https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:24:33 +0000 https://vulnerability.circl.lu/sighting/971c18fb-af2d-40e0-82f1-7d6f1580718c/export {"uuid": "971c18fb-af2d-40e0-82f1-7d6f1580718c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25763", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17138", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:11.298953Z"} {"uuid": "971c18fb-af2d-40e0-82f1-7d6f1580718c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25763", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17138", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:11.298953Z"} https://vulnerability.circl.lu/sighting/971c18fb-af2d-40e0-82f1-7d6f1580718c/export Fri, 28 Aug 2026 00:00:11 +0000 https://vulnerability.circl.lu/sighting/f28c70ae-0b69-43e3-82f2-5fe1ee0270cf/export {"uuid": "f28c70ae-0b69-43e3-82f2-5fe1ee0270cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25763", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17138", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:05.306702Z"} {"uuid": "f28c70ae-0b69-43e3-82f2-5fe1ee0270cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25763", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17138", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:05.306702Z"} https://vulnerability.circl.lu/sighting/f28c70ae-0b69-43e3-82f2-5fe1ee0270cf/export Thu, 27 Aug 2026 20:00:05 +0000 https://vulnerability.circl.lu/sighting/f3824018-fd42-429b-8b04-8f9c2ceaf996/export {"uuid": "f3824018-fd42-429b-8b04-8f9c2ceaf996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25763", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30707", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:04.667093Z"} {"uuid": "f3824018-fd42-429b-8b04-8f9c2ceaf996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25763", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30707", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:04.667093Z"} https://vulnerability.circl.lu/sighting/f3824018-fd42-429b-8b04-8f9c2ceaf996/export Sat, 15 Aug 2026 11:00:04 +0000 https://vulnerability.circl.lu/sighting/df6c1b77-a842-4913-807f-df6a15621538/export {"uuid": "df6c1b77-a842-4913-807f-df6a15621538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25763", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30706", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:04.138355Z"} {"uuid": "df6c1b77-a842-4913-807f-df6a15621538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25763", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30706", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:04.138355Z"} https://vulnerability.circl.lu/sighting/df6c1b77-a842-4913-807f-df6a15621538/export Sat, 15 Aug 2026 11:00:04 +0000 https://vulnerability.circl.lu/sighting/c7cc772e-e24b-4d09-b10e-1686d573ea15/export {"uuid": "c7cc772e-e24b-4d09-b10e-1686d573ea15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25763", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3meb4bemilo2h", "content": "", "creation_timestamp": "2026-02-07T09:30:33.732058Z"} {"uuid": "c7cc772e-e24b-4d09-b10e-1686d573ea15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25763", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3meb4bemilo2h", "content": "", "creation_timestamp": "2026-02-07T09:30:33.732058Z"} https://vulnerability.circl.lu/sighting/c7cc772e-e24b-4d09-b10e-1686d573ea15/export Sat, 07 Feb 2026 09:30:33 +0000 https://vulnerability.circl.lu/sighting/f4b72f23-c731-4cbf-8b7f-24ae88ac2d2a/export {"uuid": "f4b72f23-c731-4cbf-8b7f-24ae88ac2d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25763", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116028645772242625", "content": "", "creation_timestamp": "2026-02-07T09:30:31.872063Z"} {"uuid": "f4b72f23-c731-4cbf-8b7f-24ae88ac2d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25763", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116028645772242625", "content": "", "creation_timestamp": "2026-02-07T09:30:31.872063Z"} https://vulnerability.circl.lu/sighting/f4b72f23-c731-4cbf-8b7f-24ae88ac2d2a/export Sat, 07 Feb 2026 09:30:31 +0000