Offensive Security & Exploits

Weaponized exploit code, coordinated disclosures, and Metasploit modules.

Vulnerability Disclosures

Sorted by severity. Each CVE links to the official source.
CVE / Severity	Writeup
CVE-2026-34235pjprojectCritical	Heap OOB read in VP9 RTP unpacketizer
CVE-2026-35330strongSwanCritical	Pre-auth heap overflow in EAP-SIM/AKA parser
CVE-2026-40577Release notessimple-gitCritical	Argument injection via core.sshCommand
CVE-2026-44849PortainerCritical	Swarm service API bypasses endpoint security settings
CVE-2026-45631DokployCritical	Pre-auth admin takeover via hardcoded auth secret
CVE-2026-49950Xinference / XoscarCriticalCVSS 4.0 · 9.3	Unauthenticated actor-transport remote code execution
CVE-2026-23457Linux kernelHigh	Content-Length truncation in SIP conntrack helper
CVE-2026-31393Linux kernelHigh	L2CAP info response OOB read
CVE-2026-35333strongSwanHigh	Pre-auth infinite loop in RADIUS DAE handler
CVE-2026-42533NGINXHighCVSS 3.1 · 8.1	Heap overflow via non-cacheable variable re-evaluation in rewrite
CVE-2026-42590GotenbergHigh	ExifTool group-prefix blocklist bypass
CVE-2026-43062Linux kernelHigh	L2CAP ECRED reconfiguration type confusion
CVE-2026-43994coturnHigh	Pre-auth stack overflow in OAuth token decoder
CVE-2026-50338Spring Cloud AzureHigh	B2C resource-server cross-issuer auth bypass
CVE-2026-73068ToolJetMediumCVSS 3.1 · 5.5	Cross-tenant TooljetDB access via unvalidated organizationId