b63

PoC and verification material for CVE-2023-46604 (Apache ActiveMQ OpenWire marshaller RCE)

PoC and verification material for CVE-2026-115560 (PHP session serializer confusion via session.upload_progress -> object injection -> RCE)

CVE-2026-75650 (StyleSmuggler): unauthenticated RCE via template injection in Magento Open Source / Adobe Commerce 2.4.4–2.4.9 — b63 showcase, lab-verified with patched-build negative test

CVE-2026-33186 (grpc-go): authorization bypass via a slash-less HTTP/2 :path -- b63 showcase, lab-verified with patched and config-leg negatives

PoC and verification material for CVE-2026-96652 (Plex Media Server timeline SSRF, owner-token disclosure chain)

PoC and verification material for CVE-2026-109618 (PHP OOM bailout state corruption)

CVE-2026-20131 (Cisco FMC): pre-auth Java deserialization to root — VERIFIED-AT-PRIMITIVE showcase artifact (rebuilt twins; appliance not executed, entitlement-gated)

CVE-2026-60004 (Gitea): unauth RCE via diffpatch add/add collision -> live git hook in bare temp clone (KEV) — b63 showcase, lab-verified with patched + unaffected negatives

PoC and verification material for CVE-2024-36401 (GeoServer OGC filter evaluation RCE)

PoC and verification material for CVE-2026-109619 (PHP stale worker-global state)

PoC and verification material for CVE-2026-42945 (CWE-122 heap overflow in ngx_http_rewrite_module -> attacker-shaped cleanup hijack -> system() RCE in the ASLR-off worker; patched-twin negative + 5/5 reliability captured in the shipped lab)

PoC and verification material for CVE-2026-63077 (JetBrains TeamCity agent-polling deserialization RCE)

CVE-2026-105192 (LMCache): pre-auth pickle deserialization RCE over the unauth ZMQ transport (single frame) — b63 showcase, lab-verified with patched-build negative + reliability/matrix evidence