18543 matches found
cve-2026-poc-collection
CVE-2026 PoC Collection Report Collection date: May 19, 2...
CVE-2026-46562
creationtimestamp| type| source ---|---|--- 2026-05-21 15:02:43+00:00| published-proof-of-concept| https://github.com/yamcs/yamcs/security/advisories/GHSA-vmwp-vh32-rj75 2026-07-16 16:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqroqjqdci2o 2026-07-16 18:59:17+00:00|...
CVE-2026-46621
creationtimestamp| type| source ---|---|--- 2026-05-21 15:02:27+00:00| published-proof-of-concept| https://github.com/yamcs/yamcs/security/advisories/GHSA-2g95-6x5q-xjwj 2026-07-16 16:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqroqkzgbc2j 2026-07-16 19:19:19+00:00|...
CVE-2026-48170
creationtimestamp| type| source ---|---|--- 2026-05-21 13:04:48+00:00| published-proof-of-concept| https://github.com/thomaspoignant/scim-patch/security/advisories/GHSA-9m6g-wc8r-q59c 2026-06-23 01:47:50+00:00| seen| https://bsky.app/profile/suriq.io/post/3mowbt3vgh62r 2026-08-07 22:14:04+00:00|...
CVE-2026-5118
creationtimestamp| type| source ---|---|--- 2026-05-21 11:00:14+00:00| seen| Telegram/srrws2Goqnzo18NHrsMZQVnJlAuG4EubtN588eV7RqbvrI 2026-05-21 13:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmejs5dpod2l 2026-05-21 14:00:04+00:00| published-proof-of-concept|...
CVE-2026-48154
creationtimestamp| type| source ---|---|--- 2026-05-21 08:50:03+00:00| published-proof-of-concept| https://github.com/pilinux/gorest/security/advisories/GHSA-cpwg-x64r-rgwg...
Exploit for Authentication Bypass by Spoofing in Gitlab
CVE-2...
CVE-2026-47763
creationtimestamp| type| source ---|---|--- 2026-05-21 07:16:44+00:00| published-proof-of-concept| https://github.com/pdm-project/pdm/security/advisories/GHSA-ghq2-5c67-fprm...
CVE-2026-48119
creationtimestamp| type| source ---|---|--- 2026-05-21 03:14:40+00:00| published-proof-of-concept| https://github.com/nezhahq/nezha/security/advisories/GHSA-4g6j-g789-rghm...
PT-2026-42602
Impact A logic flaw in BlockInclusionProof::is block proven causes the function to return true without performing any cryptographic verification when get interlink hops yields an empty hop list. This occurs when the target block is at the election block position immediately preceding the election...
📄 BookStack 25.12.1 Denial of Service
BookStack version 25.12.1 suffers from a denial of service vulnerability. Exploit Title: BookStack 25.12.1 - Denial of Service Search Terms Resource Exhaustion Date: 2026-04-29 Exploit Author: Gabriel Rodrigues TEXUGO Vendor Homepage: https://www.bookstackapp.com Software Link:...
CVE-2026-48113
creationtimestamp| type| source ---|---|--- 2026-05-20 23:29:51+00:00| published-proof-of-concept| https://github.com/jpillora/chisel/security/advisories/GHSA-24fp-5v3p-rvpw 2026-08-03 21:50:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7nkjzej2prh6t...
CVE-2026-46705
creationtimestamp| type| source ---|---|--- 2026-05-20 22:48:47+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-hpv4-5h6f-wqr3 2026-06-10 23:00:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxsulhtsc2f...
poc-gitcliff-injection
po...
CVE-2026-30950
creationtimestamp| type| source ---|---|--- 2026-05-20 19:00:04+00:00| seen| https://t.me/GithubRedTeam/85076 2026-05-20 23:00:11+00:00| published-proof-of-concept| Telegram/8XMYNKwrAfZdRqR9ubtjXzgzOw6F5g1aYGu8o-Ioo35SIYg 2026-05-21 03:00:06+00:00| seen|...
drupal-sa-core-2026-004-lab
SA-CORE-2026-004 — Lab, PoC, and Post-mortem Drupal core SQ...
Keycloak: Insufficient verification proof scoping enables identity provider account linking attack and account compromise
A flaw was found in Keycloak. The cross-session verification proof is keyed only by local userId, idpAlias and is not bound to the upstream identity that was actually verified, so a second upstream account on the same IdP can consume it and get linked to the victim's local account...
GHSA-M6QJ-3MPP-57V8 Keycloak: Insufficient verification proof scoping enables identity provider account linking attack and account compromise
A flaw was found in Keycloak. The cross-session verification proof is keyed only by local userId, idpAlias and is not bound to the upstream identity that was actually verified, so a second upstream account on the same IdP can consume it and get linked to the victim's local account...
CVE-2026-9087
A flaw was found in Keycloak. The cross-session verification proof is keyed only by local userId, idpAlias and is not bound to the upstream identity that was actually verified, so a second upstream account on the same IdP can consume it and get linked to the victim's local account...