CVE Category

Analysis of the most useful vulnerabilities: PoCs, tricks for adapting them to your labs, and notes for avoiding breaking everything in production.

blog
4+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit
CVE Category -

CVE blog

Filters

  • CVE-2026-20079: Cisco FMC Auth Bypass, KEV Active
    cve

    CVE-2026-20079: Cisco FMC Auth Bypass, KEV Active

    CVE-2026-20079: Critical authentication bypass (CVSS 10.0) in Cisco Secure FMC, KEV CISA, and exploited by Sandworm and Qilin. Root cause, IOC, remediation.

    Discover more Discover more
  • CVE-2026-82329: PoC Authentication Bypass in JFrog Artifactory
    cve

    CVE-2026-82329: PoC Authentication Bypass in JFrog Artifactory

    CVE-2026-82329: Authentication bypass in JFrog Artifactory via empty join key. Root cause, exploit chain, working PoC, detection, and remediation.

    Discover more Discover more
  • CVE-2026-31431 (Copy Fail): Root on Any Linux in 732 Bytes
    cve

    CVE-2026-31431 (Copy Fail): Root on Any Linux in 732 Bytes

    CVE-2026-31431 Technical Analysis: How the algif_aead bug works, AF_ALG + splice() chain, practical step-by-step PoC. Every Linux since 2017 is vulnerable.

    Discover more Discover more
  • noPac Active Directory: Standard user to Domain Admin exploit
    cve

    noPac Active Directory: Standard user to Domain Admin exploit

    noPac on Active Directory: Exploits CVE-2021-42278 and CVE-2021-42287 to impersonate a Domain Controller, perform DCSync, and gain Domain Admin

    Discover more Discover more