CVE-2023-2640-CVE-2023-32629-Interactive-PoC

CVE-2023-2640 & CVE-2023-32629 GameOverLay - Real Host Root...

Exploit for Improper Input Validation in Drupal

drupalgeddon2-cli A command-line rewrite of the Drupalged...

CVE-2026-10520, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry

Overview On June 9, 2026, Ivanti published a security advisory for two critical vulnerabilities affecting Ivanti Sentry formerly known as MobileIron Sentry, which per the vendor website is an “in-line gateway that manages, encrypts, and secures traffic between the mobile device and back-end...

CVE-2026-44290

creationtimestamp| type| source ---|---|--- 2026-06-10 09:00:04+00:00| published-proof-of-concept| Telegram/ZHpMnVOz2cJfIOonPjLT3mqz43XsQAtrT-ty2tkYMtXDqE...

CVE-2026-44291

creationtimestamp| type| source ---|---|--- 2026-06-10 09:00:04+00:00| published-proof-of-concept| Telegram/ZHpMnVOz2cJfIOonPjLT3mqz43XsQAtrT-ty2tkYMtXDqE...

CVE-2026-47780

creationtimestamp| type| source ---|---|--- 2026-06-10 08:23:38+00:00| published-proof-of-concept| https://github.com/free5gc/free5gc/security/advisories/GHSA-6gxq-gpr8-xgjp...

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

The anonymous security researcher going by the name Chaotic Eclipse aka Nightmare-Eclipse has released a proof-of-concept PoC exploit for yet another Microsoft Defender zero-day named RoguePlanet. "The exploit is a race condition, so it's a hit or miss," the researcher, who published the exploit...

cve-research

CVE Research Personal repository for CVE analysis, proof-of-c...

CVE-2026-48732

creationtimestamp| type| source ---|---|--- 2026-06-10 03:00:12+00:00| published-proof-of-concept| Telegram/MqWdWANShUnJ68DjuVipLyqHCuJpXni1SRGxasMWhR16HRA 2026-06-24 21:32:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2uixa5bt2f 2026-07-12 10:00:03+00:00|...

PT-2026-48600

Name of the Vulnerable Software and Affected Versions PDM versions prior to 2.28.0-1.1 Description PDM writes project-local state and configuration files without symlink protection, allowing a malicious repository to use symlinks to overwrite files outside the repository root. This creates an...

CVE-2026-50023

creationtimestamp| type| source ---|---|--- 2026-06-09 23:27:47+00:00| published-proof-of-concept| https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-c6mh-fpjc-4pr3 2026-07-16 16:25:06+00:00| seen| https://bsky.app/profile/gamer191.bsky.social/post/3mqrnkyqtkc27 2026-07-16 16:25:06+00:00|...

CVE-2026-47253

creationtimestamp| type| source ---|---|--- 2026-06-09 21:19:22+00:00| published-proof-of-concept| https://github.com/julien040/anyquery/security/advisories/GHSA-j9rx-rppg-6hh4...

CVE-2026-46394

creationtimestamp| type| source ---|---|--- 2026-06-09 19:00:13+00:00| published-proof-of-concept| Telegram/Twzxtbvyqic9grgE7JaZrbs3i9BOrZG8PBBvMyWgrTB7Ya8 2026-06-09 23:00:05+00:00| published-proof-of-concept| Telegram/avQcqITCN0CdPqbuzPd1c2U29MoQRxNSjCudrYTZic4II 2026-07-12 10:00:03+00:00|...

CVE-2026-52885

creationtimestamp| type| source ---|---|--- 2026-06-09 19:00:13+00:00| published-proof-of-concept| Telegram/Twzxtbvyqic9grgE7JaZrbs3i9BOrZG8PBBvMyWgrTB7Ya8 2026-06-26 22:17:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7xwnrx5d23 2026-06-29 14:47:42+00:00| seen|...

Malicious code in exodus-wallet-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53bf93b626689e980ef2e9c4ba33fd95e81d6a04c665f85908c8cf07b8b36e14 Package name impersonates the Exodus cryptocurrency wallet brand. package.json declares "postinstall": "node src/canary.js", and src/canary.js perfor...

Malicious code in @klapp-about/routes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715f07e0a1984fc9eb7d6432fc2491b08139755426b3c8905ba2d9274e2d4875 On npm install, the package's preinstall hook node index.js collects host and user identity data — os.hostname, os.userInfo.username, dirname,...

CVE-2026-00000

creationtimestamp| type| source ---|---|--- 2026-06-09 15:00:12+00:00| published-proof-of-concept| Telegram/TPZhP3a04vI9AManDnxQiLM92frB40hJI3gtpEixtxo5IZo 2026-06-09 23:00:05+00:00| published-proof-of-concept| Telegram/avQcqITCN0CdPqbuzPd1c2U29MoQRxNSjCudrYTZic4II...

poc-lab-kit

poc-lab-kit Recent CVE PoC & reproduction scripts. Focused on...

ecommerce-poc

Event-Driven E-Commerce Saga POC This project is a small even...

CVE-2026-39023

creationtimestamp| type| source ---|---|--- 2026-06-09 11:00:17+00:00| published-proof-of-concept| Telegram/u-phHdhtXJBm23j7Z55op0F75fWfK3k9htcZvFqyTuOau08 2026-06-09 15:00:06+00:00| published-proof-of-concept| Telegram/zS0m-Smw9tMC2xQZhVRiFtrXmVStzlksgIyfU5bMHDdEXnY 2026-07-12 11:00:03+00:00|...