CVE-2026-10823

creationtimestamp| type| source ---|---|--- 2026-06-29 12:00:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-10823.yaml 2026-06-30 00:00:03+00:00| confirmed|...

CVE-2026-8383

creationtimestamp| type| source ---|---|--- 2026-06-28 21:00:03+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-8383.yaml 2026-06-29 00:00:03+00:00| confirmed|...

GHSA-MPWR-8VM7-H73F vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-policyinsights, cert-manager, crossplane-provider-azure-operationsmanagement, crossplane-provider-azure-purview, crossplane-provider-azure-signalrservice, crossplane-provider-azure-web, nfpm, grafana-fips, crossplane-provider-azure-solutions...

GHSA-MPWR-8VM7-H73F vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, crossplane-provider-azure-authorization, crossplane-provider-family-azure, goreleaser, nuclei, external-secrets-operator, crossplane-provider-azure-storage, crossplane-provider-azure-sql, telegraf, cert-manager, gobuster,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: atlantis, flux-image-automation-controller, external-dns, pulumi-language-dotnet, flux-operator, docker-machine-driver-linode, witness, crossplane-provider-aws-rds, podman, kine, tekton-chains, flux-source-controller, zot, apko, crossplane-provider-aws-firehose,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: atlantis, flux-image-automation-controller, external-dns, pulumi-language-dotnet, flux-operator, witness, podman, kine, tekton-chains, flux-source-controller, zot, apko, sops, kaf, k8sgpt, cert-manager, loki, step, trivy-operator, kargo,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, external-dns, pulumi-language-dotnet, witness, podman, kine, zot, flux-source-controller, apko, kaf, cert-manager, loki, step, trivy-operator, gptscript, kubescape, argocd-image-updater, grype, istio, zarf, step-issuer, buildah,...

GO-2026-5473 Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei

Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei...

CVE-2026-55592

creationtimestamp| type| source ---|---|--- 2026-06-22 02:53:55+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-55592.yaml 2026-06-24 15:00:04+00:00| confirmed|...

CVE-2026-54236

creationtimestamp| type| source ---|---|--- 2026-06-21 23:10:21+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54236.yaml 2026-06-23 00:30:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow5iusltg2q 2026-06-24...

CVE-2026-54066

creationtimestamp| type| source ---|---|--- 2026-06-19 07:23:13+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54066.yaml 2026-07-10 20:35:23+00:00| published-proof-of-concept|...

CVE-2026-54069

creationtimestamp| type| source ---|---|--- 2026-06-17 04:18:47+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54069.yaml 2026-07-10 19:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcwdmy6ok2t 2026-07-10...

CVE-2025-61224

creationtimestamp| type| source ---|---|--- 2026-06-16 04:05:56+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-61224.yaml...

CVE-2026-50230

creationtimestamp| type| source ---|---|--- 2026-06-12 02:49:16+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-50230.yaml...

Nuclei 3.9.0

Nuclei is a modern, high-performance vulnerability scanner that leverages simple YAML-based templates. It empowers you to design custom vulnerability detection scenarios that mimic real-world conditions, leading to zero false positives...

CVE-2026-25527

creationtimestamp| type| source ---|---|--- 2026-06-05 01:02:06+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-25527.yaml...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via insufficient validation of query parameters used in JSP file creation. An attacker can execute arbitrary code on the server by supplying crafted query parameters that cause a JSP file containing...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Strapi

CVE-2026-27886 Strapi PoC For authorized security testing o...

Exploit-Databases

💥 Exploits Database & PoC Resources Koleksi exploit databas...

-GodSearch

󰓾 GodSearch v20.0 — THE SOVEREIGN 💀 Universal Exploit Sear...