{"vulnerability": "CVE-2026-2783", "sightings": [{"uuid": "202bbabc-bd31-40df-84a5-de3a4deeb8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27839", "type": "seen", "source": "https://gist.github.com/alon710/5824d9b6db63c17fd0a504d93c2d1716", "content": "", "creation_timestamp": "2026-02-27T05:40:18.000000Z"}, {"uuid": "3c32d56e-2d66-4055-90d2-c0b31a36f2ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27838", "type": "seen", "source": "https://gist.github.com/alon710/87a9eaadd5362fd30512683dd9901643", "content": "", "creation_timestamp": "2026-02-27T06:10:18.000000Z"}, {"uuid": "19add767-f8a2-4cd2-8d05-ac5291c22988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27835", "type": "seen", "source": "https://gist.github.com/alon710/77f29ca3c69eb8ef713507cb5ca27a63", "content": "", "creation_timestamp": "2026-02-27T06:40:19.000000Z"}, {"uuid": "6890c4c0-91ed-4606-97ef-85d1d22226eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27837", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq3lvr2dh2n", "content": "", "creation_timestamp": "2026-02-26T01:53:40.652460Z"}, {"uuid": "ff14837d-5ac5-4c22-aad7-da6c4bc69dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27836", "type": "seen", "source": "https://gist.github.com/alon710/ddf713b6949e1e0ad41c8c6c2f71cccf", "content": "", "creation_timestamp": "2026-02-28T01:40:11.000000Z"}, {"uuid": "c77f2747-833e-4c53-9795-4ce9eaf544ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27830", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq5n54cfq2n", "content": "", "creation_timestamp": "2026-02-26T02:30:10.240472Z"}, {"uuid": "45007d4a-9c00-4544-8002-d4ba43f59ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2783", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yg5pzm2o", "content": "", "creation_timestamp": "2026-02-28T02:01:56.066615Z"}, {"uuid": "0b0f183b-dfce-419f-a2a7-c0b465c9d71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27836", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvkie5lo22s", "content": "", "creation_timestamp": "2026-02-28T06:03:27.136687Z"}, {"uuid": "c7944000-0e89-4895-bbe4-a7302ed92627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqknpqtso2s", "content": "", "creation_timestamp": "2026-02-26T06:23:08.182146Z"}, {"uuid": "4686ed5b-3303-44c3-a671-17a09115e01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27836", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgcc7xhsry2x", "content": "", "creation_timestamp": "2026-03-05T07:40:11.363793Z"}, {"uuid": "fe3ddda9-21c5-4d38-a9b8-8b936a823f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27837", "type": "seen", "source": "https://gist.github.com/alon710/542919c9baa74ad65aba77993c4f58c9", "content": "", "creation_timestamp": "2026-02-26T21:10:19.000000Z"}, {"uuid": "8829ad5c-70e8-419d-a85a-7eb9ebb6a43d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27835", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsdmt2wmg2y", "content": "", "creation_timestamp": "2026-02-26T23:22:40.682032Z"}, {"uuid": "a043668d-83b5-4b5f-9bac-748a91fa7d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2783", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevrqegb2o", "content": "", "creation_timestamp": "2026-02-25T00:02:19.906711Z"}, {"uuid": "19c35e05-a438-400b-90f4-6bdc74d148c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27833", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3minapnnxep2t", "content": "", "creation_timestamp": "2026-04-04T03:02:51.060083Z"}, {"uuid": "d546d2ca-f02e-4c98-83e9-57329dbbe8fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27834", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mj537tvftz2w", "content": "", "creation_timestamp": "2026-04-10T10:07:07.441057Z"}, {"uuid": "4c82f004-6db4-4d72-bfb1-388774da42b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27833", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mj5imz5axm2f", "content": "", "creation_timestamp": "2026-04-10T14:07:08.307263Z"}, {"uuid": "f13c6dc5-9806-44ed-8ecf-5e224feeb40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27830", "type": "seen", "source": "https://bsky.app/profile/dpp.mastodon.social.ap.brid.gy/post/3mjcxjw2o2zt2", "content": "", "creation_timestamp": "2026-04-12T18:17:12.619591Z"}, {"uuid": "c6c22e99-d5c3-49cf-9fe2-94d671722abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27830", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1833", "content": "", "creation_timestamp": "2026-04-21T21:00:00.000000Z"}, {"uuid": "3ff0ca71-5df0-4bb2-91bb-9759c9dee5f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27833", "type": "published-proof-of-concept", "source": "Telegram/6UgEKYpuzuWLxLktBSFu6z7cSh4q5naaHoBaDBfOi0oKaqw", "content": "", "creation_timestamp": "2026-04-03T23:21:15.000000Z"}, {"uuid": "0570374e-1720-4e29-881d-6ba53fd18f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27834", "type": "published-proof-of-concept", "source": "Telegram/6UgEKYpuzuWLxLktBSFu6z7cSh4q5naaHoBaDBfOi0oKaqw", "content": "", "creation_timestamp": "2026-04-03T23:21:15.000000Z"}, {"uuid": "d35713c2-be22-4638-bc13-747d761599c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27835", "type": "published-proof-of-concept", "source": "https://github.com/wger-project/wger/security/advisories/GHSA-xf68-8hjw-7mpm", "content": "", "creation_timestamp": "2026-02-26T14:41:01.000000Z"}, {"uuid": "21a5a93a-4042-4238-9059-28ec9ab3b1e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27839", "type": "published-proof-of-concept", "source": "https://github.com/wger-project/wger/security/advisories/GHSA-g8gc-6c4h-jg86", "content": "", "creation_timestamp": "2026-02-26T14:40:50.000000Z"}, {"uuid": "b4ae705e-4754-4ca7-813c-35123f524c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27838", "type": "published-proof-of-concept", "source": "https://github.com/wger-project/wger/security/advisories/GHSA-42cr-w2gr-m54q", "content": "", "creation_timestamp": "2026-02-26T14:40:58.000000Z"}, {"uuid": "93b8dbde-c6f0-4fec-81aa-60afb0622eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27836", "type": "published-proof-of-concept", "source": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-w22q-m2fm-x9f4", "content": "", "creation_timestamp": "2026-02-27T12:36:41.000000Z"}, {"uuid": "085e6786-3463-4622-a852-e74981a7104c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27833", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-27833.yaml", "content": "", "creation_timestamp": "2026-06-15T03:37:36.000000Z"}, {"uuid": "038029e6-01ae-4251-ad6f-bafc6d87abf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30084", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with publicly available PoC repositories useful for vulnerability research and security analysis.\n\n1\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Backup & Migration \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/LucasM0ntes/POC-CVE-2026-1357\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows attackers to upload arbitrary files and achieve remote code execution without authentication.\nThe vulnerability chains two issues:\n\u2022 Crypto fail-open behavior\n\u2022 Path traversal vulnerability\nAttackers can upload a PHP web shell and execute arbitrary commands on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote Code Execution\n\u2022 Server compromise\n\u2022 Full WordPress takeover\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server \u2013 Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA vulnerability in rldns DNS server version 1.3 allows attackers to trigger a heap-based out-of-bounds read, leading to a denial-of-service condition.\nThis occurs during DNS request handling and can crash the server.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands via a WebSocket-reachable script.\nThe issue stems from unsafe Bash arithmetic evaluation inside the application logic.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Privileged access compromise\n\u2022 Enterprise remote-access platform risk\n\n4\ufe0f\u20e3 CVE-2026-25049\n\ud83c\udfaf n8n Workflow Automation \u2013 Git Node RCE\n\n\ud83d\udd17 Technical Write-up\nhttps://gist.github.com/alon710/f3522fe1631994e1a76ab218a2b4d685\n\n\ud83e\udde0 Overview\nA remote code execution vulnerability exists in the n8n Git node where malicious Git configuration values can trigger command execution.\nThe vulnerability occurs because untrusted data is interpreted as executable commands.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Workflow automation compromise\n\u2022 CVSS 9.4\n\n5\ufe0f\u20e3 CVE-2026-0590\n\ud83c\udfaf Online Product Reservation System \u2013 SQL Injection\n\n\ud83d\udd17 PoC Reference\nhttps://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_checkout_delete.php.md\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability exists in Online Product Reservation System 1.0 in the delete.php endpoint.\nManipulation of the POST parameter ID allows attackers to execute arbitrary SQL queries remotely.\n\n\u2699\ufe0f Impact\n\u2022 Database access\n\u2022 Data leakage\n\u2022 Potential system compromise\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:07.281186Z"}, {"uuid": "b63e101c-8654-4550-a25f-713f88162966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30149", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE Discovered \u2013 Weekly Report\nEvery week, new vulnerability research and exploit Proof-of-Concepts are published on GitHub by security researchers around the world.\nBelow are some notable CVE PoC repositories discovered this week, useful for vulnerability research, exploit analysis, and security education.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability affecting GNU inetutils telnetd allows attackers to bypass authentication and gain root shell access.\nThe exploit abuses the NEW_ENVIRON telnet option to inject crafted environment variables that result in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA memory safety vulnerability in rldns DNS server 1.3 allows attackers to trigger a heap out-of-bounds read, which may crash the server and cause denial-of-service conditions.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory corruption issue\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 Research / PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-accessible script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to manipulate HTTP request parsing and potentially bypass authentication mechanisms or hijack user sessions.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 SSRF / potential RCE scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nA vulnerability in Next.js Server Actions allows attackers to trigger remote code execution through insecure deserialization and prototype pollution in the React Server Components protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Why This Matters\nThese PoC repositories help security researchers and defenders:\n\u2022 Understand how modern vulnerabilities are exploited\n\u2022 Study exploit development techniques\n\u2022 Perform patch diff analysis\n\u2022 Improve defensive security strategies\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:06.869614Z"}, {"uuid": "e765d791-a58d-40d0-9b2a-13f2876df1d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30117", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent vulnerabilities with publicly available PoC repositories on GitHub that are useful for vulnerability research and exploit analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass \u2192 Root Access\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication and obtain a root shell.\nThe exploit abuses the NEW_ENVIRON telnet option and injects a crafted environment variable (USER=-f root) that results in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns version 1.3 can be triggered during DNS request handling, leading to memory access violations and denial-of-service.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability in BeyondTrust Remote Support / Privileged Remote Access allows remote attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-reachable script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote-access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA critical HTTP request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to bypass authentication, steal session tokens, and perform SSRF attacks.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 Remote code execution scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nAn RCE vulnerability in Next.js Server Actions caused by insecure deserialization and prototype pollution through the proto property in the RSC Flight protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:06.918606Z"}, {"uuid": "94aaae8c-a35d-4a95-8c67-2829c2b3304e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30084", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with publicly available PoC repositories useful for vulnerability research and security analysis.\n\n1\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Backup & Migration \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/LucasM0ntes/POC-CVE-2026-1357\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows attackers to upload arbitrary files and achieve remote code execution without authentication.\nThe vulnerability chains two issues:\n\u2022 Crypto fail-open behavior\n\u2022 Path traversal vulnerability\nAttackers can upload a PHP web shell and execute arbitrary commands on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote Code Execution\n\u2022 Server compromise\n\u2022 Full WordPress takeover\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server \u2013 Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA vulnerability in rldns DNS server version 1.3 allows attackers to trigger a heap-based out-of-bounds read, leading to a denial-of-service condition.\nThis occurs during DNS request handling and can crash the server.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands via a WebSocket-reachable script.\nThe issue stems from unsafe Bash arithmetic evaluation inside the application logic.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Privileged access compromise\n\u2022 Enterprise remote-access platform risk\n\n4\ufe0f\u20e3 CVE-2026-25049\n\ud83c\udfaf n8n Workflow Automation \u2013 Git Node RCE\n\n\ud83d\udd17 Technical Write-up\nhttps://gist.github.com/alon710/f3522fe1631994e1a76ab218a2b4d685\n\n\ud83e\udde0 Overview\nA remote code execution vulnerability exists in the n8n Git node where malicious Git configuration values can trigger command execution.\nThe vulnerability occurs because untrusted data is interpreted as executable commands.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Workflow automation compromise\n\u2022 CVSS 9.4\n\n5\ufe0f\u20e3 CVE-2026-0590\n\ud83c\udfaf Online Product Reservation System \u2013 SQL Injection\n\n\ud83d\udd17 PoC Reference\nhttps://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_checkout_delete.php.md\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability exists in Online Product Reservation System 1.0 in the delete.php endpoint.\nManipulation of the POST parameter ID allows attackers to execute arbitrary SQL queries remotely.\n\n\u2699\ufe0f Impact\n\u2022 Database access\n\u2022 Data leakage\n\u2022 Potential system compromise\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:24.008661Z"}, {"uuid": "c309df3b-2eb4-4860-960a-072519ef380d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30117", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent vulnerabilities with publicly available PoC repositories on GitHub that are useful for vulnerability research and exploit analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass \u2192 Root Access\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication and obtain a root shell.\nThe exploit abuses the NEW_ENVIRON telnet option and injects a crafted environment variable (USER=-f root) that results in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns version 1.3 can be triggered during DNS request handling, leading to memory access violations and denial-of-service.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability in BeyondTrust Remote Support / Privileged Remote Access allows remote attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-reachable script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote-access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA critical HTTP request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to bypass authentication, steal session tokens, and perform SSRF attacks.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 Remote code execution scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nAn RCE vulnerability in Next.js Server Actions caused by insecure deserialization and prototype pollution through the proto property in the RSC Flight protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:34.260304Z"}, {"uuid": "c5bc124d-b8bb-4eb4-866e-cde70a5efbed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30149", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE Discovered \u2013 Weekly Report\nEvery week, new vulnerability research and exploit Proof-of-Concepts are published on GitHub by security researchers around the world.\nBelow are some notable CVE PoC repositories discovered this week, useful for vulnerability research, exploit analysis, and security education.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability affecting GNU inetutils telnetd allows attackers to bypass authentication and gain root shell access.\nThe exploit abuses the NEW_ENVIRON telnet option to inject crafted environment variables that result in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA memory safety vulnerability in rldns DNS server 1.3 allows attackers to trigger a heap out-of-bounds read, which may crash the server and cause denial-of-service conditions.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory corruption issue\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 Research / PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-accessible script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to manipulate HTTP request parsing and potentially bypass authentication mechanisms or hijack user sessions.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 SSRF / potential RCE scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nA vulnerability in Next.js Server Actions allows attackers to trigger remote code execution through insecure deserialization and prototype pollution in the React Server Components protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Why This Matters\nThese PoC repositories help security researchers and defenders:\n\u2022 Understand how modern vulnerabilities are exploited\n\u2022 Study exploit development techniques\n\u2022 Perform patch diff analysis\n\u2022 Improve defensive security strategies\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:34.753636Z"}]}