proof-of-concept Archives • Page 2 of 4 • Daily CyberSecurity

CVE-2026-64582: PoC Exploit Published for Kernel LPE Linux kernel RDMA rxe use-after-free CVE-2026-64582 local privilege escalation with public PoC exploit code

Linux kernel RDMA rxe use-after-free CVE-2026-64582 local privilege escalation with public PoC exploit code

CVE-2026-64582: PoC Exploit Published for Kernel LPE

Do Son August 14, 2026

TL;DR A researcher published full technical details and working proof-of-concept exploit code for CVE-2026-64582. The flaw is...

CVE-2026-55040 PoC Released for SharePoint Authentication Bypass CVE-2026-55040 SharePoint authentication bypass PoC forging a JWT token shown in a Rapid7 exploit terminal

CVE-2026-55040 SharePoint authentication bypass PoC forging a JWT token shown in a Rapid7 exploit terminal

CVE-2026-55040 PoC Released for SharePoint Authentication Bypass

Do Son August 12, 2026

TL;DR Rapid7 has published a technical analysis and a working proof-of-concept for CVE-2026-55040. The flaw is a...

CVE-2026-50656 PoC Published: Defender Privilege Escalation Bypass ShieldBreak PoC exploit code for CVE-2026-50656 Windows Defender privilege escalation displayed on screen

ShieldBreak PoC exploit code for CVE-2026-50656 Windows Defender privilege escalation displayed on screen

CVE-2026-50656 PoC Published: Defender Privilege Escalation Bypass

Do Son August 12, 2026

TL;DR A researcher has published a public PoC called ShieldBreak. It bypasses Microsoft’s July patch for the...

CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw Windows Kerberos ResetNightmare CVE-2026-27912 elevation of privilege flaw with public proof-of-concept exploit code

Windows Kerberos ResetNightmare CVE-2026-27912 elevation of privilege flaw with public proof-of-concept exploit code

CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw

Do Son August 11, 2026

TL;DR Researchers published full details and a proof-of-concept tool for CVE-2026-27912, called ResetNightmare. The flaw sits in...

CVE-2026-39868: Public PoC Discloses a macOS and iOS Kernel Memory Corruption Flaw macOS kernel vulnerability CVE-2026-39868 in DTrace DOF parsing with public proof-of-concept exploit code

macOS kernel vulnerability CVE-2026-39868 in DTrace DOF parsing with public proof-of-concept exploit code

CVE-2026-39868: Public PoC Discloses a macOS and iOS Kernel Memory Corruption Flaw

Do Son August 6, 2026

TL;DR Apple has patched a serious macOS kernel vulnerability tracked as CVE-2026-39868. An unprivileged app can corrupt...

CVE-2026-39875: Public PoC Lets a Malicious macOS App Gain Root Privileges macOS privilege escalation via CVE-2026-39875 CUPS flaw with public proof-of-concept exploit gaining root

macOS privilege escalation via CVE-2026-39875 CUPS flaw with public proof-of-concept exploit gaining root

CVE-2026-39875: Public PoC Lets a Malicious macOS App Gain Root Privileges

Do Son August 3, 2026

TL;DR Apple has patched a macOS privilege escalation flaw tracked as CVE-2026-39875. A malicious app can chain...

Public PoC Exploits GitLab RCE via Two Oj Memory Corruption Bugs GitLab RCE proof-of-concept exploiting two Oj memory corruption bugs in the notebook diff renderer

GitLab RCE proof-of-concept exploiting two Oj memory corruption bugs in the notebook diff renderer

Public PoC Exploits GitLab RCE via Two Oj Memory Corruption Bugs

Do Son July 31, 2026

TL;DR: Researchers at depthfirst released a working proof-of-concept for a GitLab RCE that runs commands as the...

CVE-2026-42530: NGINX HTTP/3 RCE Proof-of-Concept Publicly Disclosed CVE-2026-42530 NGINX HTTP/3 RCE proof-of-concept exploiting a QPACK use-after-free

CVE-2026-42530 NGINX HTTP/3 RCE proof-of-concept exploiting a QPACK use-after-free

CVE-2026-42530: NGINX HTTP/3 RCE Proof-of-Concept Publicly Disclosed

Do Son July 30, 2026

TL;DR: A public proof-of-concept now targets CVE-2026-42530, an NGINX HTTP/3 RCE flaw rated CVSS 9.2. The use-after-free...

CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed CVE-2026-66373 Redis RCE double-free proof-of-concept via the RESTORE command

CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed

Do Son July 30, 2026

TL;DR: A public proof-of-concept now targets CVE-2026-66373, a Redis RCE flaw in the RESTORE command. The double-free...

Certighost CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Details and PoC Exploit Code Go Public Certighost AD CS vulnerability CVE-2026-54121 Active Directory Certificate Services elevation of privilege chase flow diagram

Certighost AD CS vulnerability CVE-2026-54121 Active Directory Certificate Services elevation of privilege chase flow diagram

Certighost CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Details and PoC Exploit Code Go Public

Do Son July 29, 2026

TL;DR Researchers have published full technical details and working proof-of-concept code for Certighost, tracked as CVE-2026-54121. The...

CVE-2026-50502: Public PoC Exploit Details Windows Event Log Remote Code Execution CVE-2026-50502 Windows Event Log RCE proof-of-concept exploit dropping an HTA file into a victim Startup folder over SMB

CVE-2026-50502 Windows Event Log RCE proof-of-concept exploit dropping an HTA file into a victim Startup folder over SMB

CVE-2026-50502: Public PoC Exploit Details Windows Event Log Remote Code Execution

Do Son July 29, 2026

TL;DR A researcher known as Pixis has published full details and proof-of-concept code for CVE-2026-50502. The flaw...

CVE-2026-42533: NGINX Heap Overflow Enables RCE and ASLR Bypass, Public PoC Released CVE-2026-42533 NGINX heap overflow proof-of-concept enabling an ASLR bypass and RCE

CVE-2026-42533 NGINX heap overflow proof-of-concept enabling an ASLR bypass and RCE

CVE-2026-42533: NGINX Heap Overflow Enables RCE and ASLR Bypass, Public PoC Released

Do Son July 28, 2026

TL;DR: A public proof-of-concept now targets CVE-2026-42533, an NGINX heap overflow rated CVSS 9.2. The bug lets...

Fraggap Linux kernel vulnerability CVE-2026-53362 enabling local privilege escalation through a UDPv6 out-of-bounds write

Fraggap Linux Kernel Vulnerability: Full Details and PoC Exploit Code Now Public

Do Son July 28, 2026

A researcher has published full technical details and working proof-of-concept code for a Linux kernel vulnerability named...

CVE-2026-61511: vBulletin Preauth RCE with Public PoC Disclosed CVE-2026-61511 vBulletin preauth RCE proof-of-concept abusing the runMaths eval for remote code execution

CVE-2026-61511 vBulletin preauth RCE proof-of-concept abusing the runMaths eval for remote code execution

CVE-2026-61511: vBulletin Preauth RCE with Public PoC Disclosed

Do Son July 27, 2026

TL;DR: A public proof-of-concept now targets CVE-2026-61511, a vBulletin preauth RCE. The bug lets an unauthenticated attacker...

CVE-2026-49176 Windows WalletService elevation of privilege exploit escalating to SYSTEM

CVE-2026-49176 Windows WalletService Elevation of Privilege Flaw Gets Public PoC Exploit

Do Son July 27, 2026

TL;DR CVE-2026-49176 is an elevation of privilege flaw in Windows WalletService. It lets a standard user gain...

CVE-2026-50454: Public PoC Shows Windows AppResolver Elevation of Privilege to SYSTEM Windows AppResolver LPE CVE-2026-50454 UAC bypass chain to a SYSTEM shell and Elevation of Privilege

Windows AppResolver LPE CVE-2026-50454 UAC bypass chain to a SYSTEM shell and Elevation of Privilege

CVE-2026-50454: Public PoC Shows Windows AppResolver Elevation of Privilege to SYSTEM

Do Son July 24, 2026

TL;DR A researcher has published a write-up and proof-of-concept code for the Windows AppResolver LPE. The chain...

Foxit PDF Reader vulnerability CVE-2026-57239 exploited for SYSTEM privileges via local privilege escalation

CVE-2026-57239: Public PoC Exploits Foxit PDF Reader Vulnerability for SYSTEM Privileges

Do Son July 23, 2026

TL;DR A security researcher has published full details and proof-of-concept code for a Foxit PDF Reader vulnerability....

Public PoC Exploit Released for fastjson 1.2.83 Remote Code Execution Flaw fastjson RCE vulnerability in versions 1.2.68 to 1.2.83 with public PoC exploit code

fastjson RCE vulnerability in versions 1.2.68 to 1.2.83 with public PoC exploit code

Public PoC Exploit Released for fastjson 1.2.83 Remote Code Execution Flaw

Do Son July 22, 2026

TL;DR Researcher Kirill Firsov disclosed a fastjson RCE on July 19, 2026. It affects fastjson 1.2.68 through...

CVE-2026-42980 Windows privilege escalation flaw in kernel WMI granting SYSTEM access

Public PoC Released for CVE-2026-42980 Windows Privilege Escalation Flaw

Do Son July 21, 2026

TL;DR A public proof-of-concept now targets CVE-2026-42980, a Windows privilege escalation flaw in the NT kernel. The...

CVE-2026-50522 SharePoint RCE vulnerability exploited in the wild with public PoC exploit

CVE-2026-50522 SharePoint RCE Flaw Exploited in the Wild With Public PoC Exploit

Do Son July 21, 2026

TL;DR CVE-2026-50522 is a critical SharePoint RCE flaw rated CVSS 9.8. Researchers report active exploitation attempts, and...

WordPress pre-auth RCE CVE-2026-63030 REST batch route confusion SQL injection public PoC

WordPress Pre-Auth RCE CVE-2026-63030: Vulnerability Details and PoC Exploit Code Now Public

Do Son July 18, 2026

TL;DR WordPress shipped 7.0.2 on July 17, 2026 to fix a critical flaw chain. The bug is...

Linux kernel FUSE local privilege escalation via CVE-2026-31694 page cache overflow

Public PoC Discloses CVE-2026-31694, a Linux Kernel FUSE Local Privilege Escalation

Do Son July 10, 2026

TL;DR Researchers have published full details and working exploit code for CVE-2026-31694. This Linux kernel FUSE bug...