What this server has with the tag: posts by people here, and posts from elsewhere that reached it. There's more of it on infosec.exchange.
You've heard of php2shell, now get ready for able2shell. (What's coordinated vulnerability disclosure?)
Today I bring you Able2Shell, a repository with over 30 0-days I have discovered for N-Central N-able - All exploits were tested on their latest pre-release version.
https://www.linkedin.com/posts/seanbales_today-i-bring-you-able2shell-a-repository-ugcPost-7525411483350970368-x331/
https://github.com/Oracle-Security/CVEs/tree/main/0-Days/N-Central%20N-Able
In reply to a post
Ivanti oh no bb what is u doin?
At the time of discovery of exploitation, Ivanti had a fix developed for CVE-2026-104935 which was already in QA for supported versions, and we made the decision to not delay getting a fix to customers that resolved the primary exploitation path when the LPE was discovered. Because of this, our focus was initially centered on the disclosure of CVE-2026-104935 and providing protection for our customers as quickly as possible. Additionally, Ivanti collaborated with Volexity on their blog post which provided information to arm defenders on known threat actor behavior, including chaining the local privilege escalation vulnerability. These additional CVE disclosures have now been added to this Security Advisory and a fix is available now.
New Ivanti zero-days: CVE-2026-111357 (missing authentication) and CVE-2026-118527 (predictable filenames)
allheim has been updated.
