{"vulnerability": "cve-2026-30951", "sightings": [{"uuid": "90deb12c-784e-4d23-9077-a852a94883e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30951", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhecqtuljb2h", "content": "", "creation_timestamp": "2026-03-18T20:20:08.905848Z"}, {"uuid": "c8d48056-658e-4971-95c2-685006ae7286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30951", "type": "seen", "source": "https://t.me/GithubRedTeam/78969", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-30951\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-05 17:37:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSequelize - ORM SQL Injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-05T18:00:04.000000Z"}, {"uuid": "7f3e2ab6-83dd-4f86-b5a3-79c64dc47fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30951", "type": "published-proof-of-concept", "source": "Telegram/FSLrga5GWrvpmeBVVaiQjjslIGqlG9dAkDvrcZ703Y3a2_k", "content": "", "creation_timestamp": "2026-04-06T03:00:06.000000Z"}, {"uuid": "6d9d2130-0df6-4980-beaf-3c20e3f4431c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-30951", "type": "published-proof-of-concept", "source": "https://github.com/sequelize/sequelize/security/advisories/GHSA-6457-6jrx-69cr", "content": "", "creation_timestamp": "2026-03-09T21:42:50.000000Z"}, {"uuid": "ff829795-9f37-47ba-865b-eab8bfb156d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30951", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30707", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:04.725437Z"}, {"uuid": "930c6d25-1415-420a-8132-aeaaf42c818a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30951", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30706", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:04.190104Z"}, {"uuid": "3741915d-f409-4b7f-aa19-3974248c5600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30951", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30706", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:37.548060Z"}, {"uuid": "eec40103-705c-4113-8b6b-098123e86a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30951", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30707", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:37.775429Z"}, {"uuid": "1a8888ff-d6cd-459a-bf67-6584daf9cb42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30951", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17138", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:11.250007Z"}, {"uuid": "42270cdc-a34f-45fc-87ae-d0eed0137b7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30951", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17138", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:05.265170Z"}]}