CVE-2026-59871

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:05+00:00| published-proof-of-concept| https://github.com/isaacs/node-tar/security/advisories/GHSA-w8wr-v893-vjvp 2026-07-22 12:01:14+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmqeztj2n...

CVE-2021-24508

creationtimestamp| type| source ---|---|--- 2026-07-20 21:00:05+00:00| seen| https://t.me/crackvaultde/1222 2026-07-20 21:00:05+00:00| published-proof-of-concept| https://t.me/crackvaultde/1223 2026-07-21 00:00:11+00:00| seen| https://t.me/crackvaultde/1222 2026-07-21 00:00:11+00:00|...

CVE-2026-44680

creationtimestamp| type| source ---|---|--- 2026-07-20 20:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94356 2026-07-21 00:00:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94356 2026-07-22 17:00:05+00:00| seen|...

JLSEC-2026-774 `sniff_csv` provides filesystem access even when `enable_external_access` is disabled in duckdb

Summary Content in filesystem is accessible for reading using sniffcsv, even with enableexternalaccess=false. Details During a pentest, a security researcher was able to access environment variable data and other system data by using the sniffcsv function, even though we set enableexternalaccess ...

Exploit for CVE-2026-63030

wp2shell-cf-bypass Independent PoC for the WordPress batch ro...

PT-2026-61704

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.27.0 Description An issue allows tokens with public-only permissions to perform write operations on private repositories. Recommendations Update to version 1.27.0...

MAL-2026-10782 Malicious code in zoom-widget-xss-poc-paresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12586eeb5b7eb0c053d90b49fd966fe32f05fe1f551cfd36120de1ce25b34fea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-53994

ProFTPD modsftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxppacketread function accepts the attacker-supplied 32-bit big-endian SFTP packet length without a minimum sanity check. A value of 0 causes an unsigned subtraction elsewhere in the read path to...

CVE-2022-24492

creationtimestamp| type| source ---|---|--- 2026-07-18 18:00:04+00:00| published-proof-of-concept| https://t.me/CVEhub/117 2026-07-19 00:00:10+00:00| published-proof-of-concept| https://t.me/CVEhub/117...

CVE-2022-2466

creationtimestamp| type| source ---|---|--- 2026-07-18 18:00:04+00:00| published-proof-of-concept| https://t.me/CVEhub/227 2026-07-19 00:00:10+00:00| published-proof-of-concept| https://t.me/CVEhub/227...

CVE-2022-24528

creationtimestamp| type| source ---|---|--- 2026-07-18 18:00:04+00:00| published-proof-of-concept| https://t.me/CVEhub/117 2026-07-19 00:00:10+00:00| published-proof-of-concept| https://t.me/CVEhub/117...

Exploit for Uncontrolled Resource Consumption in Siemens Simatic_S7-1500_Cpu_1518F-4_Pn\/Dp_Mfp_Firmware

just run python CVE-202...

Exploit for Use After Free in Linux Linux_Kernel

smt878u-ionstack-poc Pure-C, host-assisted re-root proof of c...

wp2shell

wp2shell Pre-authentication RCE exploit for WordPress Core RE...

CVE-2026-54567

creationtimestamp| type| source ---|---|--- 2026-07-17 22:35:08+00:00| published-proof-of-concept| https://github.com/jugmac00/flask-reuploaded/security/advisories/GHSA-937x-gpqr-72gg...

CVE-2026-55177

creationtimestamp| type| source ---|---|--- 2026-07-17 22:35:03+00:00| published-proof-of-concept| https://github.com/dfpc-coe/CloudTAK/security/advisories/GHSA-r95q-fp26-h3hc...

CVE-2026-54549

creationtimestamp| type| source ---|---|--- 2026-07-17 20:35:08+00:00| published-proof-of-concept| https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-45gf-fjxp-cjpq...

CVE-2026-54547

creationtimestamp| type| source ---|---|--- 2026-07-17 20:35:06+00:00| published-proof-of-concept| https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-2v2f-mvfg-ph56...

CVE-2026-54546

creationtimestamp| type| source ---|---|--- 2026-07-17 20:35:03+00:00| published-proof-of-concept| https://github.com/dfpc-coe/CloudTAK/security/advisories/GHSA-vqrw-qphh-p34v...

CVE-2026-54496

CVE-2026-54496 affects Zebrad and related crates (halo2_gadgets, orchard, zcash_primitives, zcashd) prior to fixed versions. Root cause: the variable-base scalar multiplication gadget uses assign_advice() to feed the base point in halo2_gadgets—without a copy constraint tying it to the real base—...