18522 matches found
PYSEC-2026-2726 Open WebUI has Broken Access Control for Completions API
Summary Any user X can continue the conversation of any other user Y, as long as the Chat ID of Y is known. User X does not even need to be an admin to do so. Details A user just needs to use the API endpoint: /api/chat/completions with their own API key generated in OWUI and the Chat ID of anoth...
PYSEC-2026-2849 OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp
Summary A heap-buffer-overflow OOB read occurs in the istreamnonparallelread function in ImfContextInit.cpp when parsing a malformed EXR file through a memory-mapped IStream. A signed integer subtraction produces a negative value that is implicitly converted to sizet, resulting in a massive lengt...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-23415 PoC Proof...
GHSA-XX7V-HQXH-CJR9
creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:06+00:00| seen| https://t.me/securixykz/1284 2026-07-13 00:00:16+00:00| published-proof-of-concept| https://t.me/securixykz/1284...
CVE-2025-38193
creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:05+00:00| seen| Telegram/umj1CdMieItOpyXE7RZ7QaVSEKWw80YJbSGQfu2ETJpxg 2026-07-13 00:00:16+00:00| published-proof-of-concept| Telegram/umj1CdMieItOpyXE7RZ7QaVSEKWw80YJbSGQfu2ETJpxg...
RHSA-2026:2363
creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:05+00:00| seen| https://t.me/securixykz/1317 2026-07-13 00:00:16+00:00| published-proof-of-concept| https://t.me/securixykz/1317...
MAL-2026-10210 Malicious code in mcp-notes-server-poc-praetorian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a926b6d3f87c9242af654ce9379abe9e511aa6366efe7667822080968c66f65 On startup of the CLI/bin entry, [email protected] issues an unconditional HTTPS GET to the hardcoded host ft8swuagwwf6newi.ixx.s...
Malicious code in mcp-notes-server-poc-praetorian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a926b6d3f87c9242af654ce9379abe9e511aa6366efe7667822080968c66f65 On startup of the CLI/bin entry, [email protected] issues an unconditional HTTPS GET to the hardcoded host ft8swuagwwf6newi.ixx.s...
GHSA-PHRQ-PC6R-F6GH
creationtimestamp| type| source ---|---|--- 2026-07-12 13:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87589 2026-07-13 00:00:43+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87589...
CVE-2026-36670
creationtimestamp| type| source ---|---|--- 2026-07-12 10:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/88109 2026-07-13 00:00:46+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/88109...
GHSA-8MG2-6588-R4HW
creationtimestamp| type| source ---|---|--- 2026-07-12 09:01:47+00:00| published-proof-of-concept| https://t.me/bdufstecru/3229 2026-07-13 00:00:48+00:00| published-proof-of-concept| https://t.me/bdufstecru/3229...
CVE-2019-10760
creationtimestamp| type| source ---|---|--- 2026-07-12 07:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/88242 2026-07-13 00:00:49+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/88242...
CVE-2024-1065
creationtimestamp| type| source ---|---|--- 2026-07-12 06:00:04+00:00| published-proof-of-concept| https://t.me/cKure/16512 2026-07-12 07:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/88211 2026-07-13 00:00:49+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/882...
--POC
Goby POC Collection Convert Goby vulnerability scan tools’...
CVE-2026-54063
creationtimestamp| type| source ---|---|--- 2026-07-10 20:35:19+00:00| published-proof-of-concept| https://github.com/qax-os/excelize/security/advisories/GHSA-h69g-9hx6-f3v4 2026-07-10 23:37:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdcwqstcx2s 2026-07-11 00:55:06+00:0...
CVE-2026-54068
creationtimestamp| type| source ---|---|--- 2026-07-10 20:35:17+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-gcm7-57gf-953c 2026-07-11 04:41:43+00:00| seen| https://gist.github.com/alon710/5b22d6c437eabc82b89ba6fa8ccee27d...
CVE-2026-54071
creationtimestamp| type| source ---|---|--- 2026-07-10 20:35:04+00:00| published-proof-of-concept| https://github.com/funstory-ai/BabelDOC/security/advisories/GHSA-m8gf-v64p-gfmg...
CVE-2026-54088
creationtimestamp| type| source ---|---|--- 2026-07-10 20:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcxokhktk2v 2026-07-10 20:35:07+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-m93h-4hw7-5qcm 2026-07-11...
CVE-2026-54089
creationtimestamp| type| source ---|---|--- 2026-07-10 20:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcxoiwmmg2z 2026-07-10 20:35:14+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-xqp3-jq6g-x3qm 2026-07-11...