Publicly Disclosed
PoC Exploits

đź”´ Alway take caution when working with PoC Exploits đź”´

Discovered 2 minutes ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Discovered 21 minutes ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Discovered 27 minutes ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Discovered 45 minutes ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Discovered 52 minutes ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Discovered 1 hour ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Discovered 2 hours ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-111943

Go Standard LibraryCrypto/x509
Certificate Trust Issue in Go Affecting Security

Certain implementations of Go rely on system root certificates, but in some scenarios, updates to the system trust stores may not occur automatically. This oversight can expose the application to security risks, as known intermediate certificates that are deemed untrustworthy may still be used. T...

Discovered 4 hours ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Discovered 5 hours ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2020-1712

[unknown]Systemd7.8HIGH
Heap Use-After-Free Vulnerability in systemd Affects Multiple Versions

A vulnerability in systemd allows local unprivileged attackers to exploit a heap use-after-free condition while processing asynchronous Polkit queries via dbus messages. By sending specially crafted dbus messages, attackers can potentially crash systemd services or escalate their privileges, enab...

PoC for CVE-2026-78392

WordPressLink Library
Stored Cross-Site Scripting Vulnerability in Link Library Plugin by...

The Link Library plugin for WordPress, prior to version 7.9.6, is vulnerable to Stored Cross-Site Scripting (XSS) attacks. This flaw arises from the plugin's failure to properly sanitize and escape a link field when generating a link preview. As a result, users with Contributor roles and higher c...

PoC for CVE-2026-88849

WordPressMasterstudy Lms WordPr...
Insecure User Role Management in MasterStudy LMS WordPress Plugin

The MasterStudy LMS WordPress Plugin prior to version 3.7.55 suffers from an improper authentication flaw that enables unauthorized users with the Instructor role to bypass user relationship checks during the student-enrolment process. This vulnerability allows them to alter the first name, last ...

PoC for CVE-2026-111971

WordPressPhoto Engine (media Or...
Stored Cross-Site Scripting in Photo Engine Plugin for WordPress by...

The Photo Engine plugin for WordPress, specifically in versions prior to 6.5.8, lacks proper sanitization and escaping of collection and gallery names. This oversight allows authenticated users with author-level privileges and above to execute Stored Cross-Site Scripting attacks. Such vulnerabili...

PoC for CVE-2026-97328

WordPressWebp Express
Cross-Site Scripting Vulnerability in WebP Express Plugin for WordP...

The WebP Express plugin for WordPress, prior to version 0.25.16, contains a significant vulnerability that allows unauthenticated users to inject malicious scripts into web pages. This occurs due to insufficient sanitization of input sent to the HTML parser, particularly when the non-default imag...

PoC for CVE-2026-111972

WordPressPhoto Engine (media Or...
Arbitrary Media Deletion Vulnerability in Photo Engine Plugin by Wo...

The Photo Engine WordPress plugin is affected by a vulnerability that allows authenticated users with author privileges and above to delete arbitrary media attachments. This occurs because the plugin fails to properly verify whether the user is authorized to manipulate the targeted media files. C...

PoC for CVE-2026-109927

WordPressHipaa Forms
Privilege Escalation Flaw in HIPAA Forms Plugin for WordPress

The HIPAA Forms plugin for WordPress, prior to version 3.3.2, contains a vulnerability that allows users with certain custom roles to elevate their privileges. The plugin fails to implement adequate capability checks when processing requests to rebuild custom user roles. As a result, an attacker ...

PoC for CVE-2026-109931

WordPressInfility Global
Authorization Bypass in Infility Global WordPress Plugin

The Infility Global WordPress plugin prior to version 2.16.25 does not implement necessary authorization checks for an AJAX action accessible by unauthenticated users. This security flaw permits any visitor to incorrectly modify the machine-translation configuration settings associated with the p...

PoC for CVE-2026-111958

WordPressRoyal Mcp
Authentication Flaw in Royal MCP WordPress Plugin Exposes User Acco...

The Royal MCP WordPress plugin before version 1.5.7 is susceptible to an authentication bypass due to improper handling of preview-link tokens. This weakness allows an attacker, who acquires a legitimate token, to gain unauthorized access as the original user, typically an administrator, across t...

PoC for CVE-2026-110011

WordPressMb Custom Post Types &...
Export Feature Vulnerability in MB Custom Post Types & Custom Taxon...

The MB Custom Post Types & Custom Taxonomies plugin for WordPress prior to version 2.12.3 contains a vulnerability in its export feature, which fails to adequately enforce capability checks. This oversight allows users, even those with minimal roles such as Contributor, to gain unauthorized acces...

PoC for CVE-2026-110010

WordPressMb Custom Post Types &...
Data Migration Vulnerability in MB Custom Post Types & Custom Taxon...

The MB Custom Post Types & Custom Taxonomies plugin for WordPress prior to version 2.12.3 has a weakness that permits an unauthenticated user to trigger a legacy data migration process. This flaw allows them to revert custom post type or taxonomy configurations back to their original state follow...

PoC for CVE-2026-109987

WordPressPixelyoursite
Cross-Site Scripting Vulnerability in PixelYourSite WordPress Plugin

The PixelYourSite WordPress plugin and its Pro version contain a security flaw that fails to sanitize and escape cookie values prior to their display in the page output. This vulnerability can be exploited on websites utilizing full-page caching, as it allows unauthorized attackers to inject Cros...

PoC for CVE-2026-103234

WordPressWP Ultimate Review
Arbitrary Code Execution in WP Ultimate Review Plugin by WordPress

The WP Ultimate Review plugin prior to version 2.4.5 for WordPress contains a vulnerability that fails to adequately neutralize shortcodes in various review fields submitted through its public review form. This oversight allows unauthenticated users to inject and execute arbitrary shortcodes when...

PoC for CVE-2026-100142

WordPressFluentcart A New Era O...
Address Disclosure Vulnerability in FluentCart eCommerce Plugin for...

The FluentCart eCommerce plugin for WordPress, in versions prior to 2.2.0, is susceptible to an improper authentication vulnerability. This flaw allows unauthenticated attackers to select any stored customer address during the checkout process. Consequently, malicious actors can attach a victim's...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Discovered 6 hours ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109619

PHP GroupPHP9.2CRITICAL
PHP Remote Code Execution Vulnerability in PHP Products

A vulnerability in PHP allows for the possibility of remote code execution due to improper management of global state that can reference freed memory. In certain scenarios, the global state retains stale information from previous requests, potentially enabling an attacker to execute arbitrary cod...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Discovered 7 hours ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...