Skip to content
View fixedbyreboot's full-sized avatar
2 followers · 1 following

Block or report fixedbyreboot

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse

Popular repositories Loading

  1. CVE-2026-123488-POC CVE-2026-123488-POC Public

    POC exploit for CVE-2026-123488 - unauthenticated SQL injection vulnerability in Craft CMS (MySQL/MariaDB backend). Admin takeover.

    Python 1

  2. CVE-2026-104711-POC CVE-2026-104711-POC Public

    POC exploit for CVE-2026-104711 - OGNL injection RCE in Apache Struts legacy REST action mapper (S2-075). Vulnerable vs fixed verification included.

    Python

  3. CVE-2026-114656-POC CVE-2026-114656-POC Public

    POC for CVE-2026-114656 - Traefik mTLS client certificate bypass via negated Host matchers forcing default TLS options. Vulnerable vs fixed differential included.

    Python

  4. CVE-2026-68524-POC CVE-2026-68524-POC Public

    POC exploit for CVE-2026-68524 - preauth RCE in Apache OFBiz via request body shadowing the decorator location and file URI screen loading. Verified on 24.09.07, control on 24.09.08.

    Python

  5. CVE-2026-90436-POC CVE-2026-90436-POC Public

    POC for CVE-2026-90436 - unauthenticated remote class instantiation in Apache Axis 1.x via SOAP fault exceptionName, bypassing configured auth handlers. EOL software, no fix exists.

    Python

  6. CVE-2026-92414-POC CVE-2026-92414-POC Public

    POC for CVE-2026-92414 - Apache Jackrabbit WebDAV preauth session hijack via derivable lock tokens. Verified against 2.22.4, control on fixed 2.22.5.

    Python