CVE-2026-29080

creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:37+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-vjr5-c9qv-hgm3...

CVE-2026-29090

creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6j7p-qjhg-9947...

CVE-2026-47077

creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:33+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jq4m-q6p2-8gwc...

CVE-2026-48791

creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:25+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-qqw8-7c2r-jxch...

CVE-2026-48593

creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:21+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6xh2-93p9-vqh4...

CVE-2026-48592

creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:18+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-389x-rgxr-8m33...

CVE-2026-48796

creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:16+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-85jm-cwp2-mvpv...

Exploit for CVE-2026-46331

CVE-2026-46331 pedit COW – Linux net/sched Packet-Editor Pag...

PT-2026-54929

Name of the Vulnerable Software and Affected Versions FatFs versions R0.16 and earlier Description A stack-based buffer overflow occurs in the f getlabel function. This issue arises because the exFAT label length XDIR NumLabel is trusted without enforcing the maximum limits defined by the...

MAL-2026-6697 Malicious code in @sudoughnym/enviro-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c1c204d0f458d13d7140f4b7a007d551095665a418e9146037be9a5b2b7957 @sudoughnym/[email protected] ships preinstall.js and postinstall.js lifecycle scripts that run automatically on npm install. Both scripts collect...

GHSA-QQW8-7C2R-JXCH Sigstore Java has a vulnerability with bundle verification of integratedTime

Summary Regression: Verification of integratedTime from Rekor V1 Log Entry against Fuclio Certificate validity was missing Details - PR 1008 erroneously removed verification of the integrated Rekor entry time against the Fulcio certificate. - PR 1185 re-added this verification with enhancements...

Exploit for CVE-2026-31694

FUSE readdir cache out-of-bounds write PoC Local proof of con...

exploitarium

If you wish to collaborate/discuss with me, contact me on discor...

0-day-PoC-Repo

If you wish to collaborate/discuss with me, contact me on discor...

Exploit for CVE-2026-43503

CVE-2026-43503 DirtyClone - PoC - SecurewithUmer POC of Dir...

exploitarium-fork

If you wish to collaborate/discuss with me, contact me on discor...

PYSEC-2026-477 PraisonAI has critical RCE via `type: job` workflow YAML

praisonai workflow run loads untrusted YAML and if type: job executes steps through JobWorkflowExecutor in jobworkflow.py. This supports: - run: → shell command execution via subprocess.run - script: → inline Python execution via exec - python: → arbitrary Python script execution A malicious YAML...

exploitarium

If you wish to collaborate/discuss with me, contact me on discor...

Malicious code in yandex-geobase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6219d513896736aee31ce33719d6ae2d1f5b03293ecdfe884d944bbb3eb99a [email protected] squats the internal-sounding name 'yandex-geobase' and ships a postinstall script that performs an HTTP GET to a hardcoded bare-...

MAL-2026-6551 Malicious code in anthropic-internal-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3bb04aee6f5f1d8768b7fd2173cd7c0cac18b5d83d6a83cf2be96a7512d8f7 Package name impersonates the Anthropic namespace and ships a preinstall hook scripts.preinstall = 'node index.js' that executes on every npm install...