N-able takes N-central offline after 30-plus exploit PoCs published
Researcher Sean Bales posted Able2Shell proof-of-concept exploits; N-able says it has seen no active exploitation.
1
Stories per day · 30 days
2 RSS
Relatedremote-code-execution5n-able4n-central4php3php2shell3rmm3xxe3able2shell2bitcoin2ctf2fortinet2fortisiem2grpc2agent-skills1binance1cloudflare1cryptocurrency1denial-of-service1
31 stories, newest first · one card per story
Stories tagged #proof-of-concept
N-able releases N-central 2026.4 HF2 for publicly disclosed zero-days
Defused saw internet probing of the flaws; Shadowserver counts about 148 exposed servers, down from 1,338.
N-able hotfixes seven N-central CVEs after Able2Shell proof-of-concept
A researcher published proof-of-concept code for 33 alleged flaws; N-able says hosted servers are upgraded and no customer compromise is confirmed.
Binance warns iOS flaw can leak wallet secrets to other apps
A public WQ Files proof of concept reads other apps' data on iOS 26.7.1, 27.0.1, and 27.2; no crypto losses are confirmed.
JSON array proof of concept shows parser resource exhaustion
The authors say Apache Struts2 JSON Plugin changes through S2-072 still do not stop maximised comma-array consumption.
Scanner finds local and composite vulnerabilities in public agent skills
Analysts confirmed 53 of 59 GitHub findings, and mitigations blocked attacks in 47 of 55 tested cases.
Encore compiles public exploit proofs into threat-hunting rules
Across 45 CVEs, Encore found 43 without reading logs and raised alerts on two wrong CVE pairs.
StealMyBitcoin CTF writeup posted for php2shell
The supplied feed text is only the word Comments, so no solution steps are available.
Public Linux kernel root exploit appears before a CVE or fix
Sysdig says six ZDI reports went to lists on October 20–21, and several still lack a released-kernel fix.
1
Hacker News links to Steal My Bitcoin CTF PoC
The available feed text gives only the title plus 44 points and 7 comments.
Author says public PHP2shell PoCs fail on stock PHP
The post says GitHub proofs need an existing local-file-inclusion bug and that model-written exploits fail on vanilla PHP.
Critical PHP flaws draw early exploits ahead of today's patch
SANS says every PHP release from 5 onward is affected, only PHP 8 will be patched, and Cloudflare reports exploits.
Public exploit released for unauthenticated FortiSIEM RCE (CVE-2026-106173)
Horizon3.ai’s proof of concept writes files via unauthenticated gRPC on port 27918; 7.5.1 fixes 7.5.0, and 7.6 is unaffected.
Public PoC tests critical PHP session flaws dubbed php2shell
A repository claims PHP 5.4.0–8.5.11 are affected, but PHP has not yet confirmed versions or fixed builds.
Public PoC turns FortiSIEM file-write flaw into unauthenticated RCE
Horizon3.ai's GitHub PoC targets FortiSIEM 7.5.0 over TCP 27918; Fortinet advises 7.5.1 or later.
AnyDesk Linux Flaw Lets Remote Attackers Execute Code as Root Without Authentication
A public proof-of-concept targets a patched AnyDesk Linux 8.0.2 flaw that can run commands as root without authentication.
Hackers exploit critical Atlassian flaw after public PoC release
Attackers began exploiting critical Atlassian flaw CVE-2026-21589 within hours of a public proof of concept.
3
On the Reliability of LLM-Based Vulnerability Patching Benchmarks
Study finds LLM vulnerability-patching benchmarks inflate success while developer-aligned fixes stay rare across 112 bugs.
'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates
BigDiskBuster proof of concept keeps Microsoft Defender running while blocking updates and opening a detection gap.
CopyEscape Docker Flaw Lets Malicious Containers Overwrite Host Files and Gain Root Access
CopyEscape, CVE-2026-17106, lets malicious containers overwrite host files through Docker's archive copy path.
16
VIVOTEK Camera Firmware
CISA warns a CVSS 10 command injection in many VIVOTEK cameras can allow unauthenticated root command execution.
Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity
Nightmare Eclipse released a new Windows Defender PoC exploit called BigDiskBuster to prevent Defender from completing platform and signature updates.
2
BigDiskBuster Windows Defender DoS Vulnerability Blocks Platform and Signature Updates
Unverified GitHub proof-of-concept BigDiskBuster blocks Microsoft Defender platform and signature updates, potentially leaving Windows endpoints with outdated anti-malware protection.
1
Steam Windows 0-Day Vulnerability Allows Users to Silently Escalate to Full SYSTEM Privileges
A public BrokenPipe PoC exploits a signature-coverage flaw in Steam's Windows service, letting unprivileged local users gain NT AUTHORITY\SYSTEM without a patch or CVE.
6