19138 matches found
CVE-2026-44708
creationtimestamp| type| source ---|---|--- 2026-05-06 07:09:57+00:00| published-proof-of-concept| https://github.com/lepture/mistune/security/advisories/GHSA-8g87-j6q8-g93x 2026-08-21 22:43:14+00:00| seen| https://gist.github.com/EbonJaeger/dbd95fac767f33b74282ee64940b0537 2026-08-22...
Exploit for Double Free in Apache Http_Server
CVE-2026-23918 CVE-2026-23918: Apache HTTP/2 Double...
PT-2026-38314
Name of the Vulnerable Software and Affected Versions ShellHub versions prior to 0.24.2 Description An issue exists where the endpoint "/api/devices/:uid" returns the full device object to any authenticated user without verifying if the device belongs to the caller's namespace tenant. An...
PT-2026-39411
Name of the Vulnerable Software and Affected Versions Next.js versions prior to 15.5.16 Next.js versions prior to 16.2.5 Description Applications utilizing Partial Prerendering via the Cache Components feature are susceptible to connection exhaustion. A crafted POST request to a server action can...
CVE-2026-44837
creationtimestamp| type| source ---|---|--- 2026-05-05 20:34:03+00:00| published-proof-of-concept| https://github.com/ViewComponent/viewcomponent/security/advisories/GHSA-hg3h-g7xc-f7vp...
CVE-2026-44836
creationtimestamp| type| source ---|---|--- 2026-05-05 20:33:59+00:00| published-proof-of-concept| https://github.com/ViewComponent/viewcomponent/security/advisories/GHSA-7f3r-gwc9-2995...
CVE-2026-44569
creationtimestamp| type| source ---|---|--- 2026-05-05 20:20:01+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-jxwr-g6r6-j3fx...
poc-react2shell-exploit
No d...
Exploit for CVE-2026-7482
CVE-2026-7482: Ollama Heap Out-of-Bounds Read 1-Day PoC Thi...
gix and gitoxide: unvalidated submodule name traverses out of .git/modules and redirects state() / open() to another repository
Summary attachments: pocs.zip Submodule names coming from .gitmodules are exposed as unvalidated names and are later reused to derive the submodule git directory as: /modules/ Because the submodule name is joined directly as a filesystem path component, a name such as ../../../escaped-target.git...
CVE-2026-42584
creationtimestamp| type| source ---|---|--- 2026-05-05 18:11:31+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3...
CVE-2026-42583
creationtimestamp| type| source ---|---|--- 2026-05-05 18:10:58+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6...
CVE-2026-42582
creationtimestamp| type| source ---|---|--- 2026-05-05 18:10:33+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw 2026-07-10 18:03:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcqcal5lt2e...
CVE-2026-42579
creationtimestamp| type| source ---|---|--- 2026-05-05 18:10:10+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm...
CVE-2026-42585
creationtimestamp| type| source ---|---|--- 2026-05-05 18:09:42+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv...
CVE-2026-42580
creationtimestamp| type| source ---|---|--- 2026-05-05 18:09:16+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723...
CVE-2026-42581
creationtimestamp| type| source ---|---|--- 2026-05-05 18:08:44+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9...
CVE-2026-42587
creationtimestamp| type| source ---|---|--- 2026-05-05 18:07:09+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv...