Skip to content
#

pre-auth-rce

Star

Here are 2 public repositories matching this topic...

devploit / php2shell

Star 295

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

php exploit apache penetration-testing poc rce bug-bounty php-security cve mod-php red-team security-research exploit-development vulnerability-research heap-exploitation php-exploit pre-auth-rce session-upload-progress cve-2026-109618 cve-2026-109619
  • Updated Oct 30, 2026
  • Python

keraattin / CVE-2026-39987

Star 1

CVE-2026-39987: Marimo Python Notebook Pre-Auth RCE (CVSS 9.3). Python & Nmap NSE detection scripts. Missing authentication on /terminal/ws WebSocket endpoint gives attackers a full PTY shell without any credentials. Exploited in the wild within 10 hours of disclosure. Fixed in Marimo 0.23.0.

websocket cybersecurity vulnerability-detection python-notebook nmap-scripts remote-code-execution nse-scripts marimo cve-2026-39987 pre-auth-rce
  • Updated Apr 15, 2026
  • Python

Add this topic to your repo

To associate your repository with the pre-auth-rce topic, visit your repo's landing page and select "manage topics."

Learn more