PT-2026-54955

lopdf::Document::load mem and the other load entry points parses nested PDF arrays and dictionaries with unbounded recursion. A small crafted PDF whose Catalog contains a deeply nested array /X … , on the order of 10,000 levels exhausts the call stack and aborts the process with SIGABRT. Because...

CVE-2026-46488

creationtimestamp| type| source ---|---|--- 2026-06-20 16:48:06+00:00| published-proof-of-concept| https://github.com/motioneye-project/motioneye/security/advisories/GHSA-r3cw-c95m-wfh9 2026-09-15 18:08:33+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvl7s6mp7h2t 2026-09-15...

CVE-2026-31978

creationtimestamp| type| source ---|---|--- 2026-06-20 16:47:55+00:00| published-proof-of-concept| https://github.com/motioneye-project/motioneye/security/advisories/GHSA-g9fx-5r4h-pcw3...

CVE-2026-32315

creationtimestamp| type| source ---|---|--- 2026-06-20 16:47:31+00:00| published-proof-of-concept| https://github.com/motioneye-project/motioneye/security/advisories/GHSA-rhgp-6wq6-9j67 2026-06-24 23:13:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp324me4xg2i...

CVE-2026-55488

creationtimestamp| type| source ---|---|--- 2026-06-20 16:47:06+00:00| published-proof-of-concept| https://github.com/motioneye-project/motioneye/security/advisories/GHSA-rw9q-97r9-8gvh 2026-07-13 22:00:16+00:00| seen| https://t.me/GithubRedTeam/91371 2026-07-14 00:00:32+00:00| seen|...

explotability_analysis_ebpf

eBPF Verifier Exploit Research — s344024 Romano Simone Resear...

Exploit for OS Command Injection in Redhat Openshift_Container_Platform

C...

Web-Security-Audit-Skill

--- Features - Multi-language support: Automatic identi...

Exploit for CVE-2026-54337

-CVE-2026-543...

Gogs: XSS in .ipynb files renderer due to outdated notebookjs

Summary Gogs renders Jupyter notebook files .ipynb using jsvine/notebookjs, but the version is outdated, missing patches for known XSS vulnerabilities. Details Gogs uses version 0.4.2 of notebookjs to render Jupyter notebook files:...

py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size

py7zr's Worker.decompress extracts archive entries without tracking total decompressed size. A crafted .7z file can exhaust disk or memory before the extraction completes. Measured: 15.6 KB archive → 100 MB output 6,556:1 ratio. Proof of concept: python import py7zr, tempfile, os create bomb:...

GHSA-M999-J542-5W3R Open Redirect Bypass in miniflux-v2

Summary The URL restrictions in miniflux-v2 can be bypassed by attackers, leading to an open redirect vulnerability. Details Normally, the redirect URL needs to be validated using IsRelativePath. There are some security measures in place, such as requiring relative paths, prohibiting host and...

Exploit for Execution with Unnecessary Privileges in Percona Monitoring_And_Management

CVE-2...

The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes

The Gentlemen ransomware-as-a-service RaaS operation is actively developing and maintaining a suite of endpoint detection and response EDR killers that it hands out to affiliates for impairing system defenses before deploying the encryptor. This mature portfolio of EDR-terminating tools is center...

CVE-2026-55691

creationtimestamp| type| source ---|---|--- 2026-06-19 18:22:24+00:00| published-proof-of-concept| https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/security/advisories/GHSA-7h5p-637f-jfr7...

CVE-2026-55692

creationtimestamp| type| source ---|---|--- 2026-06-19 18:22:09+00:00| published-proof-of-concept| https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/security/advisories/GHSA-5c7p-g73q-rpg5...

CVE-2026-55690

creationtimestamp| type| source ---|---|--- 2026-06-19 18:21:21+00:00| published-proof-of-concept| https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/security/advisories/GHSA-c29q-5xm7-5p62 2026-09-15 18:02:07+00:00| seen|...

NextJS-Middleware-Bypass-PoC

MCID15795619: Next.js Middleware Bypass PoC Executive Summ...

CVE-2026-55447

creationtimestamp| type| source ---|---|--- 2026-06-19 13:25:18+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-ccv6-r384-xp75 2026-06-20 01:38:03+00:00| seen| https://bsky.app/profile/suriq.io/post/3moopuvtpix24 2026-06-26 19:07:07+00:00| seen|...

CVE-2026-55255

creationtimestamp| type| source ---|---|--- 2026-06-19 13:17:29+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-qrpv-q767-xqq2 2026-06-19 23:56:24+00:00| seen| https://bsky.app/profile/suriq.io/post/3mook75kc3e2d 2026-06-25 02:37:07+00:00| seen|...