mürrez

deli kral

[mürrez @murrezsec]

Cumhurbaşkanlığı Kariyer Kapısı

https://t.co/Uqerl75u14
https://t.co/mHCeCi6fZN
https://t.co/DXu8kuA317
https://t.co/icNKT1ykSJ

#kariyerkapisi #KariyerKapısı #rte #hack #hacked #turkiye #GazzeAtesAltında #alibabacan #Filistin #bornova #FilistinYalnızDeğil #CANLI

[mürrez @murrezsec]

@buraksu42 DAGÜAEPROGKEROPĞGKAEORWPGKEOPW0RGKLEORS90GKEARS9O0GEKAR0GEARO0GEA ADAMSIN BURAK

[mürrez @murrezsec]

php2shell poc

3 CVE's
• CVE-2026-109618
• CVE-2026-109619
• CVE-2026-115560

Auto-LFI Discovery
SAPI Profiling (FPM, Apache, FrankenPHP)
OOM Fuzzing Calibration
Worker Pinning & Keep-Alive Pools

🔗 GitHub: https://t.co/dPAmb6bzuY

#CyberSecurity #SecOps #PHP2Shell #PHP #cve

[mürrez @murrezsec]

php2shell (CVE-2026-109618 / CVE-2026-109619) poc update.

Auto-LFI
SAPI Profiling
OOM Fuzzing Calibration
Worker Pinning
Fast-Path

repo'da kullanım için detayli bilgi var. iyi forumlar

https://t.co/dPAmb6bzuY

#PHP2Shell #Exploit #CyberSecurity #SecOps

[mürrez @murrezsec]

🚨 PHP2Shell — CVE-2026-109618

Investigating PHP2Shell? Explore the technical PoC, vulnerability details, and research notes on Pocbit.

🔗 https://t.co/tbnkFQuH8u

#PHP2Shell #CVE2026109618 #CyberSecurity #InfoSec #VulnerabilityResearch #PoC

[mürrez @murrezsec]

BUNU KİM YAPTI OLUM ADSPOGKAEW<4OP0*GKAWOP0*ÜFGKLAW*ÜFGLAW*FGLAW*ÜLFGAPW*ĞÜFGLPĞAWÜLFGPĞAEWLPĞEÜRFGLAEPWĞFGLÜPĞAEWGF

[mürrez @murrezsec]

🚨 CVE-2026-104736 | Critical (CVSS 9.8)

A critical unauthenticated PHP Object Injection vulnerability affects WordPress LearnPress versions ≤ 4.4.10 potentially leading to severe system compromise

🔗 PoC & technical details: https://t.co/0IXojOsuiL

#WordPress #CVE #InfoSec

[mürrez @murrezsec]

🚨 CVE-2026-111823 | Critical OAuth Vulnerability

A critical flaw in Mage OSS (≤ 0.9.80) may allow session creation when an unknown OAuth provider is encountered. Rated CVSS 9.8.

🔗 PoC: https://t.co/tox8OvG1mc

#CyberSecurity #CVE #InfoSec #PoC #VulnerabilityResearch

[mürrez @murrezsec]

🔐 CVE-2026-89079 — WordPress Theme My Login

Improper privilege management may allow unauthenticated attackers to change user passwords under specific multisite configurations.

🔎 PoC & technical analysis:
https://t.co/54mM6KdOKJ

#CVE #WordPress #CyberSecurity #InfoSec

[mürrez @murrezsec]

🔎 Need to check ULP credentials?

Explore Pocbit's ULP Checker — a tool for security research and credential analysis.

🔗 https://t.co/jT2sslhvpL

#CyberSecurity #InfoSec #OSINT #Pocbit #SecurityTools

[mürrez @murrezsec]

🚨 CVE-2026-97657 — Critical Account Takeover Vulnerability

Critical auth bypass in Abandoned Cart Pro for WooCommerce may enable account takeover.

🔬 PoC & technical details:
https://t.co/nIlMMGPYOO

#CVE #CyberSecurity #WordPress #WooCommerce #InfoSec #PoC

[mürrez @murrezsec]

babolimogopro

[mürrez @murrezsec]

🚨 CVE-2026-76268 | CVSS 9.8 Critical

A missing authentication flaw in Splunk Enterprise's Patroni REST API could allow unauthenticated attackers to execute arbitrary OS commands remotely.

🔗 PoC & technical details:
https://t.co/wXxG9IuWhz

#InfoSec #Splunk #CVE #RCE #PoC

[mürrez @murrezsec]

🚨 New PoC published on Pocbit!

🔍 CVE-2026-102428

Explore the technical details and proof of concept:

🔗 https://t.co/vJQ4wYalN9

#CyberSecurity #CVE #Exploit #PoC #InfoSec #VulnerabilityResearch #Pocbit

[mürrez @murrezsec]

🚨 CVE-2026-106445 | Critical RCE
A critical Remote Code Execution vulnerability in Handlebars.js affects versions 4.0.0–4.7.9 under specific configurations.

📊 CVSS 9.2

🔗 PoC & technical details: https://t.co/gjE68qgvpF

#CyberSecurity #CVE #RCE #NodeJS #InfoSec #PoC

[mürrez @murrezsec]

🚨 CVE-2026-107806 | Critical RCE
A critical authenticated Remote Code Execution vulnerability affects nginx-ui versions 2.3.8–2.4.x. Upgrade to 2.5.0 or later to mitigate the issue.

🔎 Technical details & PoC:
https://t.co/JSaL8O1KkO

#CyberSecurity #CVE #RCE #InfoSec #nginx

[mürrez @murrezsec]

🚨 CVE-2026-21589 — Critical Atlassian Data Center Vulnerability

Unauthenticated arbitrary file read affecting Jira, Confluence, Bitbucket, Bamboo, Crowd, Crucible & Fisheye.

🔗 https://t.co/B6Brck1Xl1

#CVE #CyberSecurity #Atlassian #Jira #Confluence #Bitbucket #InfoSec

[mürrez @murrezsec]

🚨 CVE-2026-105844 — Critical

A prototype pollution vulnerability in Payload CMS’s Import/Export plugin can lead to unauthenticated Remote Code Execution.

🔴 CVSS 9.3
🔗 https://t.co/0AUZU4b1M7

#CVE #PayloadCMS #RCE #CyberSecurity #InfoSec #Vulnerability

[mürrez @murrezsec]

🚨 CVE-2026-102782 — Critical

OrdaSoft Simple Membership < 7.4.0 is affected by an unauthenticated SQL injection via the checkLoginPass task.

🔴 CVSS 9.3
🛡️ Fixed in 7.4.0+
🔗 https://t.co/SE9Tt2SE4j

#CVE #CyberSecurity #Joomla #SQLi #InfoSec #Vulnerability

[mürrez @murrezsec]

l4 std test

[mürrez @murrezsec]

🚨 CVE-2026-82531 — Critical RCE in Smarty

Smarty template inheritance flaw allows arbitrary PHP code execution via forged SmartyNocache markers..

🔴 CVSS 4.0: 9.2 Critical
🛠️ Fixed: 4.5.8 / 5.8.5
🔗 PoC: https://t.co/SiiFVgUiqG

#CyberSecurity #Smarty #Exploit #PoC #InfoSec