12852 matches found
CVE-2026-73422
creationtimestamp| type| source ---|---|--- 2026-08-12 22:35:16+00:00| published-proof-of-concept| https://github.com/withastro/astro/security/advisories/GHSA-4g3v-8h47-v7g6...
CVE-2026-73308
creationtimestamp| type| source ---|---|--- 2026-08-12 20:35:15+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-gh4h-34gr-87r7...
CVE-2026-52776
creationtimestamp| type| source ---|---|--- 2026-08-12 16:35:03+00:00| published-proof-of-concept| https://github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-h47f-gmjp-m7rr...
Exploit for CVE-2026-20349
cve-id Donate Support the maintenance of this project wit...
Malicious Package
Overview joule-sbx-poc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
ShieldBreak
ShieldBreak - Windows Defender 0day vulnerability Microsoft h...
RockyLinux 10 : nodejs-nodemon (RLSA-2026:52841)
The remote RockyLinux 10 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:52841 advisory. brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays CVE-2026-69152 Tenable has extracted the preceding description block...
react2shell-poc
React2Shell PoC CVE-2025-55182 Skrip Proof of Concept PoC...
Exploit for Missing Authentication for Critical Function in Coreweave Marimo
CVE-2026-39987-Poc Proof o...
CVE-PoC-Hub — Updated!
🔬 CVE-PoC-Hub — Curated Proof-of-Concept Exploits Working, verified PoC scripts for recent CVEs. Tested in lab environments. For security researchers, penetration testers, and CTF players. ⚠️ Disclaimer All PoCs are for educational and authorized testing only. Each exploit has been tested in...
MAL-2026-11431 Malicious code in @0xlr/dep-confusion-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15016319bdfd6f98a13cf4dcca7adad8ad4a97678bfaa77e2cb9b7068be0a435 Self-described dependency-confusion proof-of-concept targeting the @gojek/argus internal scope name. The package's postinstall hook only runs echo...
GHSA-HR7P-WG7R-HG9M Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted
Summary The capability policy denies the env.get and env.loaddotenv modules by default, with the stated reason that they read arbitrary host environment variables API keys, DSNs and are a secret-exfil risk. But the workflow engine's variable resolver expands $env.VAR for any environment variable...
Exploit for Deserialization of Untrusted Data in Facebook React
💀 React2Shell Exploit — CVE-2025-55182 ██████╗ ███████╗...
PT-2026-58886
Notepad++ is a free and open-source source code editor. Prior to 8.9.7, Notepad++ validates the backupFilePath attribute from session.xml with std::wstring::starts with against the expected backup directory without path normalization, allowing parent-directory sequences during snapshot-mode...
Malicious code in another-poc-by-tipsen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bd73ac39644da27df81fcbc6540647d0f13d77419a07997a8ca0a2baa6164e package.json declares a dependency safe-chain-test sourced from a tarball URL on an anonymous Cloudflare tunnel host...
Malicious code in tipsen-poc-again (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0977477bc81c656f52fb981657983580b411dda6d2c6766ba4d6a35fe4ae970 package.json declares its sole runtime dependency safe-chain-test as an HTTPS tarball URL pointing at a trycloudflare.com quick-tunnel host...
Malicious code in mcp-notes-server-poc-praetorian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a926b6d3f87c9242af654ce9379abe9e511aa6366efe7667822080968c66f65 On startup of the CLI/bin entry, [email protected] issues an unconditional HTTPS GET to the hardcoded host ft8swuagwwf6newi.ixx.s...
goby-poc-collection
Goby POC Collection Convert Goby vulnerability scan tools’...
MAL-2026-10015 Malicious code in poc-node-npm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b010fdf55177f6b23e6c31ef24746e64ea73a1783480a2e207c9bfddcc9e46e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...