CVE-2026-41110

creationtimestamp| type| source ---|---|--- 2026-04-08 00:03:33+00:00| published-proof-of-concept| Telegram/9Mvn6NJqaAwIucsoyVvVXlRvi9eikTOkciRReXyDpmmZFQ...

📄 Dolibarr 23.0.0 dol_eval_standard() Whitelist Bypass

Dolibarr version 23.0.0 bypass proof of concept exploit. The whitelist mode of dolevalstandard does not apply $forbiddenphpstrings checks, and the function-call regex does not detect PHP dynamic callable syntax. This allows 'exec''cmd' to bypass all validation and reach eval. !/usr/bin/env python...

Exploit for Eval Injection in Langflow

CVE-2026-33017-Langflow-POC Proof-of-con...

CVE-2026-33034

creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w...

CVE-2025-24818

creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w...

CVE-2026-34385

creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w...

CVE-2026-34387

creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w 2026-04-30 12:13:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mkplluaoik2f...

GHSA-V895-833R-8C45

creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w...

GHSA-7RHW-5MPV-GP4H

creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w...

GHSA-MH2Q-Q3FH-2475

creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w...

GHSA-5JXF-VMQR-5G82

creationtimestamp| type| source ---|---|--- 2026-04-07 21:22:30+00:00| published-proof-of-concept| Telegram/PsCoAl2rNCHfpa-IE94yjZNK4tjM6zifbqO0UkQOdEj8yI...

CVE-2026-5741

creationtimestamp| type| source ---|---|--- 2026-04-07 21:22:30+00:00| published-proof-of-concept| Telegram/PsCoAl2rNCHfpa-IE94yjZNK4tjM6zifbqO0UkQOdEj8yI...

GHSA-4GX2-PC4F-WQ37

creationtimestamp| type| source ---|---|--- 2026-04-07 21:22:30+00:00| published-proof-of-concept| Telegram/PsCoAl2rNCHfpa-IE94yjZNK4tjM6zifbqO0UkQOdEj8yI...

GHSA-X8RX-789C-2PXQ

creationtimestamp| type| source ---|---|--- 2026-04-07 21:22:30+00:00| published-proof-of-concept| Telegram/PsCoAl2rNCHfpa-IE94yjZNK4tjM6zifbqO0UkQOdEj8yI...

GHSA-CMCR-Q4JF-P6Q9

creationtimestamp| type| source ---|---|--- 2026-04-07 21:22:30+00:00| published-proof-of-concept| Telegram/PsCoAl2rNCHfpa-IE94yjZNK4tjM6zifbqO0UkQOdEj8yI...

Access Control Bypass

Overview genieacs is an A TR-069 Auto Configuration Server ACS Affected versions of this package are vulnerable to Access Control Bypass via the NBI API endpoint. An attacker can gain unauthorized access to sensitive functionality or data by sending unauthenticated requests. Remediation There is ...

CVE-2026-39389

creationtimestamp| type| source ---|---|--- 2026-04-07 20:07:40+00:00| published-proof-of-concept| https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-9rxp-f27p-wv3h...

CVE-2026-35572

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:02+00:00| published-proof-of-concept| Telegram/b7kqkVlyupyGML8IRNuJF5vW46V1gBKnrWAnE54KrYglqM...

CVE-2026-24174

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:02+00:00| published-proof-of-concept| Telegram/b7kqkVlyupyGML8IRNuJF5vW46V1gBKnrWAnE54KrYglqM 2026-06-08 12:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnrngqv6vx2m...

GHSA-GC8Q-2GW7-QJ7W

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:02+00:00| published-proof-of-concept| Telegram/b7kqkVlyupyGML8IRNuJF5vW46V1gBKnrWAnE54KrYglqM...