PoC Archive PoC Archive

tag

Secrets-Exfiltration

Critical
tj-actions/branch-names GitHub Actions Command Injection (CVE-2025-54416)
CVE-2025-54416· tj-actions/branch-names GitHub Action patched
Critical
MagicMirror² Unauthenticated SSRF via `/cors` Endpoint (CVE-2026-42281)
CVE-2026-42281· MagicMirror² patched