proof-of-concept Archives • Page 2 of 5 • Daily CyberSecurity

CVE-2026-19478: GitLab Flaw Exploited in the Wild, PoC Public GitLab CVE-2026-19478 critical vulnerability warning showing unauthenticated attackers delete public projects exploited in the wild

GitLab CVE-2026-19478 critical vulnerability warning showing unauthenticated attackers delete public projects exploited in the wild

CVE-2026-19478: GitLab Flaw Exploited in the Wild, PoC Public

Do Son August 23, 2026

GitLab has patched a critical flaw that lets unauthenticated attackers delete public projects and user data. The...

CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation Linux kernel CVE-2026-52929 SCTP privilege escalation proof-of-concept exploit code demonstration on Ubuntu

Linux kernel CVE-2026-52929 SCTP privilege escalation proof-of-concept exploit code demonstration on Ubuntu

CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation

Do Son August 21, 2026

TL;DR A researcher published proof-of-concept exploit code for CVE-2026-52929, a Linux kernel SCTP flaw rated CVSS 7.5....

CVE-2026-47301: PoC Exploit Achieves SYSTEM-Level Code Execution in SCCM CVE-2026-47301 SCCM Configuration Manager elevation of privilege proof-of-concept exploit achieving SYSTEM-level code execution

CVE-2026-47301 SCCM Configuration Manager elevation of privilege proof-of-concept exploit achieving SYSTEM-level code execution

CVE-2026-47301: PoC Exploit Achieves SYSTEM-Level Code Execution in SCCM

Do Son August 20, 2026

TL;DR Microsoft patched CVE-2026-47301, an elevation of privilege flaw in Configuration Manager (SCCM). A researcher published proof-of-concept...

CVE-2026-0075: PoC Discloses Android EoP With No User Interaction CVE-2026-0075 Android elevation of privilege ContactsProvider2 SQL injection proof-of-concept exploit no user interaction

CVE-2026-0075 Android elevation of privilege ContactsProvider2 SQL injection proof-of-concept exploit no user interaction

CVE-2026-0075: PoC Discloses Android EoP With No User Interaction

Do Son August 19, 2026

TL;DR Google patched CVE-2026-0075, an Android elevation of privilege flaw in ContactsProvider2. The bug can expose the...

CVE-2026-68138: PoC Exploit Enables Linux Kernel Privilege Escalation CVE-2026-68138 Linux kernel privilege escalation qdisc rate-table race condition use-after-free proof-of-concept exploit to root

CVE-2026-68138 Linux kernel privilege escalation qdisc rate-table race condition use-after-free proof-of-concept exploit to root

CVE-2026-68138: PoC Exploit Enables Linux Kernel Privilege Escalation

Do Son August 18, 2026

TL;DR A researcher released proof-of-concept exploit code for CVE-2026-68138, a race condition in the Linux kernel traffic-control...

GeoServer unauthenticated SQL injection jsonArrayContains vulnerability CVSS 9.8 exploited in the wild proof-of-concept RCE

GeoServer Unauthenticated SQL Injection (CVSS 9.8) Exploited in the Wild, PoC Public

Do Son August 18, 2026

TL;DR A GeoServer unauthenticated SQL injection flaw is under active attack. It lives in the jsonArrayContains filter...

CVE-2026-66804: PoC Exploit Gains SYSTEM via Cross Device Service CVE-2026-66804 Cross Device Service elevation of privilege proof-of-concept exploit gaining SYSTEM privileges on Windows 11

CVE-2026-66804 Cross Device Service elevation of privilege proof-of-concept exploit gaining SYSTEM privileges on Windows 11

CVE-2026-66804: PoC Exploit Gains SYSTEM via Cross Device Service

Do Son August 18, 2026

TL;DR Microsoft patched CVE-2026-66804, an elevation of privilege flaw in the Windows Cross Device Service. A standard...

CVE-2025-62593: Ray RCE Exploited in the Wild, PoC Public CVE-2025-62593 Ray remote code execution vulnerability exploited in the wild DNS rebinding proof-of-concept exploit

CVE-2025-62593 Ray remote code execution vulnerability exploited in the wild DNS rebinding proof-of-concept exploit

CVE-2025-62593: Ray RCE Exploited in the Wild, PoC Public

Do Son August 17, 2026

TL;DR CISA added CVE-2025-62593 to its Known Exploited Vulnerabilities catalog. The flaw is a code injection bug...

Linux AF_PACKET Race (03390aa): PoC Exploit Enables Local Privilege Escalation Linux AF_PACKET hard_header_len race local privilege escalation kernel proof-of-concept exploit to root commit 03390aa

Linux AF_PACKET hard_header_len race local privilege escalation kernel proof-of-concept exploit to root commit 03390aa

Linux AF_PACKET Race (03390aa): PoC Exploit Enables Local Privilege Escalation

Do Son August 17, 2026

TL;DR A researcher published a proof-of-concept exploit for a Linux kernel AF_PACKET race condition. The flaw enables...

Citrix NetScaler pre-auth RCE CVE-2026-8452 SAML heap overflow exploit

Citrix NetScaler Pre-Auth RCE CVE-2026-8452 Gets Public Exploit Code

Do Son August 17, 2026

Researchers at watchTowr published a working exploit for a Citrix NetScaler RCE flaw this week. The bug,...

CVE-2026-64582: PoC Exploit Published for Kernel LPE Linux kernel RDMA rxe use-after-free CVE-2026-64582 local privilege escalation with public PoC exploit code

Linux kernel RDMA rxe use-after-free CVE-2026-64582 local privilege escalation with public PoC exploit code

CVE-2026-64582: PoC Exploit Published for Kernel LPE

Do Son August 14, 2026

TL;DR A researcher published full technical details and working proof-of-concept exploit code for CVE-2026-64582. The flaw is...

CVE-2026-55040 PoC Released for SharePoint Authentication Bypass CVE-2026-55040 SharePoint authentication bypass PoC forging a JWT token shown in a Rapid7 exploit terminal

CVE-2026-55040 SharePoint authentication bypass PoC forging a JWT token shown in a Rapid7 exploit terminal

CVE-2026-55040 PoC Released for SharePoint Authentication Bypass

Do Son August 12, 2026

TL;DR Rapid7 has published a technical analysis and a working proof-of-concept for CVE-2026-55040. The flaw is a...

CVE-2026-50656 PoC Published: Defender Privilege Escalation Bypass ShieldBreak PoC exploit code for CVE-2026-50656 Windows Defender privilege escalation displayed on screen

ShieldBreak PoC exploit code for CVE-2026-50656 Windows Defender privilege escalation displayed on screen

CVE-2026-50656 PoC Published: Defender Privilege Escalation Bypass

Do Son August 12, 2026

TL;DR A researcher has published a public PoC called ShieldBreak. It bypasses Microsoft’s July patch for the...

CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw Windows Kerberos ResetNightmare CVE-2026-27912 elevation of privilege flaw with public proof-of-concept exploit code

Windows Kerberos ResetNightmare CVE-2026-27912 elevation of privilege flaw with public proof-of-concept exploit code

CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw

Do Son August 11, 2026

TL;DR Researchers published full details and a proof-of-concept tool for CVE-2026-27912, called ResetNightmare. The flaw sits in...

CVE-2026-39868: Public PoC Discloses a macOS and iOS Kernel Memory Corruption Flaw macOS kernel vulnerability CVE-2026-39868 in DTrace DOF parsing with public proof-of-concept exploit code

macOS kernel vulnerability CVE-2026-39868 in DTrace DOF parsing with public proof-of-concept exploit code

CVE-2026-39868: Public PoC Discloses a macOS and iOS Kernel Memory Corruption Flaw

Do Son August 6, 2026

TL;DR Apple has patched a serious macOS kernel vulnerability tracked as CVE-2026-39868. An unprivileged app can corrupt...

CVE-2026-39875: Public PoC Lets a Malicious macOS App Gain Root Privileges macOS privilege escalation via CVE-2026-39875 CUPS flaw with public proof-of-concept exploit gaining root

macOS privilege escalation via CVE-2026-39875 CUPS flaw with public proof-of-concept exploit gaining root

CVE-2026-39875: Public PoC Lets a Malicious macOS App Gain Root Privileges

Do Son August 3, 2026

TL;DR Apple has patched a macOS privilege escalation flaw tracked as CVE-2026-39875. A malicious app can chain...

Public PoC Exploits GitLab RCE via Two Oj Memory Corruption Bugs GitLab RCE proof-of-concept exploiting two Oj memory corruption bugs in the notebook diff renderer

GitLab RCE proof-of-concept exploiting two Oj memory corruption bugs in the notebook diff renderer

Public PoC Exploits GitLab RCE via Two Oj Memory Corruption Bugs

Do Son July 31, 2026

TL;DR: Researchers at depthfirst released a working proof-of-concept for a GitLab RCE that runs commands as the...

CVE-2026-42530: NGINX HTTP/3 RCE Proof-of-Concept Publicly Disclosed CVE-2026-42530 NGINX HTTP/3 RCE proof-of-concept exploiting a QPACK use-after-free

CVE-2026-42530 NGINX HTTP/3 RCE proof-of-concept exploiting a QPACK use-after-free

CVE-2026-42530: NGINX HTTP/3 RCE Proof-of-Concept Publicly Disclosed

Do Son July 30, 2026

TL;DR: A public proof-of-concept now targets CVE-2026-42530, an NGINX HTTP/3 RCE flaw rated CVSS 9.2. The use-after-free...

CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed CVE-2026-66373 Redis RCE double-free proof-of-concept via the RESTORE command

CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed

Do Son July 30, 2026

TL;DR: A public proof-of-concept now targets CVE-2026-66373, a Redis RCE flaw in the RESTORE command. The double-free...

Certighost CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Details and PoC Exploit Code Go Public Certighost AD CS vulnerability CVE-2026-54121 Active Directory Certificate Services elevation of privilege chase flow diagram

Certighost AD CS vulnerability CVE-2026-54121 Active Directory Certificate Services elevation of privilege chase flow diagram

Certighost CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Details and PoC Exploit Code Go Public

Do Son July 29, 2026

TL;DR Researchers have published full technical details and working proof-of-concept code for Certighost, tracked as CVE-2026-54121. The...

CVE-2026-50502: Public PoC Exploit Details Windows Event Log Remote Code Execution CVE-2026-50502 Windows Event Log RCE proof-of-concept exploit dropping an HTA file into a victim Startup folder over SMB