypervisor escape: exploiting QEMU with an uncontrolled heap overflow

research | 2026-03-17 12:00 | osec.io | Original ↗ | .md | #zero-day | #exploit | #heap-overflow

30.

PageJack in Action: CVE-2022-0995 exploit

vulnerability | High | 2026-03-10 23:00 | CVE-2022-0995 | blog.quarkslab.com | Original ↗ | .md | #public-poc | #vulnerability-research | #privilege-escalation