{"uuid": "c46faa34-6fc8-4378-8760-c2c14c03681f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25755", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30322", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected for research and exploit analysis.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free (In-the-Wild)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/b1gchoi/CVE-2026-2441_POC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine allows attackers to achieve arbitrary code execution within the browser sandbox.\nThe PoC demonstrates memory corruption triggered via crafted CSS and layout processing.\n\n\u2699\ufe0f Impact\n\u2022 Browser sandbox RCE\n\u2022 Confirmed exploitation in the wild\n\u2022 Potential full exploit chain\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Plugin \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/cybertechajju/CVE-2026-1357-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows unauthenticated attackers to upload malicious files and execute code on the server.\n\n\u2699\ufe0f Impact\n\u2022 Unauthenticated remote code execution\n\u2022 Full WordPress site compromise\n\u2022 High severity (critical risk)\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA flaw in telnetd allows attackers to bypass authentication by injecting crafted environment variables using the NEW_ENVIRON option.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root shell access\n\u2022 Critical infrastructure exposure\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25755\n\ud83c\udfaf jsPDF \u2013 PDF Object Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md\n\n\ud83e\udde0 Overview\nA vulnerability in jsPDF allows attackers to inject arbitrary content into generated PDF files due to improper input sanitization.\n\n\u2699\ufe0f Impact\n\u2022 Malicious PDF injection\n\u2022 Security control bypass\n\u2022 Document-based attack vector\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-21509\n\ud83c\udfaf Microsoft Office \u2013 Security Feature Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/gavz/CVE-2026-21509-PoC\n\n\ud83e\udde0 Overview\nA crafted Office document can bypass certain security protections, enabling potential malicious payload delivery.\n\n\u2699\ufe0f Impact\n\u2022 Security feature bypass\n\u2022 Malicious document vector\n\u2022 Detection evasion scenarios\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:05.404600Z"}