19854 matches found
CVE-2026-42554
creationtimestamp| type| source ---|---|--- 2026-04-25 13:08:32+00:00| published-proof-of-concept| https://github.com/gofiber/fiber/security/advisories/GHSA-qjv7-627w-8qjv...
Exploit for Path Traversal in Apache Http_Server
Apache HTTP Server 2.4.49 - Path Traversal & RCE CVE-2021-417...
CVE-2026-43878
creationtimestamp| type| source ---|---|--- 2026-04-25 01:13:27+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-mm5f-8q57-4fc4...
CVE-2026-43877
creationtimestamp| type| source ---|---|--- 2026-04-25 01:06:24+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-jw8g-5j46-44rp...
CVE-2026-43876
creationtimestamp| type| source ---|---|--- 2026-04-25 00:57:12+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-g9cm-rxp7-6gv5...
CVE-2026-43875
creationtimestamp| type| source ---|---|--- 2026-04-25 00:54:22+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-5w8w-26ch-v5cw...
CVE-2026-43874
creationtimestamp| type| source ---|---|--- 2026-04-25 00:50:46+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-ghcv-22jf-vfxm...
com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0), de.gematik.test.tiger:tiger-on-fhir (>=1.1.1, <=1.2.1) +6 more potentially affected by CVE-2026-42037 via org.webjars.npm:axios (>=1.4.0, <=1.7.2)
org.webjars.npm:axios MAVEN version =1.4.0, =2.0.0, =1.1.1, =2.1.1, =2.1.1, =2.1.1, =2.1.3, =2.1.1, =1.0.6, =1.0.9 Source cves: CVE-2026-42037 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16299820...
k8sGPT has Prompt Injection through its k8sGPT-Operator
Summary In the auto-remediation pipeline, objecttoexecution.go was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object. Details This issue was fixed after coordination with Alex Jones. PoC To minimize the...
GHSA-RP7V-4384-HFRP k8sGPT has Prompt Injection through its k8sGPT-Operator
Summary In the auto-remediation pipeline, objecttoexecution.go was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object. Details This issue was fixed after coordination with Alex Jones. PoC To minimize the...
CVE-2026-5935
creationtimestamp| type| source ---|---|--- 2026-04-24 15:21:36+00:00| published-proof-of-concept| Telegram/l8-tUjdZo5KblLOe421TQB8MZuX2H9CaOdWKzaRMJrauLgw...
CVE-2026-42856
creationtimestamp| type| source ---|---|--- 2026-04-24 14:05:57+00:00| published-proof-of-concept| https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-fj4g-2p96-q6m3...
SecScan
SecScan Local-LLM-powered security scanner for GitHub repos...
CVE-2026-42312
creationtimestamp| type| source ---|---|--- 2026-04-24 06:09:45+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-ccxc-x975-4hh9...
GHSA-7M2H-GMVJ-CJX2
creationtimestamp| type| source ---|---|--- 2026-04-24 05:18:33+00:00| published-proof-of-concept| Telegram/wieF1Cc87yTCfYHn4YFnWJ1bAgxO-EGJdmyMzATQMYWieSQ...
GHSA-MMGM-P9X9-H33J
creationtimestamp| type| source ---|---|--- 2026-04-24 05:18:33+00:00| published-proof-of-concept| Telegram/wieF1Cc87yTCfYHn4YFnWJ1bAgxO-EGJdmyMzATQMYWieSQ...
CVE-2026-33078
creationtimestamp| type| source ---|---|--- 2026-04-24 05:18:33+00:00| published-proof-of-concept| Telegram/wieF1Cc87yTCfYHn4YFnWJ1bAgxO-EGJdmyMzATQMYWieSQ...