Pinned Tweet
Cumhurbaşkanlığı Kariyer Kapısı
kariyerkapisi.cbiko.gov.tr/i…
zone-h.org/mirror/id/3504767…
mirror-h.org/zone/2824583/
archive.is/r0hAj
#kariyerkapisi #KariyerKapısı #rte #hack #hacked #turkiye #GazzeAtesAltında #alibabacan #Filistin #bornova #FilistinYalnızDeğil #CANLI
5
10
13
🚨 CVE-2026-88772 — Citrix NetScaler ADC/Gateway
DTLS memory overflow (UDP/443) → RCE/DoS. Active exploitation reported (CTX697096). Patch: 14.1-73.37+ / 13.1-64.23+.
📖 pocbit.org/pocs/cve-2026-887…
#CVE #Citrix #NetScaler #CyberSecurity #VPN #InfoSec
5
234
New PoC live — CVE-2026-100835 🔍
Edgeless Contrast (<1.16.0): remote attestation relay breaks aTLS identity (CWE-295). Manifest audit, version/K8s checks, Coordinator probe — no MITM in repo.
📖PoC: pocbit.org/pocs/cve-2026-100…
#CVE #CyberSecurity #PoC #InfoSec
1
3
108
New PoC live — CVE-2026-100740 🔍
D-Link DIR-895L (A1_102b07): L2TP Host Name AVP out-of-bounds write (UDP 1701). Fingerprint + lab trigger in repo.
🔗 pocbit.org/pocs/cve-2026-100…
#CVE #IoT #CyberSecurity #RedTeam #VulnerabilityResearch
1
2
8
351
New vulnerability analysis & PoC live! 🔍
Deep dive into CVE-2026-82901 mechanics, details, and mitigation:
💻 pocbit.org/pocs/cve-2026-829…
Feedback and reviews are always welcome.
#VulnerabilityResearch #CyberSecurity #RedTeam #Exploit #CVE
1
2
121
New vulnerability analysis & PoC live! 🔍
Deep dive into CVE-2026-97163 mechanics, details, and mitigation:
💻 pocbit.org/pocs/cve-2026-971…
Feedback and reviews are always welcome.
#VulnerabilityResearch #CyberSecurity #RedTeam #Exploit
2
2
139
New vulnerability analysis & PoC live! 🔍
Deep dive into CVE-2026-97161 mechanics, details, and mitigation:
💻 pocbit.org/pocs/cve-2026-971…
Feedback and reviews are always welcome.
#VulnerabilityResearch #CyberSecurity #RedTeam #Exploit
1
109
New PoC released! 🚀
Check out the analysis details and working exploit code for CVE-2026-97160:
🔗 pocbit.org/pocs/cve-2026-971…
#CyberSecurity #SecOps #InfoSec #CVE #PoC
3
113
New vulnerability analysis & PoC live! 🔍
Deep dive into CVE-2026-94132 mechanics, details, and mitigation:
💻 pocbit.org/pocs/cve-2026-941…
Feedback and reviews are always welcome.
#VulnerabilityResearch #CyberSecurity #RedTeam #Exploit
1
3
131
CVE-2026-94130 | joomlaboat YouTube Gallery for Joomla
Pre-auth SQL injection in video search/sort on:
/index.php?option=com_youtubegallery&...&yg_api=1
Affected 1.0.0–5.7.2 · Joomla CNA · patch 5.7.3
Write-up + Python check/sqli-probe
→ pocbit.org/pocs/cve-2026-941…
#CVE #Joomla
2
55
CVE-2026-13249 — Honeywell PD45 Industrial Printer
Unauth arbitrary file upload on HTTPS web admin (firmware F10.19.010040 → before F10.22.030745) → RCE. CVSS 9.8 Critical · fix: F10.22.030745
IoT/OT · Python exploit PoC
→ pocbit.org/pocs/cve-2026-132…
#CVE #IoT #OT #Honeywell
1
3
101
CVE-2026-18143 | Addify RFQ (woocommerce-request-a-quote) ≤2.9.2
Unauthenticated arbitrary upload: admin-ajax afrfq_submit_quote_via_popup uses move_uploaded_file() with raw client filename — no ext/MIME checks
PoC → pocbit.org/pocs/cve-2026-181…
#CVE #WordPress #WooCommerce
1
3
86
CVE-2026-14281 — WAWP (Automation Web Platform) WordPress ≤ 4.8.6
Unauth REST signup: wawp_custom_fields → update_user_meta with no allowlist → wp_capabilities = administrator. CVSS 9.8 Critical
pocbit.org/pocs/cve-2026-142…
#WordPress #CVE #Infosec
3
111
CVE-2026-89055 — Customer Reviews for WooCommerce (CusRev) ≤ 5.120.0
Missing auth on cr_local_forms_submit: arbitrary Media Library IDs in review media → files deleted when the review is purged. CVSS 9.1 Critical (CWE-862).
pocbit.org/pocs/cve-2026-890…
#WordPress #WooCommerce #CVE
2
92
CVE-2026-93399 — Bookly ≤ 28.2 unauthenticated IDOR
Public booking AJAX can leak any order’s bookly_order token → calendar data exposure & rollback of non-completed bookings. CVSS 9.1 Critical (CWE-639)
PoC : pocbit.org/pocs/cve-2026-933…
#WordPress #Bookly #CVE
2
95
Released PoC for CVE-2026-12227
Visual Composer Website Builder (WordPress 30,000+) ≤45.16.0 — unauth LFI through vcv-template
Scanner + exploit helpers in Python
github.com/murrez/CVE-2026-1…
#CVE #WordPress #Infosec #BugBounty #LFI
1
109
CVE-2026-19658 — Give Tributes ≤2.3.1: unauth PHP object injection (CWE-502, CVSS 9.8) on legacy Give donation forms when multi-recipient eCards are enabled.
POP in another plugin/theme needed for real impact.
github.com/murrez/CVE-2026-1…
#CVE #WordPress #GiveWP #AppSec
2
91
CVE-2026-13355 (CVSS 9.8) — Meta Box AIO ≤3.11.0 unauth admin chain: MB Frontend Submission post_content overwrite + mb_user_profile_register role=administrator
PoC: check/exploit, mass scan w/ mbfs vs mbup-only detection
github.com/murrez/CVE-2026-1…
#CVE #WordPress #Infosec
2
95
HP HPLIP Mass checker
10 CVE catalog, mass check (PAPPL :8000, hpssd :2207, CUPS :631), FOFA list helper, research exploit templates (IPP/PAPPL + hpssd).
Not a weaponized RCE drop — patch: HPLIP 3.26.6+
github.com/murrez/HP-HPLIP-M…
#HPLIP #PAPPL #InfoSec #CVE2026
3
98