CVE-2026-45693

creationtimestamp| type| source ---|---|--- 2026-07-14 18:35:10+00:00| published-proof-of-concept| https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-cv65-7cg8-r623...

CVE-2026-45263

creationtimestamp| type| source ---|---|--- 2026-07-14 18:35:07+00:00| published-proof-of-concept| https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-2p5x-4jr6-x5jg...

CVE-2026-44300

creationtimestamp| type| source ---|---|--- 2026-07-14 18:35:05+00:00| published-proof-of-concept| https://github.com/opencost/opencost/security/advisories/GHSA-wmj8-9953-vff5...

CVE-2026-45710

creationtimestamp| type| source ---|---|--- 2026-07-14 18:35:03+00:00| published-proof-of-concept| https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-3x7p-v8hj-xh5m...

Exploit for OS Command Injection in Gnu Bash

CVE-2014-6271 - Shellshock PoC Summary CVSS 10.0. Bash imp...

CVE-2026-47677

creationtimestamp| type| source ---|---|--- 2026-07-13 23:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkvb4cg3r2v 2026-07-14 00:35:03+00:00| published-proof-of-concept| https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-c67f-gmxw-mj93...

Malicious code in n8n-nodes-rce-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c735b8bb20a784446d7a0a4c49369ca3f2696bfe2e8a004799c763fc0a064aca On require by n8n module-load, top-level code in dist/RceNode.node.js, the package runs a shell command via execSync'/bin/sh',.... The command is tak...

MAL-2026-10503 Malicious code in n8n-nodes-rce-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c735b8bb20a784446d7a0a4c49369ca3f2696bfe2e8a004799c763fc0a064aca On require by n8n module-load, top-level code in dist/RceNode.node.js, the package runs a shell command via execSync'/bin/sh',.... The command is tak...

CVE-2026-49259

creationtimestamp| type| source ---|---|--- 2026-07-13 18:35:07+00:00| published-proof-of-concept| https://github.com/nukeviet/nukeviet/security/advisories/GHSA-w2w5-w2pw-r929...

CVE-2026-54064

creationtimestamp| type| source ---|---|--- 2026-07-13 18:35:05+00:00| published-proof-of-concept| https://github.com/nukeviet/nukeviet/security/advisories/GHSA-465g-4q99-5x86...

CVE-2026-55372

creationtimestamp| type| source ---|---|--- 2026-07-13 18:35:03+00:00| published-proof-of-concept| https://github.com/nukeviet/nukeviet/security/advisories/GHSA-4chg-4752-w88r...

PYSEC-2026-2972 py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size

py7zr's Worker.decompress extracts archive entries without tracking total decompressed size. A crafted .7z file can exhaust disk or memory before the extraction completes. Measured: 15.6 KB archive → 100 MB output 6,556:1 ratio. Proof of concept: python import py7zr, tempfile, os create bomb:...

PYSEC-2026-2726 Open WebUI has Broken Access Control for Completions API

Summary Any user X can continue the conversation of any other user Y, as long as the Chat ID of Y is known. User X does not even need to be an admin to do so. Details A user just needs to use the API endpoint: /api/chat/completions with their own API key generated in OWUI and the Chat ID of anoth...

PYSEC-2026-2849 OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp

Summary A heap-buffer-overflow OOB read occurs in the istreamnonparallelread function in ImfContextInit.cpp when parsing a malformed EXR file through a memory-mapped IStream. A signed integer subtraction produces a negative value that is implicitly converted to sizet, resulting in a massive lengt...

GHSA-XX7V-HQXH-CJR9

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:06+00:00| seen| https://t.me/securixykz/1284 2026-07-13 00:00:16+00:00| published-proof-of-concept| https://t.me/securixykz/1284...

CVE-2025-38193

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:05+00:00| seen| Telegram/umj1CdMieItOpyXE7RZ7QaVSEKWw80YJbSGQfu2ETJpxg 2026-07-13 00:00:16+00:00| published-proof-of-concept| Telegram/umj1CdMieItOpyXE7RZ7QaVSEKWw80YJbSGQfu2ETJpxg...

RHSA-2026:2363

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:05+00:00| seen| https://t.me/securixykz/1317 2026-07-13 00:00:16+00:00| published-proof-of-concept| https://t.me/securixykz/1317...

MAL-2026-10210 Malicious code in mcp-notes-server-poc-praetorian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a926b6d3f87c9242af654ce9379abe9e511aa6366efe7667822080968c66f65 On startup of the CLI/bin entry, [email protected] issues an unconditional HTTPS GET to the hardcoded host ft8swuagwwf6newi.ixx.s...

Malicious code in mcp-notes-server-poc-praetorian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a926b6d3f87c9242af654ce9379abe9e511aa6366efe7667822080968c66f65 On startup of the CLI/bin entry, [email protected] issues an unconditional HTTPS GET to the hardcoded host ft8swuagwwf6newi.ixx.s...

GHSA-PHRQ-PC6R-F6GH

creationtimestamp| type| source ---|---|--- 2026-07-12 13:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87589 2026-07-13 00:00:43+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87589...