20836 matches found
cve-poc-writeups
CVE PoC Write-ups A curated, consistently-structured librar...
CVE-2026-39902
creationtimestamp| type| source ---|---|--- 2026-08-26 05:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99731 2026-08-27 00:00:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99731...
EUVD-2026-66187
Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability. The internal cache storing JWT ID claims has a strict size limit, allowing attackers to evict legitimate entries by flooding the server with dummy requests, then replay intercepted valid DPoP proofs...
CVE-2026-80192
@better-auth/sso before 1.6.27 and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line contains two domain-ownership flaws. When domain verification is disabled, automatic organization assignment accepts unverified provider domains, allowing an authenticated organizati...
CVE-2026-41707
Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability. The internal cache storing JWT ID claims has a strict size limit, allowing attackers to evict legitimate entries ...
CVE-2026-41707 Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay
Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability. The internal cache storing JWT ID claims has a strict size limit, allowing attackers to evict legitimate entries ...
CVE-2026-41707
Spring Security 's DPoPProofJwtDecoderFactory is vulnerable to a cache-based replay attack . The internal cache that stores JWT ID claims has a strict size limit, which an attacker can exploit by flooding the server with dummy requests to evict legitimate entries, then replaying intercepted valid...
CVE-2026-75604
creationtimestamp| type| source ---|---|--- 2026-08-25 22:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99693 2026-08-26 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99693 2026-08-26 01:58:09+00:00| seen|...
CVE-2026-55637
creationtimestamp| type| source ---|---|--- 2026-08-25 20:35:33+00:00| published-proof-of-concept| https://github.com/GeiserX/genieacs-mcp/security/advisories/GHSA-cmwv-wf9p-p8wx 2026-08-26 12:32:44+00:00| seen| https://gist.github.com/alon710/f1f1abcaa50d05cc95fe39660771a422...
CVE-2026-55663
creationtimestamp| type| source ---|---|--- 2026-08-25 20:35:20+00:00| published-proof-of-concept| https://github.com/versatica/mediasoup/security/advisories/GHSA-p7x2-g5cq-fhmq 2026-08-26 08:09:19+00:00| seen| https://gist.github.com/alon710/61d0254c7e615b862b27242bae8aadcf...
CVE-2026-45018
creationtimestamp| type| source ---|---|--- 2026-08-25 20:35:07+00:00| published-proof-of-concept| https://github.com/Chainlit/chainlit/security/advisories/GHSA-w3fx-mc44-mf6j 2026-08-25 22:08:11+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwtfdjmag2e 2026-08-26...
CVE-2026-45019
creationtimestamp| type| source ---|---|--- 2026-08-25 20:35:05+00:00| published-proof-of-concept| https://github.com/Chainlit/chainlit/security/advisories/GHSA-hvfh-5mj3-5f3j 2026-08-25 22:31:31+00:00| seen| https://gist.github.com/alon710/cd9e29ae1307bd41a5c652b5662f31b2 2026-08-31...
CVE-2026-55571
creationtimestamp| type| source ---|---|--- 2026-08-25 18:35:16+00:00| published-proof-of-concept| https://github.com/djust-org/djust/security/advisories/GHSA-xx4j-w367-7247...
CVE-2026-55553
creationtimestamp| type| source ---|---|--- 2026-08-25 18:35:14+00:00| published-proof-of-concept| https://github.com/node-modules/urllib/security/advisories/GHSA-hq3h-g68c-hp78...
CVE-2026-55585
creationtimestamp| type| source ---|---|--- 2026-08-25 18:35:11+00:00| published-proof-of-concept| https://github.com/QWED-AI/qwed-verification/security/advisories/GHSA-q27q-98j4-9pfv...
CVE-2026-55640
creationtimestamp| type| source ---|---|--- 2026-08-25 18:08:31+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwfys2tk52p 2026-08-25 18:35:19+00:00| published-proof-of-concept| https://github.com/cbcoutinho/nextcloud-mcp-server/security/advisories/GHSA-8vh3-g2qg-2h2c 2026-08-2...
CVE-2026-55525
creationtimestamp| type| source ---|---|--- 2026-08-25 16:35:58+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-5r34-2g38-6569...
CVE-2026-55523
creationtimestamp| type| source ---|---|--- 2026-08-25 16:35:55+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-8hjw-25cg-g52h...