1.CVE-2026-109618/109619: Two Independent Pre-Auth RCE Chains on PHP 8.5.11 (Lab Reproduction & PoC)vulnerability | Critical | 2026-10-21 14:30 | CVE-2026-109618 | github.com | Original ↗ | .md | #rce | #pre-auth | #exploitation
2.PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)vulnerability | 2026-10-15 18:15 | CVE-2026-99999 | pwn.ai | Original ↗ | .md | #ai-security | #exploitation | #virtualization
3.A Vulnerability Is a Hypothesis. An Exploit Is the Proof.blog | 2026-10-16 13:06 | xbow.com | Original ↗ | .md | #ai-security | #vulnerability-research | #exploitation
4.Inside a PaperCut Attacker’s AI Toolkit: Agent Instructions, Exploit Code, a Second RCE, and Victims Across 45+ Countriestool | 2026-10-15 00:00 | hunt.io | Original ↗ | .md | #ai-security | #rce | #exploitation
5.XBOW Built a Chrome Full-Chain Exploit Affecting a Billion Users in Six Daysblog | 2026-10-13 15:20 | xbow.com | Original ↗ | .md | #ai-security | #exploitation | #chrome
6.A JPEG, a Race, and a Ghost: Breaking Discourse's Image Pipelineresearch | 2026-10-07 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #exploitation | #image-parsing
7.From AI Agents to RCE - Building a Vulnerability Research Workflowvulnerability | 2026-09-28 22:00 | blog.quarkslab.com | Original ↗ | .md | #ai-security | #rce | #vulnerability-research
8.[CVE-2024-23692] Horizon3’s Tales from the Trenches: Anthropic’s Mythos and Rejetto HFSvulnerability | 2026-09-30 10:00 | CVE-2024-23692 | horizon3.ai | Original ↗ | .md | #ai-security | #rce | #vulnerability-research
9.VectorFreed: librsvg Use-After-Free (CVE-2026-96889) Leading to RCE in Next.js and Downstream Frameworksvulnerability | Critical | 2026-09-24 06:35 | CVE-2026-96889 | github.com | Original ↗ | .md | #rce | #supply-chain | #red-team
10.[CVE-2026-66804] Windows Exploitation Techniques: Dangling COM Object Registrationsvulnerability | 2026-09-21 00:00 | CVE-2026-66804 | projectzero.google | Original ↗ | .md | #privilege-escalation | #windows | #exploitation
11.OEMpocalypse Now: A Generic Exploitation Strategy from Android untrusted app to rootresearch | 2026-08-31 00:00 | calif.io | Original ↗ | .md | #supply-chain | #vulnerability-research | #android
12.AD Group Risks: Hidden Powers of Account Operatorsblog | 2026-08-28 20:00 | semperis.com | Original ↗ | .md | #ai-security | #exploitation | #experiment
13.Inside a Russian-Speaking Operator's Ukrainian IP Camera Toolkitresearch | 2026-08-10 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #exploitation | #ip-camera
14.Critical SQL Injection in Metabase via Password Reset: CVE-2026-72898vulnerability | 2026-08-06 00:00 | CVE-2026-72898 | bishopfox.com | Original ↗ | .md | #sql-injection | #exploitation | #vulnerability
15.The Taking of FreeBSD One Two Threeresearch | 2026-08-06 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #ctf | #exploitation
16.CVE-2026-60004: Gitea diffpatch Git Hook Installation Remote Code Execution Exploit PoCvulnerability | Critical | 2026-07-29 08:45 | CVE-2026-60004 | github.com | Original ↗ | .md | #rce | #gitea | #red-team
17.[CVE-2026-64704] Apple MIE Exploitation Challengeresearch | 2026-07-27 00:00 | CVE-2026-64704 | calif.io | Original ↗ | .md | #vulnerability-research | #exploitation | #apple
18.Dark Elevator (CVE-2026-50343)research | 2026-07-22 00:00 | CVE-2026-50343 | calif.io | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #windows
19.IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 yearsvulnerability | High | 2026-07-07 00:00 | CVE-2026-43499 | nebusec.ai | Original ↗ | .md | #featured | #vulnerability-research | #container-security
20.GLM-5.2 Is the Most Cost-Efficient Cyber Model We've Tested. It's Also Not #1.blog | 2026-07-03 00:00 | tenzai.com | Original ↗ | .md | #ai-security | #benchmark | #exploitation
21.CVE-2026-11645: Out-of-Bounds Read/Write in V8.vulnerability | High | Actively exploited | 2026-06-08 00:00 | CVE-2026-11645 | bugpwn.com | Original ↗ | .md | #active-exploitation | #rce | #zero-day
22.OOBdump: Relocation Oriented Programmingresearch | 2026-06-08 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #exploitation | #binary-exploitation
23.Counterfeit Object-Oriented Programmingblog | 2026-06-05 00:00 | bugpwn.com | Original ↗ | .md | #vulnerability-research | #exploitation | #binary-exploitation
24.[CVE-2026-41091] RedSun: Exploiting Windows Defender's Remediation Workflowresearch | 2026-06-01 00:00 | CVE-2026-41091 | calif.io | Original ↗ | .md | #vulnerability-research | #windows | #exploitation
25.Control Flow Integrity: Theory, Mechanisms and Exploitation.blog | 2026-05-27 00:00 | bugpwn.com | Original ↗ | .md | #vulnerability-research | #memory-safety | #exploitation
26.AI benchmarking report: Measuring the exploitation ladder for AI modelsblog | 2026-05-19 16:22 | bugcrowd.com | Original ↗ | .md | #ai-security | #benchmark | #exploitation
27.[CVE-2024-56326] RCEliteLLM – LiteLLM 1.83.14: Chaining an Environment Variable Leak with Jinja2 SSTI for Remote Code Executionvulnerability | 2026-05-11 16:39 | CVE-2024-56326 | mccaulay.co.uk | Original ↗ | .md | #rce | #vulnerability-research | #exploitation
28.What we know about Copy Fail (CVE-2026-31431)vulnerability | High | Actively exploited | 2026-04-29 22:26 | CVE-2026-31431 | bugcrowd.com | Original ↗ | .md | #active-exploitation | #ai-security | #zero-day
29.PHP 8.5.5: var_destroy __destruct Reentrancy Heap UAF and Exploitationvulnerability | High | 2026-05-02 16:39 | github.com | Original ↗ | .md | #rce | #php | #exploitation
30.Finding and Exploiting a 21-Year-Old Vulnerability in PHPresearch | 2026-05-01 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #php | #exploitation