12884 matches found
ShieldBreak bypasses Microsoft’s patch for earlier Defender flaw
Microsoft Defender’s latest patch bypass shows a familiar problem. A newly disclosed Microsoft Defender flaw called ShieldBreak shows that fixing one attack path doesn't always close every route to the same result. Microsoft has assigned ShieldBreak the identifier CVE-2026-69414 and confirmed it ...
Exploit for CVE-2026-41042
cve-2...
Exploit for CVE-2026-9830
CVE-2026-9830 BookingPress Pro API Assessment PoC This reposi...
Malicious code in twilio-hackerone-poc-afe6937c (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6790435b096935699da3234140accc517ced689047a68e698cae06288939eed9 On npm install, preinstall/postinstall scripts execute id, read environment variables including AWSLAMBDALOGSTREAMNAME, list /var/task, and read pare...
CVE-2026-72005
In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00libprobedev uses the full rt2x00libremovedev teardown for all probe failures. However, drvdata allocation and workqueue allocation can fail before intfwork,...
CVE-2026-55157
creationtimestamp| type| source ---|---|--- 2026-08-14 22:35:05+00:00| published-proof-of-concept| https://github.com/ooples/token-optimizer-mcp/security/advisories/GHSA-49mq-fc6q-3h46...
CVE-2026-55156
creationtimestamp| type| source ---|---|--- 2026-08-14 22:35:02+00:00| published-proof-of-concept| https://github.com/ooples/token-optimizer-mcp/security/advisories/GHSA-76pc-mqxp-3rq5...
CVE-2026-19846 TOTOLINK A800R firewall.so cstecgi.cgi setUrlFilterRules stack-based overflow
A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Exploit Development Lab Overview This pr...
CVE-2026-57897
creationtimestamp| type| source ---|---|--- 2026-08-14 12:45:14+00:00| seen| https://www.acn.gov.it/portale/w/gitea-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...
CVE-2026-58511
creationtimestamp| type| source ---|---|--- 2026-08-14 12:45:07+00:00| seen| https://www.acn.gov.it/portale/w/gitea-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...
CVE-2026-73611
creationtimestamp| type| source ---|---|--- 2026-08-14 07:00:36+00:00| seen| https://www.acn.gov.it/portale/w/file-browser-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita 2026-08-15 01:00:39+00:00| seen|...
CVE-2026-73613
creationtimestamp| type| source ---|---|--- 2026-08-14 07:00:34+00:00| seen| https://www.acn.gov.it/portale/w/file-browser-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita 2026-08-15 01:00:38+00:00| seen|...
CVE-2026-73612
creationtimestamp| type| source ---|---|--- 2026-08-14 07:00:34+00:00| seen| https://www.acn.gov.it/portale/w/file-browser-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita 2026-08-15 01:00:38+00:00| seen|...
CVE-2026-19790
A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...
Malicious code in @jacksher/install-exec-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2551a4d2336e3a5279c44673c1a18dbcebc62268773ee324c8a8e7bb8828423 package.json declares postinstall: node beacon.js. On every npm install, beacon.js unconditionally performs a DNS lookup, an HTTPS GET to...
MAL-2026-13972 Malicious code in @jacksher/install-exec-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2551a4d2336e3a5279c44673c1a18dbcebc62268773ee324c8a8e7bb8828423 package.json declares postinstall: node beacon.js. On every npm install, beacon.js unconditionally performs a DNS lookup, an HTTPS GET to...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Apache HTTP Server 2.4.49 Lab Reproduction o...
CVE-2026-73650
creationtimestamp| type| source ---|---|--- 2026-08-13 20:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msygo65aqv2u 2026-08-13 20:35:07+00:00| published-proof-of-concept| https://github.com/svg/svgo/security/advisories/GHSA-2p49-hgcm-8545...