proof-of-concept Archives • Daily CyberSecurity

CVE-2026-28576 (CVSS 10): Android SQL Injection PoC Out CVE-2026-28576 Android Contacts Provider SQL injection allowing full contacts database dump without READ_CONTACTS permission

CVE-2026-28576 Android Contacts Provider SQL injection allowing full contacts database dump without READ_CONTACTS permission

CVE-2026-28576 (CVSS 10): Android SQL Injection PoC Out

Do Son September 11, 2026

TL;DR A maximum-severity SQL injection flaw sits in the Android Contacts Provider. Tracked as CVE-2026-28576 with a...

ShieldCrash: Windows Defender 0day With Public PoC Exploit Windows Defender 0day CVE-2026-69414 ShieldCrash proof-of-concept exploit reading files as SYSTEM

Windows Defender 0day CVE-2026-69414 ShieldCrash proof-of-concept exploit reading files as SYSTEM

ShieldCrash: Windows Defender 0day With Public PoC Exploit

Do Son September 9, 2026

TL;DR A researcher published ShieldCrash, a Windows Defender 0day that bypasses Microsoft’s patch for the ShieldBreak vulnerability...

CVE-2026-52924 PoC Exploit Disclosed: 9.8 CVSS Linux Root Privilege Escalation Linux CVE-2026-52924 details and Linux CVE-2026-52924 PoC exploit release

Linux CVE-2026-52924 details and Linux CVE-2026-52924 PoC exploit release

CVE-2026-52924 PoC Exploit Disclosed: 9.8 CVSS Linux Root Privilege Escalation

Do Son September 4, 2026

Security team NebuSec published technical details and functional exploit code for a critical Linux flaw. This Linux...

Researcher Claims CrowdStrike Falcon 0day, Posts PoC CrowdStrike Falcon vulnerability FalconFlank claimed 0day privilege escalation proof-of-concept publicly disclosed on GitHub diagram

CrowdStrike Falcon vulnerability FalconFlank claimed 0day privilege escalation proof-of-concept publicly disclosed on GitHub diagram

Researcher Claims CrowdStrike Falcon 0day, Posts PoC

Do Son September 3, 2026

TL;DR A researcher using the handle MSNightmare says they found a CrowdStrike Falcon vulnerability. They published a...

Proxmox VE 7 Auth Bypass: PoC Public, Exploited in the Wild Proxmox VE authentication bypass vulnerability PoC exploit code publicly disclosed pre-auth root access diagram

Proxmox VE authentication bypass vulnerability PoC exploit code publicly disclosed pre-auth root access diagram

Proxmox VE 7 Auth Bypass: PoC Public, Exploited in the Wild

Do Son September 1, 2026

TL;DR Proxmox published advisory PSA-2026-00043-1 on September 1, 2026. It warns of a critical Proxmox VE authentication...

CVE-2026-81934: Redis RCE PoC Exploit Now Public Redis vulnerability CVE-2026-81934 remote code execution use-after-free PoC exploit warning

CVE-2026-81934: Redis RCE PoC Exploit Now Public

Do Son September 1, 2026

TL;DR A critical Redis vulnerability, tracked as CVE-2026-81934, allows remote code execution on TLS-enabled servers. It carries...

CVE-2026-72137 (CVSS 9.8): Linux Kernel Flaw Enables Root Privilege Escalation, PoC Public Linux kernel CVE-2026-72137 double-free vulnerability enabling root privilege escalation with public PoC exploit code

Linux kernel CVE-2026-72137 double-free vulnerability enabling root privilege escalation with public PoC exploit code

CVE-2026-72137 (CVSS 9.8): Linux Kernel Flaw Enables Root Privilege Escalation, PoC Public

Do Son August 27, 2026

TL;DR A double-free flaw in the Linux kernel, tracked as CVE-2026-72137, carries a CVSS score of 9.8....

CVE-2026-53361: PoC Exploit Enables AF_UNIX Container Escape CVE-2026-53361 AF_UNIX garbage collector container escape use-after-free race condition proof-of-concept

CVE-2026-53361 AF_UNIX garbage collector container escape use-after-free race condition proof-of-concept

CVE-2026-53361: PoC Exploit Enables AF_UNIX Container Escape

Do Son August 27, 2026

TL;DR Researchers published full details and proof-of-concept exploit code for CVE-2026-53361, a use-after-free in the Linux kernel...

PoC Released for Redis RCE Use-After-Free Flaw Redis RCE use-after-free vulnerability public proof-of-concept exploit code disclosed

PoC Released for Redis RCE Use-After-Free Flaw

Do Son August 26, 2026

TL;DR Researchers published proof-of-concept exploit code for a Redis RCE vulnerability. The heap use-after-free lets a remote...

CVE-2026-53365: VsockDrop PoC Enables Unprivileged Local Privilege Escalation CVE-2026-53365 VsockDrop unprivileged local privilege escalation Linux kernel vsock io_uring zerocopy proof-of-concept exploit to root

CVE-2026-53365 VsockDrop unprivileged local privilege escalation Linux kernel vsock io_uring zerocopy proof-of-concept exploit to root

CVE-2026-53365: VsockDrop PoC Enables Unprivileged Local Privilege Escalation

Do Son August 25, 2026

TL;DR A researcher released VsockDrop, a proof-of-concept exploit for CVE-2026-53365 in the Linux kernel. The flaw enables...

CVE-2026-74480 (CVSS 9.8): Linux Kernel Privilege Escalation PoC Public Linux kernel CVE-2026-74480 privilege escalation vulnerability with public proof-of-concept exploit code in the network bridge module

Linux kernel CVE-2026-74480 privilege escalation vulnerability with public proof-of-concept exploit code in the network bridge module

CVE-2026-74480 (CVSS 9.8): Linux Kernel Privilege Escalation PoC Public

Do Son August 24, 2026

A newly disclosed flaw in the Linux kernel enables local Linux kernel privilege escalation. Tracked as CVE-2026-74480...

CVE-2026-52912: Linux Kernel Root Exploit PoC Disclosed CVE-2026-52912 Linux kernel privilege escalation use-after-free flaw in netfilter nf_queue with public root exploit PoC

CVE-2026-52912 Linux kernel privilege escalation use-after-free flaw in netfilter nf_queue with public root exploit PoC

CVE-2026-52912: Linux Kernel Root Exploit PoC Disclosed

Do Son August 24, 2026

TL;DR CVE-2026-52912 is a use-after-free flaw in the Linux kernel’s netfilter nf_queue code. It carries a CVSS...

CVE-2026-19478: GitLab Flaw Exploited in the Wild, PoC Public GitLab CVE-2026-19478 critical vulnerability warning showing unauthenticated attackers delete public projects exploited in the wild

GitLab CVE-2026-19478 critical vulnerability warning showing unauthenticated attackers delete public projects exploited in the wild

CVE-2026-19478: GitLab Flaw Exploited in the Wild, PoC Public

Do Son August 23, 2026

GitLab has patched a critical flaw that lets unauthenticated attackers delete public projects and user data. The...

CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation Linux kernel CVE-2026-52929 SCTP privilege escalation proof-of-concept exploit code demonstration on Ubuntu

Linux kernel CVE-2026-52929 SCTP privilege escalation proof-of-concept exploit code demonstration on Ubuntu

CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation

Do Son August 21, 2026

TL;DR A researcher published proof-of-concept exploit code for CVE-2026-52929, a Linux kernel SCTP flaw rated CVSS 7.5....

CVE-2026-47301: PoC Exploit Achieves SYSTEM-Level Code Execution in SCCM CVE-2026-47301 SCCM Configuration Manager elevation of privilege proof-of-concept exploit achieving SYSTEM-level code execution

CVE-2026-47301 SCCM Configuration Manager elevation of privilege proof-of-concept exploit achieving SYSTEM-level code execution

CVE-2026-47301: PoC Exploit Achieves SYSTEM-Level Code Execution in SCCM

Do Son August 20, 2026

TL;DR Microsoft patched CVE-2026-47301, an elevation of privilege flaw in Configuration Manager (SCCM). A researcher published proof-of-concept...

CVE-2026-0075: PoC Discloses Android EoP With No User Interaction CVE-2026-0075 Android elevation of privilege ContactsProvider2 SQL injection proof-of-concept exploit no user interaction

CVE-2026-0075 Android elevation of privilege ContactsProvider2 SQL injection proof-of-concept exploit no user interaction

CVE-2026-0075: PoC Discloses Android EoP With No User Interaction

Do Son August 19, 2026

TL;DR Google patched CVE-2026-0075, an Android elevation of privilege flaw in ContactsProvider2. The bug can expose the...

CVE-2026-68138: PoC Exploit Enables Linux Kernel Privilege Escalation CVE-2026-68138 Linux kernel privilege escalation qdisc rate-table race condition use-after-free proof-of-concept exploit to root

CVE-2026-68138 Linux kernel privilege escalation qdisc rate-table race condition use-after-free proof-of-concept exploit to root

CVE-2026-68138: PoC Exploit Enables Linux Kernel Privilege Escalation

Do Son August 18, 2026

TL;DR A researcher released proof-of-concept exploit code for CVE-2026-68138, a race condition in the Linux kernel traffic-control...

GeoServer unauthenticated SQL injection jsonArrayContains vulnerability CVSS 9.8 exploited in the wild proof-of-concept RCE

GeoServer Unauthenticated SQL Injection (CVSS 9.8) Exploited in the Wild, PoC Public

Do Son August 18, 2026

TL;DR A GeoServer unauthenticated SQL injection flaw is under active attack. It lives in the jsonArrayContains filter...

CVE-2026-66804: PoC Exploit Gains SYSTEM via Cross Device Service CVE-2026-66804 Cross Device Service elevation of privilege proof-of-concept exploit gaining SYSTEM privileges on Windows 11

CVE-2026-66804 Cross Device Service elevation of privilege proof-of-concept exploit gaining SYSTEM privileges on Windows 11

CVE-2026-66804: PoC Exploit Gains SYSTEM via Cross Device Service

Do Son August 18, 2026

TL;DR Microsoft patched CVE-2026-66804, an elevation of privilege flaw in the Windows Cross Device Service. A standard...

CVE-2025-62593: Ray RCE Exploited in the Wild, PoC Public CVE-2025-62593 Ray remote code execution vulnerability exploited in the wild DNS rebinding proof-of-concept exploit

CVE-2025-62593 Ray remote code execution vulnerability exploited in the wild DNS rebinding proof-of-concept exploit

CVE-2025-62593: Ray RCE Exploited in the Wild, PoC Public

Do Son August 17, 2026

TL;DR CISA added CVE-2025-62593 to its Known Exploited Vulnerabilities catalog. The flaw is a code injection bug...

Linux AF_PACKET Race (03390aa): PoC Exploit Enables Local Privilege Escalation Linux AF_PACKET hard_header_len race local privilege escalation kernel proof-of-concept exploit to root commit 03390aa

Linux AF_PACKET hard_header_len race local privilege escalation kernel proof-of-concept exploit to root commit 03390aa

Linux AF_PACKET Race (03390aa): PoC Exploit Enables Local Privilege Escalation

Do Son August 17, 2026

TL;DR A researcher published a proof-of-concept exploit for a Linux kernel AF_PACKET race condition. The flaw enables...

Citrix NetScaler pre-auth RCE CVE-2026-8452 SAML heap overflow exploit

Citrix NetScaler Pre-Auth RCE CVE-2026-8452 Gets Public Exploit Code

Do Son August 17, 2026

Researchers at watchTowr published a working exploit for a Citrix NetScaler RCE flaw this week. The bug,...