17737 matches found
CVE-2026-42314
creationtimestamp| type| source ---|---|--- 2026-04-26 21:37:37+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-97r3-5w84-r4q8...
CVE-2026-43983
creationtimestamp| type| source ---|---|--- 2026-04-26 17:45:52+00:00| published-proof-of-concept| https://github.com/pocket-id/pocket-id/security/advisories/GHSA-w6p7-2fxx-4f44 2026-07-28 16:35:14+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-w6p7-2fxx-4f44...
CVE-2026-42260
creationtimestamp| type| source ---|---|--- 2026-04-26 13:21:40+00:00| published-proof-of-concept| https://github.com/Aas-ee/open-webSearch/security/advisories/GHSA-v228-72c7-fx8j...
EUVD-2018-21791
Faleemi Desktop Software 1.8.2 contains a local buffer overflow vulnerability in the Device alias field that allows local attackers to trigger a structured exception handler SEH overwrite. Attackers can craft a malicious payload and paste it into the Device alias field within the Managing Log...
CVE-2026-43929
creationtimestamp| type| source ---|---|--- 2026-04-26 01:30:34+00:00| published-proof-of-concept| https://github.com/felippe-regazio/ssrfcheck/security/advisories/GHSA-j4rj-2jr5-m439...
CVE-2026-43901
creationtimestamp| type| source ---|---|--- 2026-04-25 13:59:39+00:00| published-proof-of-concept| https://github.com/bx33661/Wireshark-MCP/security/advisories/GHSA-3r68-x3xc-rxpg...
CVE-2026-42188
creationtimestamp| type| source ---|---|--- 2026-04-25 13:31:02+00:00| published-proof-of-concept| https://github.com/GeyserMC/Geyser/security/advisories/GHSA-xcfg-fcr5-gw9r...
CVE-2026-42554
creationtimestamp| type| source ---|---|--- 2026-04-25 13:08:32+00:00| published-proof-of-concept| https://github.com/gofiber/fiber/security/advisories/GHSA-qjv7-627w-8qjv...
Exploit for Path Traversal in Apache Http_Server
Apache HTTP Server 2.4.49 - Path Traversal & RCE CVE-2021-417...
CVE-2026-43878
creationtimestamp| type| source ---|---|--- 2026-04-25 01:13:27+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-mm5f-8q57-4fc4...
CVE-2026-43877
creationtimestamp| type| source ---|---|--- 2026-04-25 01:06:24+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-jw8g-5j46-44rp...
CVE-2026-43876
creationtimestamp| type| source ---|---|--- 2026-04-25 00:57:12+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-g9cm-rxp7-6gv5...
CVE-2026-43875
creationtimestamp| type| source ---|---|--- 2026-04-25 00:54:22+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-5w8w-26ch-v5cw...
CVE-2026-43874
creationtimestamp| type| source ---|---|--- 2026-04-25 00:50:46+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-ghcv-22jf-vfxm...
GHSA-RP7V-4384-HFRP k8sGPT has Prompt Injection through its k8sGPT-Operator
Summary In the auto-remediation pipeline, objecttoexecution.go was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object. Details This issue was fixed after coordination with Alex Jones. PoC To minimize the...
k8sGPT has Prompt Injection through its k8sGPT-Operator
Summary In the auto-remediation pipeline, objecttoexecution.go was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object. Details This issue was fixed after coordination with Alex Jones. PoC To minimize the...
CVE-2026-5935
creationtimestamp| type| source ---|---|--- 2026-04-24 15:21:36+00:00| published-proof-of-concept| Telegram/l8-tUjdZo5KblLOe421TQB8MZuX2H9CaOdWKzaRMJrauLgw...