Elektrine
Log in Register

#poc

18 posts · Last used 16d

Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2w ago
A public PoC exploit, cups2root, chains a CUPS privilege escalation to take lpadmin users to root. No CVE or patch yet. See the mechanism and mitigations. #cups2root #CUPS #PrivilegeEscalation #LinuxSecurity #ZeroDay #lpadmin #PoC #RootExploit https://securityonline.info/cups2root-lpadmin-root-poc/?utm_source=mastodon&utm_medium=jetpack_social
cups2root: Public PoC Exploit Escalates lpadmin to Root on CUPS
Daily CyberSecurity

cups2root: Public PoC Exploit Escalates lpadmin to Root on CUPS

A public PoC exploit, cups2root, chains a CUPS privilege escalation to take lpadmin users to root. No CVE or patch yet. See the mechanism and mitigations.

0
0
1
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 1mo ago
A public PoC exploit targets CVE-2026-72137, a CVSS 9.8 Linux kernel double-free that enables root privilege escalation. Patch now. #CVE202672137 #LinuxKernel #PrivilegeEscalation #PoC #xfrm #InfoSec https://securityonline.info/cve-2026-72137-linux-kernel-lpe/?utm_source=mastodon&utm_medium=jetpack_social
CVE-2026-72137 (CVSS 9.8): Linux Kernel Flaw Enables Root Privilege Escalation, PoC Public
Daily CyberSecurity

CVE-2026-72137 (CVSS 9.8): Linux Kernel Flaw Enables Root Privilege Escalation, PoC Public

A public PoC exploit targets CVE-2026-72137, a CVSS 9.8 Linux kernel double-free that enables root privilege escalation. Patch now.

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
A public PoC now targets CVE-2026-66373, a Redis RCE double-free via RESTORE. See affected versions and upgrade to Redis 8.8.0 now. #Redis #RedisRCE #CVE202666373 #RCE #DoubleFree #PoC #RESTORE #Cybersecurity https://securityonline.info/redis-rce-cve-2026-66373/?utm_source=mastodon&utm_medium=jetpack_social
CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed
Daily CyberSecurity

CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed

A public PoC now targets CVE-2026-66373, a Redis RCE double-free via RESTORE. See affected versions and upgrade to Redis 8.8.0 now.

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
A public PoC now details CVE-2026-42533, an NGINX heap overflow with an ASLR bypass and possible RCE. Upgrade to NGINX 1.31.3 or 1.30.4 now. #NGINX #CVE202642533 #RCE #HeapOverflow #ASLRBypass #NGINXPlus #PoC #Cybersecurity https://securityonline.info/nginx-heap-overflow-cve-2026-42533/?utm_source=mastodon&utm_medium=jetpack_social
CVE-2026-42533: NGINX Heap Overflow Enables RCE and ASLR Bypass, Public PoC Released
Daily CyberSecurity

CVE-2026-42533: NGINX Heap Overflow Enables RCE and ASLR Bypass, Public PoC Released

A public PoC now details CVE-2026-42533, an NGINX heap overflow with an ASLR bypass and possible RCE. Upgrade to NGINX 1.31.3 or 1.30.4 now.

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
A public PoC now targets CVE-2026-61511, a vBulletin preauth RCE via runMaths eval. Patch to vBulletin 6.2.2 to block remote code execution. #vBulletin #CVE202661511 #RCE #PreauthRCE #RemoteCodeExecution #PoC #WebSecurity #Cybersecurity https://securityonline.info/vbulletin-preauth-rce-cve-2026-61511/?utm_source=mastodon&utm_medium=jetpack_social
CVE-2026-61511: vBulletin Preauth RCE with Public PoC Disclosed
Daily CyberSecurity

CVE-2026-61511: vBulletin Preauth RCE with Public PoC Disclosed

A public PoC now targets CVE-2026-61511, a vBulletin preauth RCE via runMaths eval. Patch to vBulletin 6.2.2 to block remote code execution.

0
0
0
0
Sam Stepanyan :verified: 🐘 @securestep9@infosec.exchange
· 2mo ago
#Windows: if you haven't patched your MS Windows estate with July Patch Tuesday updates, now it's time to do it! #CertiGhost CVE-2026-54121 vulnerability allows an unprivileged user on your network to fully compromise the Active Directory and the Proof-of-Cocept (#POC) is out: 👇 https://thehackernews.com/2026/07/certighost-exploit-lets-low-privileged.html
thehackernews.com

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

4
0
2
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
Researchers publicly disclosed a Knot Resolver RCE flaw and PoC exploit code. The DNS-over-QUIC heap overflow hits 6.3.0; update to 6.4.1 now. #KnotResolver #DNSoverQUIC #RCE #HeapOverflow #PoC #DNSSecurity https://securityonline.info/knot-resolver-doq-rce-poc/?utm_source=mastodon&utm_medium=jetpack_social
Public Exploit Code Released for Knot Resolver DNS-over-QUIC Remote Code Execution Flaw
Daily CyberSecurity

Public Exploit Code Released for Knot Resolver DNS-over-QUIC Remote Code Execution Flaw

Researchers publicly disclosed a Knot Resolver RCE flaw and PoC exploit code. The DNS-over-QUIC heap overflow hits 6.3.0; update to 6.4.1 now.

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
Gitea vulnerability CVE-2026-58443 (CVSS 9.6) lets public-only tokens write to private repos. Details and PoC code are public. Update to v1.27.0. #Gitea #CVE202658443 #DevSecOps #PoC #InfoSec https://securityonline.info/gitea-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social
CVE-2026-58443: Gitea Flaw (CVSS 9.6) Details and PoC Exploit Code Publicly Disclosed
Daily CyberSecurity

CVE-2026-58443: Gitea Flaw (CVSS 9.6) Details and PoC Exploit Code Publicly Disclosed

Gitea vulnerability CVE-2026-58443 (CVSS 9.6) lets public-only tokens write to private repos. Details and PoC code are public. Update to v1.27.0.

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 3mo ago
OPNsense root RCE flaws are public with PoC code. CVE-2026-57155 (9.9) chains an arbitrary file write to root. Patch 26.1.11 or 26.4.1p1 now. #OPNsense #RootRCE #RCE #FirewallSecurity #CyberSecurity #Vulnerability #InfoSec #PoC https://securityonline.info/opnsense-root-rce-cve-2026-57155-poc/?utm_source=mastodon&utm_medium=jetpack_social
OPNsense Root RCE Flaw CVE-2026-57155 (CVSS 9.9): Details and PoC Publicly Disclosed
Daily CyberSecurity

OPNsense Root RCE Flaw CVE-2026-57155 (CVSS 9.9): Details and PoC Publicly Disclosed

OPNsense root RCE flaws are public with PoC code. CVE-2026-57155 (9.9) chains an arbitrary file write to root. Patch 26.1.11 or 26.4.1p1 now.

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 3mo ago
HawkTrace publicly disclosed Microsoft Exchange vulnerability CVE-2026-45504 with PoC exploit code. The SSRF flaw reads arbitrary files. Patch now. #MicrosoftExchange #CVE202645504 #SSRF #Cybersecurity #PoC #Infosec https://securityonline.info/microsoft-exchange-cve-2026-45504/?utm_source=mastodon&utm_medium=jetpack_social
Microsoft Exchange Vulnerability CVE-2026-45504 Gets Public PoC Exploit
Daily CyberSecurity

Microsoft Exchange Vulnerability CVE-2026-45504 Gets Public PoC Exploit

HawkTrace publicly disclosed Microsoft Exchange vulnerability CVE-2026-45504 with PoC exploit code. The SSRF flaw reads arbitrary files. Patch now.

0
0
1
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 3mo ago
Researchers publicly disclosed a libssh2 vulnerability, CVE-2026-58050, with PoC code. A malicious SSH server can corrupt a client's heap. Patch now. #libssh2 #CVE202658050 #SSH #HeapOverflow #PoC #Cybersecurity #Infosec https://securityonline.info/libssh2-vulnerability-cve-2026-58050/?utm_source=mastodon&utm_medium=jetpack_social
libssh2 Vulnerability CVE-2026-58050 Gets Public PoC Exploit
Daily CyberSecurity

libssh2 Vulnerability CVE-2026-58050 Gets Public PoC Exploit

Researchers publicly disclosed a libssh2 vulnerability, CVE-2026-58050, with PoC code. A malicious SSH server can corrupt a client's heap. Patch now.

0
0
0
0
You've seen all posts