PT-2026-39411

Name of the Vulnerable Software and Affected Versions Next.js versions prior to 15.5.16 Next.js versions prior to 16.2.5 Description Applications utilizing Partial Prerendering via the Cache Components feature are susceptible to connection exhaustion. A crafted POST request to a server action can...

CVE-2026-44837

creationtimestamp| type| source ---|---|--- 2026-05-05 20:34:03+00:00| published-proof-of-concept| https://github.com/ViewComponent/viewcomponent/security/advisories/GHSA-hg3h-g7xc-f7vp...

CVE-2026-44836

creationtimestamp| type| source ---|---|--- 2026-05-05 20:33:59+00:00| published-proof-of-concept| https://github.com/ViewComponent/viewcomponent/security/advisories/GHSA-7f3r-gwc9-2995...

CVE-2026-44569

creationtimestamp| type| source ---|---|--- 2026-05-05 20:20:01+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-jxwr-g6r6-j3fx...

poc-react2shell-exploit

No d...

Exploit for CVE-2026-7482

CVE-2026-7482: Ollama Heap Out-of-Bounds Read 1-Day PoC Thi...

gix and gitoxide: unvalidated submodule name traverses out of .git/modules and redirects state() / open() to another repository

Summary attachments: pocs.zip Submodule names coming from .gitmodules are exposed as unvalidated names and are later reused to derive the submodule git directory as: /modules/ Because the submodule name is joined directly as a filesystem path component, a name such as ../../../escaped-target.git...

CVE-2026-42584

creationtimestamp| type| source ---|---|--- 2026-05-05 18:11:31+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3...

CVE-2026-42583

creationtimestamp| type| source ---|---|--- 2026-05-05 18:10:58+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6...

CVE-2026-42582

creationtimestamp| type| source ---|---|--- 2026-05-05 18:10:33+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw 2026-07-10 18:03:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcqcal5lt2e...

CVE-2026-42579

creationtimestamp| type| source ---|---|--- 2026-05-05 18:10:10+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm...

CVE-2026-42585

creationtimestamp| type| source ---|---|--- 2026-05-05 18:09:42+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv...

CVE-2026-42580

creationtimestamp| type| source ---|---|--- 2026-05-05 18:09:16+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723...

CVE-2026-42581

creationtimestamp| type| source ---|---|--- 2026-05-05 18:08:44+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9...

CVE-2026-42587

creationtimestamp| type| source ---|---|--- 2026-05-05 18:07:09+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv...

CVE-2026-42578

creationtimestamp| type| source ---|---|--- 2026-05-05 18:05:31+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr...

CVE-2026-44567

creationtimestamp| type| source ---|---|--- 2026-05-05 15:47:41+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-4vg5-rp28-gvjf...

CVE-2026-44566

creationtimestamp| type| source ---|---|--- 2026-05-05 15:44:20+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-9pgh-j74g-qj6m...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 Copy Fail Toolset This repository contains t...

Exploit for Double Free in Apache Http_Server

CVE-2026-23918-test This repository contains a Proof of Concep...