19855 matches found
GHSA-HCM9-CH62-5727
creationtimestamp| type| source ---|---|--- 2026-04-09 01:26:43+00:00| published-proof-of-concept| Telegram/LyxiOFuM6k6JRrVhGkcWrU8R1Vj8dluNTy4xGDA54CBUTMw...
PT-2026-31607
Disclosure from our research team at Pentest-Tools.com "It's just dev mode" is doing a lot of heavy lifting here. FuelCMS has no enforced access control on the add git submodule installer function. Dev mode on, git over SSH enabled, a valid .git directory in the root: any authenticated user can...
GHSA-2VGC-VFH2-RW75
creationtimestamp| type| source ---|---|--- 2026-04-08 23:33:17+00:00| published-proof-of-concept| Telegram/twGuufhd-m5atHTFcaEGq3zekWSptxjF-dOJS4SFpStcSg...
GHSA-RPHV-H674-5HP2
creationtimestamp| type| source ---|---|--- 2026-04-08 23:32:54+00:00| published-proof-of-concept| Telegram/nyeqn3leA21ahM9eDPOdcOfg88eaiSN6Cc1j2Af2p1JdwTU...
GHSA-24JW-F244-QFPP
creationtimestamp| type| source ---|---|--- 2026-04-08 23:32:54+00:00| published-proof-of-concept| Telegram/nyeqn3leA21ahM9eDPOdcOfg88eaiSN6Cc1j2Af2p1JdwTU...
Exploit for CVE-2026-23398
cve-2026-...
GHSA-4852-V58G-6CWF
creationtimestamp| type| source ---|---|--- 2026-04-08 14:52:05+00:00| published-proof-of-concept| https://t.me/bdufstecru/3063 2026-04-17 05:18:08+00:00| published-proof-of-concept| Telegram/MfRD7ll8pGcGi3RGemlsgII30sQ-Y2l5bpdSqMK2BdYlKE...
CVE-2026-39882
creationtimestamp| type| source ---|---|--- 2026-04-08 14:39:01+00:00| published-proof-of-concept| https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-w8rr-5gcm-pp58...
CVE-2023-34044
creationtimestamp| type| source ---|---|--- 2026-04-08 13:54:44+00:00| published-proof-of-concept| https://t.me/poxek/6033...
CVE-2026-34166
creationtimestamp| type| source ---|---|--- 2026-04-08 13:25:28+00:00| published-proof-of-concept| https://github.com/harttle/liquidjs/security/advisories/GHSA-mmg9-6m6j-jqqx...
Exploit for CVE-2026-34197
CVE-2026-34197 CVE-2026-34197 activemq PoC PoC for the Activ...
Exploit for CVE-2020-1938
CVE-2020-1938 Tomcat AJP Ghostcat Analysis This repository co...
GHSA-776C-MPJ7-JM3R
creationtimestamp| type| source ---|---|--- 2026-04-08 01:15:45+00:00| published-proof-of-concept| Telegram/5IJpGI-NXJK68kHyYMdgvSGJLM36tP-Nqj7HMsvD0ckNkg...
CVE-2026-39373
creationtimestamp| type| source ---|---|--- 2026-04-08 00:16:14+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-fjrm-76x2-c4q4...
File Browser discloses text file content via /api/resources endpoint bypassing Perm.Download check
Summary The resourceGetHandler in http/resource.go returns full text file content without checking the Perm.Download permission flag. All three other content-serving endpoints /api/raw, /api/preview, /api/subtitle correctly verify this permission before serving content. A user with download: fals...
GHSA-V9W4-GM2X-6RVF File Browser share links remain accessible after Share/Download permissions are revoked
When an admin revokes a user's Share and Download permissions, existing share links created by that user remain fully accessible to unauthenticated users. The public share download handler does not re-check the share owner's current permissions. Verified with a running PoC against v2.62.2 commit...
CVE-2026-41110
creationtimestamp| type| source ---|---|--- 2026-04-08 00:03:33+00:00| published-proof-of-concept| Telegram/9Mvn6NJqaAwIucsoyVvVXlRvi9eikTOkciRReXyDpmmZFQ...
📄 Dolibarr 23.0.0 dol_eval_standard() Whitelist Bypass
Dolibarr version 23.0.0 bypass proof of concept exploit. The whitelist mode of dolevalstandard does not apply $forbiddenphpstrings checks, and the function-call regex does not detect PHP dynamic callable syntax. This allows 'exec''cmd' to bypass all validation and reach eval. !/usr/bin/env python...