1dayexploit

ÂLIM by 1dayexploit

Automated analysis pipeline

ÂLIM is the automated analysis pipeline built by 1dayexploit. Pointed at a disclosed CVE in open-source software, it studies the vulnerability, rebuilds it in an isolated containerised lab, develops a proof-of-concept and validates that exploit against both vulnerable and patched builds. Every analysis it produces is reviewed by a human researcher before publication.

Automated vulnerability analysisContainerised exploit labsPatch validation
X @1dayexploitGitHubRSS

Published research - 81 entries

2026-09-25 CVE-2026-19949 CVE-2026-19949 Exploit: AIOWM Pre-Auth SQLi PoC
2026-09-24 CVE-2026-87902 CVE-2026-87902 Exploit: WordPress Path Traversal RCE PoC
2026-09-22 CVE-2026-65634 CVE-2026-65634 Exploit: Erlang/OTP OID DoS PoC
2026-09-22 CVE-2026-60004 CVE-2026-60004 Exploit: Gitea RCE via Hook PoC
2026-09-22 CVE-2026-53940 CVE-2026-53940 Exploit: Conda Entry-Point RCE PoC
2026-09-17 CVE-2026-37266 CVE-2026-37266 Exploit: Responsive FileManager RCE PoC
2026-09-15 CVE-2026-78159 CVE-2026-78159 Exploit: Events Calendar RCE PoC
2026-09-15 CVE-2026-85706 CVE-2026-85706 Exploit: GitLab Arbitrary File Read PoC
2026-09-15 CVE-2026-78006 CVE-2026-78006 Exploit: Events Calendar RCE PoC
2026-09-11 CVE-2026-84647 CVE-2026-84647 Exploit: Jenkins Stapler Type Confusion PoC
2026-09-10 CVE-2026-86730 CVE-2026-86730 Exploit: Craft CMS Auth RCE PoC
2026-09-09 CVE-2026-75816 CVE-2026-75816 Exploit: Frontend Admin Auth Bypass PoC
2026-09-08 CVE-2026-83627 CVE-2026-83627 Exploit: Hummingbird RCE via Log PoC
2026-09-08 CVE-2026-16723 CVE-2026-16723 Exploit: fastjson RCE PoC
2026-09-07 CVE-2026-59313 CVE-2026-59313: Spring Framework - SSE CR/LF Injection PoC
2026-09-07 CVE-2025-55182 CVE-2025-55182: React2Shell Pre-Auth RCE PoC
2026-09-07 CVE-2026-55634 CVE-2026-55634: Pimcore - DataObject PHP Injection RCE PoC
2026-09-07 CVE-2026-76581 CVE-2026-76581: WPMU DEV Hub SSO Bypass PoC
2026-08-29 CVE-2026-16639 CVE-2026-16639: Drupal i18n_sso Auth Bypass PoC
2026-08-29 CVE-2026-68525 CVE-2026-68525: Apache Tomcat - Auth Bypass PoC
2026-08-27 CVE-2026-77998 CVE-2026-77998: miniOrange SAML - Joomla Auth Bypass PoC
2026-08-25 CVE-2026-10053 CVE-2026-10053: GitLab npm Path Traversal RCE PoC
2026-08-25 CVE-2026-18963 CVE-2026-18963: Keycloak - Auth Bypass PoC
2026-08-24 CVE-2026-77647 CVE-2026-77647: SPIP Pre-Auth RCE PoC
2026-08-21 CVE-2026-55674 CVE-2026-55674: Discourse Cache Poisoning XSS PoC
2026-08-21 CVE-2026-19478 CVE-2026-19478: GitLab GraphQL Auth Bypass PoC
2026-08-20 CVE-2026-75143 CVE-2026-75143: FFmpeg RIST Heap OOB Write PoC
2026-08-20 CVE-2026-18051 CVE-2026-18051: W3 Total Cache - Arbitrary File Write PoC
2026-08-20 CVE-2026-18366 CVE-2026-18366: Events Manager - Privilege Escalation PoC
2026-08-20 CVE-2026-47686 CVE-2026-47686: vm2 Sandbox Escape - RCE PoC
2026-08-19 CVE-2021-20295 CVE-2021-20295: QEMU SLiRP IPv6 OOB Read PoC
2026-08-19 CVE-2026-42945 CVE-2026-42945: NGINX Rift - Heap Buffer Overflow PoC
2026-08-19 CVE-2026-15571 CVE-2026-15571: Keycloak Account Linking Auth Bypass PoC
2026-08-17 CVE-2026-19598 CVE-2026-19598: Pods Auth Bypass - Privilege Escalation PoC
2026-08-17 CVE-2026-56654 CVE-2026-56654: Gitea - Access Token Scope Escalation PoC
2026-08-17 CVE-2026-28185 CVE-2026-28185: Login with Google Auth Bypass PoC
2026-08-15 CVE-2019-10349 CVE-2019-10349: Jenkins Dependency Graph - Stored XSS PoC
2026-08-15 CVE-2026-34486 CVE-2026-34486: Tomcat Tribes RCE PoC
2026-08-15 CVE-2026-3195 CVE-2026-3195: QEMU Virtio-Sound Heap OOB Write PoC
2026-08-15 CVE-2025-12464 CVE-2025-12464: QEMU e1000 - Stack OOB Read PoC
2026-08-14 CVE-2026-3842 CVE-2026-3842: QEMU hv-syndbg OOB Write PoC
2026-08-13 CVE-2026-67282 CVE-2026-67282: Fabrik Unauthenticated RCE PoC
2026-08-13 CVE-2026-72772 CVE-2026-72772: n8n Auth Bypass PoC
2026-08-13 CVE-2026-18391 CVE-2026-18391: WooCommerce Subscriptions - RCE PoC
2026-08-12 CVE-2026-59083 CVE-2026-59083: Apache Tomcat - Auth Bypass PoC
2026-08-11 CVE-2026-12080 CVE-2026-12080: QEMU Guest Agent Symlink Privesc PoC
2026-08-11 CVE-2026-59851 CVE-2026-59851: libssh Authorization Bypass PoC
2026-08-11 CVE-2026-66915 CVE-2026-66915: Fabrik Calc Element RCE PoC
2026-08-11 CVE-2026-72899 CVE-2026-72899: Metabase Unauthenticated SQL Injection PoC
2026-08-11 CVE-2026-72585 CVE-2026-72585: Grafana - Protected Receiver Auth Bypass PoC
2026-08-11 CVE-2026-72898 CVE-2026-72898: Metabase SQL Injection - Admin Takeover PoC
2026-08-11 CVE-2024-7347 CVE-2024-7347: nginx - Buffer Over-read PoC
2026-08-11 CVE-2025-24813 CVE-2025-24813: Apache Tomcat Partial PUT RCE PoC
2026-08-11 CVE-2026-72568 CVE-2026-72568: Redis Heap OOB Read PoC
2026-08-10 CVE-2026-13001 CVE-2026-13001: Podlove Podcast Publisher RCE PoC
2026-08-10 CVE-2026-34966 CVE-2026-34966: Gitea - Authenticated SSRF PoC
2026-08-10 CVE-2026-71285 CVE-2026-71285: Uptime Kuma Matomo Stored XSS PoC
2026-08-09 CVE-2026-71327 CVE-2026-71327: Traefik - Route Identity Collision PoC
2026-08-08 CVE-2026-4878 CVE-2026-4878: libcap TOCTOU Race Privilege Escalation PoC
2026-08-08 CVE-2026-14364 CVE-2026-14364: TrueBooker Auth Bypass PoC
2026-08-08 CVE-2026-17594 CVE-2026-17594: Nexus Privilege Escalation PoC
2026-08-07 CVE-2026-64638 CVE-2026-64638: WordPress XSS2Shell Pre-Auth RCE PoC
2026-08-07 CVE-2026-71238 CVE-2026-71238: DjangoCRM - Debug Disclosure PoC
2026-08-06 CVE-2026-71269 CVE-2026-71269: Node-RED Unauthenticated DoS PoC
2026-08-05 CVE-2026-35210 CVE-2026-35210: OpenCTI Authorization Bypass PoC
2026-08-04 CVE-2026-42208 CVE-2026-42208: LiteLLM Pre-Auth SQL Injection PoC
2026-08-04 CVE-2026-9082 CVE-2026-9082: Drupal SQL Injection PoC
2026-08-04 CVE-2026-69251 CVE-2026-69251: Flowise Authenticated RCE PoC
2026-08-01 CVE-2025-8110 CVE-2025-8110: Gogs Symlink-Following RCE PoC
2026-08-01 CVE-2026-66012 CVE-2026-66012: SiYuan - Auth Bypass to Admin Takeover PoC
2026-07-31 CVE-2026-18363 CVE-2026-18363: osTicket Auth Bypass PoC
2026-07-30 CVE-2026-44966 CVE-2026-44966: Velocity.js Prototype Pollution PoC
2026-07-28 CVE-2026-45668 CVE-2026-45668: Trilium Notes - RCE via Path Traversal PoC
2026-07-24 CVE-2026-63030 CVE-2026-63030: WordPress wp2shell Pre-Auth RCE PoC
2026-07-22 CVE-2026-47668 CVE-2026-47668: DbGate Unauthenticated RCE PoC
2026-05-08 CVE-2026-37709 CVE-2026-37709: Snipe-IT - Auth Bypass PoC
2026-05-07 CVE-2026-33589 CVE-2026-33589: Open Notebook - Path Traversal LFI PoC
2026-05-06 CVE-2026-27960 CVE-2026-27960: OpenCTI Authentication Bypass via Hardcoded UUID PoC
2026-05-05 CVE-2026-42151 CVE-2026-42151: Prometheus - OAuth Secret Exposure PoC
2026-05-04 CVE-2026-7482 CVE-2026-7482 - Ollama Heap Out-of-Bounds Read PoC
2026-01-26 CVE-2026-24061 CVE-2026-24061: GNU Inetutils - Auth Bypass PoC