35341 matches found
CVE-2026-54690
creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:16+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-954p-556p-r752 2026-07-28 23:19:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqkdikp762b 2026-07-29 14:31:27+00:00| seen|...
CVE-2026-54656
creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:13+00:00| published-proof-of-concept| https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-8m8r-38jm-f355 2026-07-29 13:32:26+00:00| seen| https://gist.github.com/alon710/9d9829ba6ab40face903027898206e80...
CVE-2026-54653
creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:08+00:00| published-proof-of-concept| https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-386q-5hp3-95m9 2026-07-28 23:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqlhcj5h62q 2026-07-29...
CVE-2026-54719
creationtimestamp| type| source ---|---|--- 2026-07-28 22:30:56+00:00| seen| https://gist.github.com/alon710/9b8006195456ffdcd967a102fe0db5d4 2026-07-28 22:35:03+00:00| published-proof-of-concept| https://github.com/goshs-labs/goshs/security/advisories/GHSA-rmxw-pq4x-3fvh 2026-07-29 00:00:29+00:0...
Malicious Package
Overview @joyfill/components is a malicious package. This package contains a supply chain compromise that executes a malicious payload immediately upon import of the vulnerable versions. When loaded, the package uses decentralized blockchain resolvers Tron, Aptos, BNB Smart Chain to fetch and...
GHSA-496M-5CG2-HW82 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-24W5-CQC3-H379 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-85RG-P3FR-XC2F
creationtimestamp| type| source ---|---|--- 2026-07-28 19:31:15+00:00| seen| https://gist.github.com/alon710/543be0bac4447ae891730d56e63e4ffd...
CVE-2026-54332
creationtimestamp| type| source ---|---|--- 2026-07-28 18:35:11+00:00| published-proof-of-concept| https://github.com/gopacket/gopacket/security/advisories/GHSA-g6v3-7xmc-w563...
CVE-2026-54603
creationtimestamp| type| source ---|---|--- 2026-07-28 18:35:08+00:00| published-proof-of-concept| https://github.com/ruby-oauth/oauth2/security/advisories/GHSA-pp92-crg2-gfv9 2026-07-28 20:31:48+00:00| seen| https://gist.github.com/alon710/76a4f64bf3e94be3974678cdc55c68d9...
CVE-2026-54635
creationtimestamp| type| source ---|---|--- 2026-07-28 18:31:38+00:00| seen| https://gist.github.com/alon710/49b30b9938ae88ab2f795a5eb6f5b0cc 2026-07-28 18:35:03+00:00| published-proof-of-concept| https://github.com/nessshon/tonapi/security/advisories/GHSA-3fcr-jvgp-7f58 2026-07-28 19:00:36+00:00...
CVE-2026-47427
creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:07+00:00| published-proof-of-concept| https://github.com/github/github-mcp-server/security/advisories/GHSA-w4q6-qw23-4rg7 2026-07-28 23:12:18+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrqjw7fxsn2l...
Disrupting supply chain attacks on npm and GitHub Actions
In the past year, there's been a pattern of supply chain attacks that target weaknesses in package repositories and CI/CD systems to quickly spread malware to hundreds of open source projects. This malware seeks to exfiltrate credentials both to broadly spread the attack, as well as for later...
CVE-2026-47427
GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first checking whether it is nil, so a completion/complete request with a missing or empty ref field triggers a nil pointer dereference and a Go...
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler
Summary A nil pointer dereference vulnerability in the GitHub MCP Server causes it to crash when receiving a malformed completion/complete request with missing or empty parameters. This allows any unauthenticated client to cause a complete denial of service. Details The CompletionsHandler functio...
Vulnera
Strix The open-source AI pentesting tool. Autonomous AI h...
CVE-2026-65893
creationtimestamp| type| source ---|---|--- 2026-07-28 14:00:06+00:00| seen| https://t.me/GithubRedTeam/95522 2026-07-28 21:00:05+00:00| seen| https://t.me/GithubRedTeam/95588 2026-07-29 00:00:08+00:00| seen| Telegram/Q1yPTM1HokNzfLpkFc6iUNC00bXozy1Qi57vCkUVkSVfE8 2026-07-29 00:00:12+00:00| seen|...
OpenEMR < 7.0.1 - Cross-Site Scripting Detection
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.""" from kittysploit import from lib.protocols.http.httpclient import...
nitely/spirit 0.12.3 - Open Redirect Detection
Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...
