CVE-2026-41258

OpenMRS is an open source electronic medical record system platform. From 2.7.0 to before 2.7.9 and 2.8.6, the ConceptReferenceRangeUtility.evaluateCriteria method in OpenMRS Core evaluates database-stored criteria strings as Apache Velocity templates without any sandbox configuration. The...

CVE-2026-41258 OpenMRS: Stored Velocity SSTI to RCE via ConceptReferenceRange

OpenMRS is an open source electronic medical record system platform. From 2.7.0 to before 2.7.9 and 2.8.6, the ConceptReferenceRangeUtility.evaluateCriteria method in OpenMRS Core evaluates database-stored criteria strings as Apache Velocity templates without any sandbox configuration. The...

Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Litellm

LiteLLM CVE-2026-42203 PoC Usage Instructions This document e...

PoC

...

CVE-2026-46643

creationtimestamp| type| source ---|---|--- 2026-05-15 14:07:16+00:00| published-proof-of-concept| https://github.com/KnpLabs/snappy/security/advisories/GHSA-vpr4-p6fq-85jc...

Raising the bar: Quality, shared responsibility, and the future of GitHub’s bug bounty program

The security research community is one of GitHub's greatest assets. Every year, researchers from around the world help us find and fix vulnerabilities, making the platform safer for over 180 million developers. Our bug bounty program exists because we believe that collaboration with external...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Silverpeas

Silverpeas-AuthBypass-CVE-2024-36042 A clean, single-file P...

CVE-2026-46432

creationtimestamp| type| source ---|---|--- 2026-05-15 09:23:28+00:00| published-proof-of-concept| https://github.com/InternLM/lmdeploy/security/advisories/GHSA-m549-qq94-fvhg 2026-06-10 00:55:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnviubrc7523 2026-06-10 01:01:30+00:00|...

CVE-2026-46561

creationtimestamp| type| source ---|---|--- 2026-05-15 08:09:37+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-8rp3-xc6w-5qp5...

Exploit for CVE-2026-42945

nginx-rift-detect Behavioral detection script for CVE-2026-...

CVE-2026-40699

creationtimestamp| type| source ---|---|--- 2026-05-15 06:50:56+00:00| seen| https://www.acn.gov.it/portale/w/f5-disponibile-poc-per-lo-sfruttamento-della-cve-2026-42945...

Node.js: NULL pointer dereference in node:sqlite DatabaseSync#applyChangeset() via malformed SQLite changeset

Summary: A 19-byte malformed SQLite changeset passed to Node.js node:sqlite DatabaseSyncapplyChangeset causes a native NULL pointer dereference and terminates the Node.js process. Description: The built-in Node.js node:sqlite API exposes DatabaseSyncapplyChangesetchangeset, options, which accepts...

CVE-2026-44716

creationtimestamp| type| source ---|---|--- 2026-05-15 02:17:30+00:00| published-proof-of-concept| https://github.com/pipecat-ai/pipecat/security/advisories/GHSA-3363-2ph6-35wh 2026-06-10 01:01:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvj63jwty26 2026-06-10...

OpenMRS 代码注入漏洞

OpenMRS is an open-source electronic health record system developed by OpenMRS Inc. Versions of OpenMRS from 2.7.0 to 2.7.9 and before 2.8.6 have a code injection vulnerability. This vulnerability arises from the ConceptReferenceRangeUtility.evaluateCriteria method, which evaluates condition...

PT-2026-41417

Claude Mythos Preview case studies also, read your transcripts! https://t.co/drNlAH5mLE "Mythos demonstrates its bug reproduction and exploitation capabilities on CVE-2024-051912, an in-the-wild exploited bug that has no public report nor a working PoC whatsoever in the public domain. This bug ha...

CVE-2026-45349

creationtimestamp| type| source ---|---|--- 2026-05-14 20:24:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-gfm2-xm6c-37qc...

CVE-2026-45306

creationtimestamp| type| source ---|---|--- 2026-05-14 20:17:27+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-w727-595x-pc3r...

CVE-2026-46492

creationtimestamp| type| source ---|---|--- 2026-05-14 19:57:57+00:00| published-proof-of-concept| https://github.com/commenthol/md-fileserver/security/advisories/GHSA-32q2-hhr5-6qvv 2026-06-09 17:11:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuowoqpot2g...

CVE-2026-6145

creationtimestamp| type| source ---|---|--- 2026-05-14 19:00:10+00:00| published-proof-of-concept| Telegram/XDvWvSLpOLgWYjCnx5nXaVDhxhCY5P5ucZ2jMelcgSmye8Y 2026-05-14 21:00:04+00:00| seen| Telegram/pxejltfM6t0bOCIPs7C1JhjfACvEO7Gy-x7DlZhJbRtGeV0 2026-07-10 20:17:00+00:00| seen|...

CVE-2026-46481

creationtimestamp| type| source ---|---|--- 2026-05-14 15:37:25+00:00| published-proof-of-concept| https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-9vmh-whc4-7phg 2026-06-08 19:49:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnshblm7jb2r...