#poc · Elektrine

· 4d ago

Hello, Mastodon! 👋 We're a small research lab. We build proofs of concept (PoCs) to find out whether an idea really works, and we love exploring curious, exciting things. We're really glad to be here, and we'd love to meet people and build connections around the world. — nDot.io #introduction #PoC #prototyping #research

0

1

0

Daily CyberSecurity @DailyCyberSecurity@infosec.exchange

· 1mo ago

A public PoC exploit, cups2root, chains a CUPS privilege escalation to take lpadmin users to root. No CVE or patch yet. See the mechanism and mitigations. #cups2root #CUPS #PrivilegeEscalation #LinuxSecurity #ZeroDay #lpadmin #PoC #RootExploit

cups2root: Public PoC Exploit Escalates lpadmin to Root on CUPS

securityonline.info

cups2root: Public PoC Exploit Escalates lpadmin to Root on CUPS

A public PoC exploit, cups2root, chains a CUPS privilege escalation to take lpadmin users to root. No CVE or patch yet. See the mechanism and mitigations.

0

1

0

Daily CyberSecurity @DailyCyberSecurity@infosec.exchange

· 2mo ago

A public PoC exploit targets CVE-2026-72137, a CVSS 9.8 Linux kernel double-free that enables root privilege escalation. Patch now. #CVE202672137 #LinuxKernel #PrivilegeEscalation #PoC #xfrm #InfoSec

CVE-2026-72137 (CVSS 9.8): Linux Kernel Flaw Enables Root Privilege Escalation, PoC Public

securityonline.info

CVE-2026-72137 (CVSS 9.8): Linux Kernel Flaw Enables Root Privilege Escalation, PoC Public

A public PoC exploit targets CVE-2026-72137, a CVSS 9.8 Linux kernel double-free that enables root privilege escalation. Patch now.

0

Daily CyberSecurity @DailyCyberSecurity@infosec.exchange

· 3mo ago

A public PoC now targets CVE-2026-66373, a Redis RCE double-free via RESTORE. See affected versions and upgrade to Redis 8.8.0 now. #Redis #RedisRCE #CVE202666373 #RCE #DoubleFree #PoC #RESTORE #Cybersecurity

CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed

securityonline.info

CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed

A public PoC now targets CVE-2026-66373, a Redis RCE double-free via RESTORE. See affected versions and upgrade to Redis 8.8.0 now.

0

Daily CyberSecurity @DailyCyberSecurity@infosec.exchange

· 3mo ago

A public PoC now details CVE-2026-42533, an NGINX heap overflow with an ASLR bypass and possible RCE. Upgrade to NGINX 1.31.3 or 1.30.4 now. #NGINX #CVE202642533 #RCE #HeapOverflow #ASLRBypass #NGINXPlus #PoC #Cybersecurity

CVE-2026-42533: NGINX Heap Overflow Enables RCE and ASLR Bypass, Public PoC Released

securityonline.info

CVE-2026-42533: NGINX Heap Overflow Enables RCE and ASLR Bypass, Public PoC Released

A public PoC now details CVE-2026-42533, an NGINX heap overflow with an ASLR bypass and possible RCE. Upgrade to NGINX 1.31.3 or 1.30.4 now.

0

Daily CyberSecurity @DailyCyberSecurity@infosec.exchange

· 3mo ago

A public PoC now targets CVE-2026-61511, a vBulletin preauth RCE via runMaths eval. Patch to vBulletin 6.2.2 to block remote code execution. #vBulletin #CVE202661511 #RCE #PreauthRCE #RemoteCodeExecution #PoC #WebSecurity #Cybersecurity

CVE-2026-61511: vBulletin Preauth RCE with Public PoC Disclosed

securityonline.info

CVE-2026-61511: vBulletin Preauth RCE with Public PoC Disclosed

A public PoC now targets CVE-2026-61511, a vBulletin preauth RCE via runMaths eval. Patch to vBulletin 6.2.2 to block remote code execution.

0

Daily CyberSecurity @DailyCyberSecurity@infosec.exchange

· 3mo ago

CVE-2026-49176 is a Windows WalletService elevation of privilege flaw. Full details and a public PoC exploit are out, so patch Windows now. #CVE202649176 #WalletService #Windows #PrivilegeEscalation #EoP #PoC #Microsoft

CVE-2026-49176 Windows WalletService Elevation of Privilege Flaw Gets Public PoC Exploit

securityonline.info

CVE-2026-49176 Windows WalletService Elevation of Privilege Flaw Gets Public PoC Exploit

CVE-2026-49176 is a Windows WalletService elevation of privilege flaw. Full details and a public PoC exploit are out, so patch Windows now.

0

Sam Stepanyan

🐘 @securestep9@infosec.exchange

· 3mo ago

#Windows: if you haven't patched your MS Windows estate with July Patch Tuesday updates, now it's time to do it! #CertiGhost CVE-2026-54121 vulnerability allows an unprivileged user on your network to fully compromise the Active Directory and the Proof-of-Cocept (#POC) is out: 👇

thehackernews.com

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

4

0

2

0

Daily CyberSecurity @DailyCyberSecurity@infosec.exchange

· 3mo ago

Researchers publicly disclosed a Knot Resolver RCE flaw and PoC exploit code. The DNS-over-QUIC heap overflow hits 6.3.0; update to 6.4.1 now. #KnotResolver #DNSoverQUIC #RCE #HeapOverflow #PoC #DNSSecurity

Public Exploit Code Released for Knot Resolver DNS-over-QUIC Remote Code Execution Flaw

securityonline.info

Public Exploit Code Released for Knot Resolver DNS-over-QUIC Remote Code Execution Flaw

Researchers publicly disclosed a Knot Resolver RCE flaw and PoC exploit code. The DNS-over-QUIC heap overflow hits 6.3.0; update to 6.4.1 now.

0

Daily CyberSecurity @DailyCyberSecurity@infosec.exchange

· 3mo ago

A fastjson RCE hits versions 1.2.68 to 1.2.83 under stock defaults. Details and public PoC code are out, so enable SafeMode or move to fastjson2. #fastjson #RCE #Java #SpringBoot #Vulnerability #PoC #Cybersecurity

securityonline.info

0

Daily CyberSecurity @DailyCyberSecurity@infosec.exchange

· 3mo ago

Gitea vulnerability CVE-2026-58443 (CVSS 9.6) lets public-only tokens write to private repos. Details and PoC code are public. Update to v1.27.0. #Gitea #CVE202658443 #DevSecOps #PoC #InfoSec

CVE-2026-58443: Gitea Flaw (CVSS 9.6) Details and PoC Exploit Code Publicly Disclosed

securityonline.info

CVE-2026-58443: Gitea Flaw (CVSS 9.6) Details and PoC Exploit Code Publicly Disclosed

Gitea vulnerability CVE-2026-58443 (CVSS 9.6) lets public-only tokens write to private repos. Details and PoC code are public. Update to v1.27.0.

0

1

0

The Whore of Blahbylon @The_Whore_of_Blahbylon@mastodon.social

· 3mo ago

Being black in America. #RacismAmericanStyle #Racism #America #POC #BlackMastodon #HateCrime

135

5

67

1

Daily CyberSecurity @DailyCyberSecurity@infosec.exchange

· 4mo ago

OPNsense root RCE flaws are public with PoC code. CVE-2026-57155 (9.9) chains an arbitrary file write to root. Patch 26.1.11 or 26.4.1p1 now. #OPNsense #RootRCE #RCE #FirewallSecurity #CyberSecurity #Vulnerability #InfoSec #PoC

OPNsense Root RCE Flaw CVE-2026-57155 (CVSS 9.9): Details and PoC Publicly Disclosed

securityonline.info

OPNsense Root RCE Flaw CVE-2026-57155 (CVSS 9.9): Details and PoC Publicly Disclosed

OPNsense root RCE flaws are public with PoC code. CVE-2026-57155 (9.9) chains an arbitrary file write to root. Patch 26.1.11 or 26.4.1p1 now.

0

Ryan Aw @ryanaw.photos@bsky.brid.gy

· 6mo ago

Growing up, I never saw anyone like me. Let alone climbing rocks, crawling under glaciers, & embarking on crazy expeditions Despite my fear of being perceived, I’ve tried to show my face more to prove that the #outdoors is for everyone like me - #Asians, #immigrants, #POC #AANHPIHeritageMonth

0

Daily CyberSecurity @DailyCyberSecurity@infosec.exchange

· 4mo ago

HawkTrace publicly disclosed Microsoft Exchange vulnerability CVE-2026-45504 with PoC exploit code. The SSRF flaw reads arbitrary files. Patch now. #MicrosoftExchange #CVE202645504 #SSRF #Cybersecurity #PoC #Infosec

Microsoft Exchange Vulnerability CVE-2026-45504 Gets Public PoC Exploit

securityonline.info

Microsoft Exchange Vulnerability CVE-2026-45504 Gets Public PoC Exploit

HawkTrace publicly disclosed Microsoft Exchange vulnerability CVE-2026-45504 with PoC exploit code. The SSRF flaw reads arbitrary files. Patch now.

0

1

0

Daily CyberSecurity @DailyCyberSecurity@infosec.exchange

· 4mo ago

Researchers publicly disclosed a libssh2 vulnerability, CVE-2026-58050, with PoC code. A malicious SSH server can corrupt a client's heap. Patch now. #libssh2 #CVE202658050 #SSH #HeapOverflow #PoC #Cybersecurity #Infosec

libssh2 Vulnerability CVE-2026-58050 Gets Public PoC Exploit

securityonline.info

libssh2 Vulnerability CVE-2026-58050 Gets Public PoC Exploit

Researchers publicly disclosed a libssh2 vulnerability, CVE-2026-58050, with PoC code. A malicious SSH server can corrupt a client's heap. Patch now.

0

Kagan MacTane (he/him) @kagan@wandering.shop

· 6mo ago

Reminder: You don't get to claim the title of "ally". It's something bestowed (or not) by the people you are *trying to* ally with. Ally is a verb, not a noun. It's something you *do*, and have to keep repeating, for it to count. And only the people you're trying to help get to decide whether you succeeded. #ally #progressive #lgbtq #lgbtqia #disabled #disability #advocacy #neurodivergent #PoC #minority #feminism

12

1

20

0