N-able takes hosted N-central offline after Able2Shell PoC release
A researcher published proof-of-concept code for 33 issues, including unauthenticated RCE; N-able reports scanning but no confirmed compromises.
Stories per day · 30 days
6 RSS
Relatedprivilege-escalation4rce4fortinet3kernel3openbsd3php3php2shell3remote-code-execution3authentication-bypass2ci-cd2cve-2026-356162cve-2026-972292forticlient-ems2gitlab2local-exploit2mirai2potassium2shared-memory2
120 stories, newest first · one card per story
Stories tagged #poc
Public iOS sandbox escape can read other apps' files
Binance says worse_query hits iOS 26.7.1, 27.0.1 and 27.2; no attacks are reported and Apple has not confirmed a fix.
1
Researchers Release POC for Windows WinSock Ancillary Privilege Escalation Vulnerability
Public POC for CVE-2023-21768 enables local attackers to escalate to SYSTEM privileges on Windows 11 22H2 through the afd.sys driver.
Public PoC exploits PHP2Shell for RCE on PHP 8.4.26
The PoC is tuned for Alpine PHP 8.4.26 and succeeded in seven of ten lab runs.
Researcher exploits PHP2Shell flaws, wins Bitcoin challenge and releases PoC
CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2, were fixed October 21; Amazon saw attempts from October 17.
Public PHP2Shell exploit code used in failed Potassium botnet attempts
Sophos found scanning and failed attempts, not a confirmed compromise; PHP fixed the flaws on October 21.
Public PoC targets critical FortiSIEM unauthenticated RCE (CVE-2026-106173)
Horizon3.ai shows a gRPC path traversal on port 27918 that overwrites a cron-run Redis health script.
Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication
Seqrite details WP2Shell, an unauthenticated WordPress chain combining two core flaws into remote code execution.
OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root
Researchers published a local OpenBSD kernel exploit chaining a decades-old shared-memory bug with an out-of-bounds write to gain root.
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
Researchers published a local OpenBSD 7.9 root exploit chaining a 1988 shared-memory bug with a kernel use-after-free.
1
37-Year-Old Kernel Flaw Exploited to Gain Root Access on OpenBSD — PoC Released
Researchers released a patched OpenBSD local root exploit chaining a 37-year-old shared-memory bug.
PoC Exploit Released for Critical GitLab RCE Vulnerability (CVE-2026-97229)
A public PoC shows critical GitLab CVE-2026-97229 can run commands after a project push.
9
PoC Exploit Code Released for Fortinet FortiClient EMS Authentication Bypass Flaw
Public exploit code is out for FortiClient EMS flaw CVE-2026-35616, exploited since spring 2026.
8
CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab
Rapid7 reproduced unauthenticated GitLab RCE CVE-2026-97229 (CVSS 10) and urges immediate patching.
2
Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
Researchers released AnyPwn, a working pre-auth root exploit for AnyDesk Linux before 8.0.3.
PoC Released for Telegram Desktop Flaw Enabling One-Click File Account Takeover
Public PoC shows Telegram Desktop before 7.2.9 can leak local files and sessions via a crafted link.
10
PoC Released for Critical LMCache Flaw Enabling Unauthenticated Remote Code Execution
JFrog released a proof-of-concept for unauthenticated remote code execution in LMCache, tracked as CVE-2026-105192, with no patch.
8
PoC Released for Zammad Session Leak Flaw Enabling Remote Code Execution
Horizon3.ai released a PoC for Zammad CVE-2026-102489 that leaks session cookies and can yield remote code execution.
6
PoC Exploit Released for Zammad Vulnerability Enabling Session Hijacking and Remote Code Execution
Researchers released a PoC for critical Zammad flaw CVE-2026-102489 enabling session hijacking and remote code execution.
1
Critical LMCache RCE Vulnerability Remains Unpatched, Public PoC Exploit Available
Unpatched LMCache flaw CVE-2026-105192 allows unauthenticated remote code execution, and JFrog published a PoC.
9
PoC Exploit Released for Critical VMware Vulnerability Enabling Guest-to-Host Attacks
Public PoC for CVE-2026-59346 crashes VMware Workstation and Fusion through a guest-to-host integer overflow.
PoC Exploit Released for Critical Atlassian Flaw That Can Lead to Jira Admin Access
watchTowr released a detection PoC for unauthenticated Atlassian file-read CVE-2026-21589 that can yield Jira admin access.
6
Zammad CVE-2026-102489: Session Leak to RCE
Horizon3.ai details Zammad zero-day CVE-2026-102489, abused in the DIVD breach to leak sessions and run code.
9
Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950
Public crash PoC released for Apple CoreGraphics zero-day CVE-2026-86950, reportedly used in targeted attacks.
6