CVE-2026-41432

creationtimestamp| type| source ---|---|--- 2026-04-22 14:14:22+00:00| published-proof-of-concept| https://github.com/QuantumNous/new-api/security/advisories/GHSA-xff3-5c9p-2mr4...

CVE-2026-44015

creationtimestamp| type| source ---|---|--- 2026-04-22 11:15:44+00:00| published-proof-of-concept| https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-wr32-99hh-6f35...

CVE-2024-46636

creationtimestamp| type| source ---|---|--- 2026-04-22 11:00:11+00:00| published-proof-of-concept| Telegram/s-aEaA57pf2NB0HZPPLWHP4Yhw-dX3wmzrDGItJzVg73M 2026-04-22 15:00:07+00:00| published-proof-of-concept| Telegram/UcOXFA8nSOttq6tnEv5GYCOJTlyoQN894TbAmd-Usu-nlPU...

CVE-2026-30368

creationtimestamp| type| source ---|---|--- 2026-04-22 04:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/81251 2026-04-22 07:00:11+00:00| published-proof-of-concept| Telegram/flQ3C1-JmbAO-ACsqq9hbC2ofmnZXXlyidDKRlLEERKO6c 2026-04-22 15:00:07+00:00| published-proof-of-concept|...

GHSA-9C4Q-HQ6P-C237

creationtimestamp| type| source ---|---|--- 2026-04-22 03:15:49+00:00| published-proof-of-concept| Telegram/NIz4Hq2d69t6fRYm4ZcrXWZIskbJKFNbLYHbUSSyCcR9Mzg...

GHSA-2X79-GWQ3-VXXM

creationtimestamp| type| source ---|---|--- 2026-04-22 03:15:49+00:00| published-proof-of-concept| Telegram/NIz4Hq2d69t6fRYm4ZcrXWZIskbJKFNbLYHbUSSyCcR9Mzg...

GHSA-XMJM-86QV-G226

creationtimestamp| type| source ---|---|--- 2026-04-22 01:18:49+00:00| published-proof-of-concept| Telegram/AsK9uQCoE0LPzwbkNe8abRZIpzVzCCIAKmN05DDH2W6pw...

GHSA-CCQ9-R5CW-5HWQ

creationtimestamp| type| source ---|---|--- 2026-04-22 01:18:49+00:00| published-proof-of-concept| Telegram/AsK9uQCoE0LPzwbkNe8abRZIpzVzCCIAKmN05DDH2W6pw...

GHSA-9X67-F2V7-63RW

creationtimestamp| type| source ---|---|--- 2026-04-22 01:18:49+00:00| published-proof-of-concept| Telegram/AsK9uQCoE0LPzwbkNe8abRZIpzVzCCIAKmN05DDH2W6pw...

GHSA-FFW8-FWXP-H64W

creationtimestamp| type| source ---|---|--- 2026-04-22 01:18:49+00:00| published-proof-of-concept| Telegram/AsK9uQCoE0LPzwbkNe8abRZIpzVzCCIAKmN05DDH2W6pw...

CVE-2026-40926

creationtimestamp| type| source ---|---|--- 2026-04-22 01:18:49+00:00| published-proof-of-concept| Telegram/AsK9uQCoE0LPzwbkNe8abRZIpzVzCCIAKmN05DDH2W6pw...

GHSA-5879-4FMR-XWF2

creationtimestamp| type| source ---|---|--- 2026-04-22 01:18:49+00:00| published-proof-of-concept| Telegram/AsK9uQCoE0LPzwbkNe8abRZIpzVzCCIAKmN05DDH2W6pw...

GHSA-793Q-XGJ6-7FRP

creationtimestamp| type| source ---|---|--- 2026-04-22 01:18:49+00:00| published-proof-of-concept| Telegram/AsK9uQCoE0LPzwbkNe8abRZIpzVzCCIAKmN05DDH2W6pw...

GHSA-FF5Q-CC22-FGP4

creationtimestamp| type| source ---|---|--- 2026-04-22 01:18:49+00:00| published-proof-of-concept| Telegram/AsK9uQCoE0LPzwbkNe8abRZIpzVzCCIAKmN05DDH2W6pw...

CVE-2026-26903

creationtimestamp| type| source ---|---|--- 2026-04-22 01:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/81236 2026-04-22 03:00:07+00:00| published-proof-of-concept| Telegram/4bKDS933-0b55qM7WdBrOYyTgLQnD9rI0Z1t-1c37mSxrw 2026-04-22 03:00:13+00:00| published-proof-of-concept|...

PT-2026-34555

Impact The staking contract accepts UpdateValidator transactions that set new voting key=Some... while omitting new proof of knowledge. this skips the proof-of-knowledge requirement that is needed to prevent BLS rogue-key attacks when public keys are aggregated. Because tendermint macro block...

PT-2026-34554

Impact HistoryTreeProof::verify panics on a malformed proof where history.len != positions.len due to assert eq!history.len, positions.len. The proof object is derived from untrusted p2p responses ResponseTransactionsProof.proof and is therefore attacker-controlled at the network boundary until...

Taint-Style Vulnerability Detection and Confirmation for Node.Js Packages Using LLM Agent Reasoning

The rapidly evolving Node$.$js ecosystem currently includes millions of packages and is a critical part of modern software supply chains, making vulnerability detection of Node$.$js packages increasingly important. However, traditional program analysis struggles in this setting because of dynamic...

Nimiq 安全漏洞

Nimiq is an open-source implementation of the Albatross protocol in Rust. Versions of Nimiq prior to 1.3.0 contained a security vulnerability. This vulnerability stemmed from a panic being triggered by HistoryTreeProof::verify in the nimiq-transaction when processing proofs with incorrect formats...

Nimiq 输入验证错误漏洞

Nimiq is an open-source implementation of the Albatross protocol in Rust. Prior to Nimiq 1.3.0, there was a vulnerability related to input validation. This vulnerability stemmed from the use of BitSet.len in SkipBlockProof::verify, which calculates the for slot checks. This process involves...