Exploit for CVE-2026-44590

CVE-2026-44590 - sherlock-project/sherlock CI - RCE via pullr...

CVE-2026-44681

creationtimestamp| type| source ---|---|--- 2026-05-07 18:33:35+00:00| published-proof-of-concept| https://github.com/authlib/authlib/security/advisories/GHSA-r95x-qfjj-fjj2...

CVE-2026-38361

creationtimestamp| type| source ---|---|--- 2026-05-07 15:00:05+00:00| seen| https://t.me/GithubRedTeam/83224 2026-05-07 23:00:14+00:00| seen| Telegram/oaX1QMYGY6U2VLr3GbuHtJDEm63hpjXfJZtZ3v8CfS2o2Y 2026-05-08 03:00:06+00:00| seen| Telegram/xvoYgOFnUf5jFw65bW2FC7fcn6orx4l4LTjm0d68ZkOEzo 2026-05-0...

CVE-2026-45088

creationtimestamp| type| source ---|---|--- 2026-05-07 13:30:22+00:00| published-proof-of-concept| https://github.com/hahwul/dalfox/security/advisories/GHSA-35wr-x7v6-9fv2...

CVE-2026-45090

creationtimestamp| type| source ---|---|--- 2026-05-07 13:30:22+00:00| published-proof-of-concept| https://github.com/hahwul/dalfox/security/advisories/GHSA-2g4x-fq3j-cgq4...

CVE-2026-34847

creationtimestamp| type| source ---|---|--- 2026-05-07 11:30:53+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-34847.yaml...

CVE-2026-44346

creationtimestamp| type| source ---|---|--- 2026-05-07 10:39:30+00:00| published-proof-of-concept| https://github.com/bentoml/BentoML/security/advisories/GHSA-w2pm-x38x-jp44...

GHSA-Q6V9-R226-V65F

creationtimestamp| type| source ---|---|--- 2026-05-07 04:10:29+00:00| seen| https://gist.github.com/alon710/60dab51279f6b991c4df239e6fd329b2...

GHSA-FPF5-4JW8-67X8

creationtimestamp| type| source ---|---|--- 2026-05-07 02:10:29+00:00| seen| https://gist.github.com/alon710/fbdb426cde042168e0871c7f8c96676d...

CVE-2026-42459

creationtimestamp| type| source ---|---|--- 2026-05-07 02:09:58+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-585v-hcgf-jhfr...

GHSA-V2V4-37R5-5V8G vulnerabilities

Vulnerabilities for packages: tileserver-gl, renovate, sqlpad, kubeflow-katib, prism, pulumi, saf, lerna, npm, kubeflow-pipelines, opensearch-dashboards, langfuse, code-server...

CVE-2026-42082

creationtimestamp| type| source ---|---|--- 2026-05-07 01:56:13+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-vrrx-58h3-prmh...

CVE-2026-42081

creationtimestamp| type| source ---|---|--- 2026-05-07 01:53:47+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-77x9-rf64-92gv...

CVE-2026-44318

creationtimestamp| type| source ---|---|--- 2026-05-07 01:13:49+00:00| published-proof-of-concept| https://github.com/free5gc/free5gc/security/advisories/GHSA-27ph-8q4f-h7m7...

[SECURITY] Fedora 44 Update: gh-2.92.0-1.fc44

A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...

CVE-2026-8106: Improper Neutralization of Input During Web Page Generation

A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page that could allow credential theft. The redirectto query parameter on the /setup/unlock endpoint was reflected into an HTML attribute without proper sanitization, enabling an...

PT-2026-38594

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.21 Description A server-side request forgery SSRF issue exists in the notebook viewer. This occurs due to URL parser confusion between the validation layer and the HTTP request library, where the...

CVE-2026-8034: Server-Side Request Forgery (SSRF)

A server-side request forgery SSRF vulnerability was identified in the GitHub Enterprise Server notebook viewer that allowed an attacker to access internal services by exploiting URL parser confusion between the validation layer and the HTTP request library. The hostname validation used a differe...

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions

GitHub Actions is increasingly used to deploy LLM-based agents for repository-centric tasks such as issue triage, pull-request review, code modification, and release assistance. These agentic workflows extend traditional CI/CD automation with agentic capabilities but also create a new injection...

GitHub Enterprise Server security vulnerabilities

GitHub Enterprise Server is an open-source application developed by GitHub in the United States. It provides a scalable and easy-to-manage platform by allowing users to set their GitHub instances as virtual devices. Prior to version 3.21 of GitHub Enterprise Server, there was a security...