PoC Archive PoC Archive

tag

Haxcms

HAXcms Node.js Private Key Disclosure via Broken HMAC (CVE-2026-46395)
CVE-2026-46395 web Patched
CVE-2026-46395webCRITICAL 9.8Patched2026-07-05HAXcms Git.php OS Command Injection (CVE-2026-46394)
CVE-2026-46394 web Patched
CVE-2026-46394webHIGH 7.2Patched2026-07-05@haxtheweb/open-apis Credential Exposure via SSRF in cacheAddress Endpoint (CVE-2026-46391)
CVE-2026-46391 (GHSA-4fg7-f244-3j49) web Unverified
CVE-2026-46391webHIGHUnverified2026-07-05