CVE-2026-49471

creationtimestamp| type| source ---|---|--- 2026-07-08 21:42:03+00:00| seen| https://gist.github.com/alon710/faf458b17f73f7d92e775ebdde2a6b10 2026-07-08 22:35:03+00:00| published-proof-of-concept| https://github.com/oraios/serena/security/advisories/GHSA-37h2-6p4f-mp3q 2026-07-11 00:42:25+00:00|...

CVE-2026-54685

creationtimestamp| type| source ---|---|--- 2026-07-08 18:35:05+00:00| published-proof-of-concept| https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-7789-65hx-f26w...

CVE-2026-55599

creationtimestamp| type| source ---|---|--- 2026-07-08 18:35:03+00:00| published-proof-of-concept| https://github.com/phpseclib/phpseclib/security/advisories/GHSA-m557-wrgg-6rp4...

Exploit for Uncontrolled Search Path Element in Foxit Pdf_Editor

Foxit PDF Reader LPE Proof of concept exploit for CVE-2026-37...

Exploit for Path Traversal in Helm

CVE-2...

Exploit for Insecure Default Initialization of Resource in Apache Couchdb

CVE-2022-24706 Contributors - 금정현@junghyeonkumhtt...

POC

🛡️ POC Vulnerability Verification Toolset !License: MITht...

MAL-2026-6961 Malicious code in waymo-waymax (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1ae76b937a20a588a9b5514b837bb86bd087aceb428216f0abbe8ff16e9da426 Package claims to perform dependency confusion PoC and exfiltrates multiple data, including full sensitive environment variables --- Category: MALICIOUS - The...

CVE-2026-53530

creationtimestamp| type| source ---|---|--- 2026-07-08 00:35:13+00:00| published-proof-of-concept| https://github.com/erweixin/RaTeX/security/advisories/GHSA-4hgp-59h5-gvrj...

CVE-2026-53531

creationtimestamp| type| source ---|---|--- 2026-07-08 00:35:11+00:00| published-proof-of-concept| https://github.com/erweixin/RaTeX/security/advisories/GHSA-4w5h-hx6r-28q7...

CVE-2026-53487

creationtimestamp| type| source ---|---|--- 2026-07-08 00:35:09+00:00| published-proof-of-concept| https://github.com/kite-org/kite/security/advisories/GHSA-gvhc-wv3v-7pf8...

CVE-2026-53553

creationtimestamp| type| source ---|---|--- 2026-07-08 00:35:05+00:00| published-proof-of-concept| https://github.com/zhenorzz/goploy/security/advisories/GHSA-4g5x-hcwm-82jw...

OpenBMC bmcweb Authentication Bypass

Proof of concept that demonstrates an OpenBMC bmcweb AUTH-F6 mTLS UPN Suffix authentication bypass vulnerability via a parent-domain certificate...

CVE-2026-53552

creationtimestamp| type| source ---|---|--- 2026-07-07 23:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq3sagiirf2r 2026-07-08 00:35:07+00:00| published-proof-of-concept| https://github.com/zhenorzz/goploy/security/advisories/GHSA-26rh-24rg-j3vv 2026-08-31 20:08:22+00:0...

Exploit for CVE-2026-36214

CVE-2026-36214 - Stored Cross-Site Scripting XSS in osTicket...

cve-poc-collection

CVE PoC Vulnerability Reproduction Collection This repository...

Authlib: JWS/JWT accepts unknown crit headers (RFC violation → possible authz bypass)

SummaryAuthlib’s JWS verification accepts tokens that declare unknown critical header parameters crit, violating RFC 7515 “must‑understand” semantics. An attacker can craft a signed token with a critical header for example, bork or cnf that strict verifiers reject but Authlib accepts. In...

copyparty allows Regex Denial of Service (ReDoS) in the upload listing

SummaryThe filter parameter for the "Recent uploads" page allows arbitrary Regexes. If this feature is enabled which is the default, an attacker can craft a filter which deadlocks the server. PoChttps://127.0.0.1:3923/?ru=.++x ImpactThe server becomes fully inaccessible for a long time...

PYSEC-2026-1608 MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion

Summary Nested imports of MaterialX files can lead to a crash via stack memory exhaustion, due to the lack of a limit on the "import chain" depth. Details The MaterialX specification supports importing other files by using XInclude tags. When parsing file imports, recursion is used to process...

MaterialX Null Pointer Dereference in getShaderNodes due to Unchecked nodeGraph->getOutput return

SummaryWhen parsing shader nodes in a MTLX file, the MaterialXCore code accesses a potentially null pointer, which can lead to crashes with maliciously crafted files. DetailsIn src/MaterialXCore/Material.cpp, in function getShaderNodes, the following code fetches the output nodes for a given...