CVE Listesine Dön
CVE-2026-1114

Improper access control in Lollms

CVSS Skor

9.8

EPSS İhtimal

%0.5

Risk Skoru

0.1

Yayın

6 ay önce

Public Exploits · GitHub ve Metasploit Intelligence

Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.

Brotli decoder CVE-2026-111497 Mitigation work (Ansible Role)

Public PoCKaynak güncellemesi: 27.10.2026 00:12:00

BigFix YARA-X discovery Fixlets and shared Analysis for Node.js Brotli CVE-2026-111497 on Windows, Linux and macOS.

Public PoCKaynak güncellemesi: 26.10.2026 22:04:19

PoC / exploit archive for CVE-2026-111497

Public PoCKaynak güncellemesi: 26.10.2026 16:48:01

Cross-platform scanner that finds .NET apps, runtimes and Azure App Service / Functions deployments exposed to CVE-2026-111497 (brotli decoder)

Public PoCKaynak güncellemesi: 26.10.2026 14:09:36

Node2Shell / HTTP2Shell (CVE-2026-111497) exposure-audit kit — read-only scanner + agent prompt pack. Portable: macOS bash 3.2 + Linux. Mutation-tested regression suite, CI on 3 platforms.

Public PoCKaynak güncellemesi: 26.10.2026 12:11:16

tikarammardi/CVE-2026-111497

Public PoCKaynak güncellemesi: 26.10.2026 11:57:57

CVE-2026-111497

Public PoCKaynak güncellemesi: 26.10.2026 21:06:48

CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)

Public PoCKaynak güncellemesi: 27.10.2026 01:50:11

PoC for CVE-2026-111497, a buffer overflow in Google Brotli 1.0.3–1.2.0 that may cause memory corruption, data disclosure, DoS, or RCE when processing crafted compressed data.

Public PoCKaynak güncellemesi: 25.10.2026 20:00:18

Non-invasive Python detector for CVE-2026-111497 with Brotli/Node.js version checks, JSON inventories, and CI-ready reports.

Public PoCKaynak güncellemesi: 25.10.2026 18:43:51

https://huntr.com/bounties/608b2a3b-2225-438e-9e61-ffbfdec2ed89

Exploit referansı

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-1114"