CVE-2026-41258

OpenMRS is an open source electronic medical record system platform. From 2.7.0 to before 2.7.9 and 2.8.6, the ConceptReferenceRangeUtility.evaluateCriteria method in OpenMRS Core evaluates database-stored criteria strings as Apache Velocity templates without any sandbox configuration. The...

Exploit for CVE-2026-25860

CVE-2...

WS-PoC-Search

WS-PoC-Search Lightning-fast CVE and PoC intelligence searc...

CVE-2026-44706

creationtimestamp| type| source ---|---|--- 2026-06-05 14:32:56+00:00| published-proof-of-concept| https://hakaisecurity.io/pt-br-cve-2026-44706-sql-injection-in-chatwoot-filterservice/research-blog/?utmmedium=rss 2026-06-05 14:32:56+00:00| published-proof-of-concept|...

Exploit for CVE-2026-3300

CVE-2026-3300 - Everest Forms Pro Unauthenticated Stored Cross...

CVE-2026-48866

creationtimestamp| type| source ---|---|--- 2026-06-05 14:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87442 2026-06-05 15:00:18+00:00| published-proof-of-concept| Telegram/I55EnFdJmYEBchmRtkjPCUSn7qv5UvMe7YwNG8H83xOzV0w 2026-06-05 21:00:04+00:00| published-proof-of-concept...

AI Worm

Researchers have prototyped an AI-powered internet worm. The coolest thing about the prototype is that it carries its own LLM with it, and runs it on computers that have been broken into. This is the closest to John Brunner's original 1975 conception of a computer worm that I've seen...

CVE-2026-53622

creationtimestamp| type| source ---|---|--- 2026-06-05 10:26:43+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-9cr8-q42q-g8m7...

CVE-2026-44289

creationtimestamp| type| source ---|---|--- 2026-06-05 08:33:42+00:00| published-proof-of-concept| https://www.cyera.com/research/proto6-the-schema-was-not-supposed-to-run 2026-06-10 09:00:04+00:00| published-proof-of-concept| Telegram/ZHpMnVOz2cJfIOonPjLT3mqz43XsQAtrT-ty2tkYMtXDqE...

CVE-2026-44294

creationtimestamp| type| source ---|---|--- 2026-06-05 08:33:42+00:00| published-proof-of-concept| https://www.cyera.com/research/proto6-the-schema-was-not-supposed-to-run 2026-06-10 09:00:04+00:00| published-proof-of-concept| Telegram/ZHpMnVOz2cJfIOonPjLT3mqz43XsQAtrT-ty2tkYMtXDqE...

CVE-2026-44292

creationtimestamp| type| source ---|---|--- 2026-06-05 08:33:42+00:00| published-proof-of-concept| https://www.cyera.com/research/proto6-the-schema-was-not-supposed-to-run 2026-06-10 09:00:04+00:00| published-proof-of-concept| Telegram/ZHpMnVOz2cJfIOonPjLT3mqz43XsQAtrT-ty2tkYMtXDqE...

Exploit for Double Free in Microsoft

CVE-2026-26179 PoC for CVE-2026-26179 / ZDI-26-276, my very ow...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744-MCPJAM-RCE-exploit This Python proof-of-concept...

LMCache: 16-bit multimodal hash collision can poison KV cache entries

A flaw has been found in LMCache up to 0.4.6. This affects the function hexhashtoint16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level ...

Exploit for CVE-2026-26555

🔍 Vulnerability Research A curated collection of in-depth vul...

Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public

Cisco has patched a bug in Unified Communications Manager that lets an unauthenticated attacker on the network write files to the box and, from there, climb to root. It is tracked as CVE-2026-20230, and proof-of-concept exploit code is already public. Cisco's PSIRT says it has not seen the flaw...

CVE-2026-6815

creationtimestamp| type| source ---|---|--- 2026-06-04 15:07:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87299 2026-06-04 21:00:04+00:00| seen| Telegram/hAogTto79Jt-ZuW6HpUeFLdQ6LmAiGRTnFY6xKkiQBfaYY...

CVE-2026-54458

creationtimestamp| type| source ---|---|--- 2026-06-04 14:49:58+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-8whc-2wmv-ww35 2026-07-15 22:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpq2bpz642l 2026-07-15 23:01:02+00:00|...

poc-exploit-github-actions-pull-request-write-vuln-demo

No d...

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash in the mlflow.data.digestutils function. An attacker can compromise data integrity or cause unexpected behavior by exploiting the use of a weak hash algorithm during dataset digest computation. PoC python import pandas ...