CVE-2026-58445

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:54+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-pgqf-926r-548m...

CVE-2026-54547

creationtimestamp| type| source ---|---|--- 2026-07-17 20:35:06+00:00| published-proof-of-concept| https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-2v2f-mvfg-ph56...

PT-2026-58887

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.7 Description The expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDialog/RunDlg/RunDlg.cpp copies a variable name located between $ and into a fixed-size wchar t strMAX PATH stack buffer...

CVE-2026-45262

creationtimestamp| type| source ---|---|--- 2026-07-14 18:35:12+00:00| published-proof-of-concept| https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-5qmh-x653-g8qj 2026-07-14 20:08:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmz3x5vth2z...

PYSEC-2026-2726 Open WebUI has Broken Access Control for Completions API

Summary Any user X can continue the conversation of any other user Y, as long as the Chat ID of Y is known. User X does not even need to be an admin to do so. Details A user just needs to use the API endpoint: /api/chat/completions with their own API key generated in OWUI and the Chat ID of anoth...

CVE-2026-52792

creationtimestamp| type| source ---|---|--- 2026-07-02 22:35:07+00:00| published-proof-of-concept| https://github.com/xyproto/algernon/security/advisories/GHSA-mm6c-5j6x-hq8m...

Malicious code in xrblocks-remote-control (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e20199ccf4c5557bf9d6bd0f17f0f74b47aa54389f22247523fb9145ef29def Package xrblocks-remote-control ships a bin script that, when invoked including via npx or unintended resolution against the xrblocks name, POSTs the...

CVE-2026-54010

creationtimestamp| type| source ---|---|--- 2026-06-11 18:57:21+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-vrhc-3fr6-pc3c 2026-07-18 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqwsjmkf4t2m...

CVE-2026-22872

creationtimestamp| type| source ---|---|--- 2026-05-28 05:53:43+00:00| published-proof-of-concept| https://github.com/projectcapsule/capsule/security/advisories/GHSA-qjjm-7j9w-pw72 2026-06-12 19:21:32+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hl7tkp32x 2026-06-12...

EUVD-2026-31006

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made public violating coordinated vulnerability best practices. We are issuing this CVE to provide mitigation guidance that can be...

CVE-2026-42862

creationtimestamp| type| source ---|---|--- 2026-05-14 14:12:20+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x5v6-pj28-cwwm...

CVE-2026-45300

creationtimestamp| type| source ---|---|--- 2026-05-12 21:02:02+00:00| published-proof-of-concept| https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-fmxf-pm6p-7xgm 2026-06-05 21:15:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnl2nqfonh2z...

PT-2026-42025

Name of the Vulnerable Software and Affected Versions Windows 11 versions 24H2 and later Windows Server versions 2022 through 2025 Description YellowKey is a security feature bypass affecting the BitLocker component. An attacker with physical access to a device can bypass full-disk encryption to...

CVE-2026-44650

creationtimestamp| type| source ---|---|--- 2026-05-11 20:56:16+00:00| published-proof-of-concept| https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-886q-f44j-h6wh 2026-05-30 01:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmztyqckho2g...

CVE-2026-44209

creationtimestamp| type| source ---|---|--- 2026-05-08 20:36:22+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-gphh-9q3h-jgpp...

Exploit for CVE-2026-3844

CVE-2026-3844 — Breeze Cache Unauthenticated Arbitrary File Up...

CVE-2026-46361

creationtimestamp| type| source ---|---|--- 2026-05-06 20:31:54+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-pqh6-8fxf-jx22...

CVE-2026-44902

creationtimestamp| type| source ---|---|--- 2026-05-06 15:40:57+00:00| published-proof-of-concept| https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-q7rr-3cgh-j5r3 2026-05-27 17:02:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtye5ufzl2t...

CVE-2026-42590

creationtimestamp| type| source ---|---|--- 2026-04-30 18:31:11+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-7v3r-m9c8-r855...

CVE-2026-42589

creationtimestamp| type| source ---|---|--- 2026-04-30 18:30:59+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-rqgh-gxv4-6657 2026-05-30 07:00:03+00:00| seen| https://t.me/GithubRedTeam/86500 2026-05-30 07:38:57+00:00| confirmed|...