{"uuid": "e50c5485-8d7e-44ce-9b58-254dd86aca8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0590", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30084", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with publicly available PoC repositories useful for vulnerability research and security analysis.\n\n1\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Backup & Migration \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/LucasM0ntes/POC-CVE-2026-1357\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows attackers to upload arbitrary files and achieve remote code execution without authentication.\nThe vulnerability chains two issues:\n\u2022 Crypto fail-open behavior\n\u2022 Path traversal vulnerability\nAttackers can upload a PHP web shell and execute arbitrary commands on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote Code Execution\n\u2022 Server compromise\n\u2022 Full WordPress takeover\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server \u2013 Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA vulnerability in rldns DNS server version 1.3 allows attackers to trigger a heap-based out-of-bounds read, leading to a denial-of-service condition.\nThis occurs during DNS request handling and can crash the server.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands via a WebSocket-reachable script.\nThe issue stems from unsafe Bash arithmetic evaluation inside the application logic.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Privileged access compromise\n\u2022 Enterprise remote-access platform risk\n\n4\ufe0f\u20e3 CVE-2026-25049\n\ud83c\udfaf n8n Workflow Automation \u2013 Git Node RCE\n\n\ud83d\udd17 Technical Write-up\nhttps://gist.github.com/alon710/f3522fe1631994e1a76ab218a2b4d685\n\n\ud83e\udde0 Overview\nA remote code execution vulnerability exists in the n8n Git node where malicious Git configuration values can trigger command execution.\nThe vulnerability occurs because untrusted data is interpreted as executable commands.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Workflow automation compromise\n\u2022 CVSS 9.4\n\n5\ufe0f\u20e3 CVE-2026-0590\n\ud83c\udfaf Online Product Reservation System \u2013 SQL Injection\n\n\ud83d\udd17 PoC Reference\nhttps://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_checkout_delete.php.md\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability exists in Online Product Reservation System 1.0 in the delete.php endpoint.\nManipulation of the POST parameter ID allows attackers to execute arbitrary SQL queries remotely.\n\n\u2699\ufe0f Impact\n\u2022 Database access\n\u2022 Data leakage\n\u2022 Potential system compromise\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:07.502066Z"}