20848 matches found
CVE-2026-54637
creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:14+00:00| published-proof-of-concept| https://github.com/dragonflyoss/dragonfly/security/advisories/GHSA-chwm-m7g7-685g...
CVE-2026-55426
creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:11+00:00| published-proof-of-concept| https://github.com/Linuxfabrik/monitoring-plugins/security/advisories/GHSA-798h-hpph-m24j...
CVE-2026-55501
creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:05+00:00| published-proof-of-concept| https://github.com/decolua/9router/security/advisories/GHSA-7cfm-pqrj-xgq7 2026-07-10 16:21:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqckkdhmae2e 2026-07-10 22:20:14+00:00|...
CVE-2026-55615
creationtimestamp| type| source ---|---|--- 2026-07-06 21:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz2fhfwf72r 2026-07-06 22:35:09+00:00| published-proof-of-concept| https://github.com/langroid/langroid/security/advisories/GHSA-2pq5-3q89-j7cc 2026-07-09...
CVE-2026-49439
creationtimestamp| type| source ---|---|--- 2026-07-06 18:35:13+00:00| published-proof-of-concept| https://github.com/openremote/openremote/security/advisories/GHSA-xj53-j257-hxvg...
CVE-2026-55787
creationtimestamp| type| source ---|---|--- 2026-07-06 18:35:08+00:00| published-proof-of-concept| https://github.com/flytohub/flyto-core/security/advisories/GHSA-794r-5rp2-fpg8 2026-10-14 23:41:10+00:00| seen| https://infosec.exchange/users/cve/statuses/117441905950975783...
CVE-2026-55786
creationtimestamp| type| source ---|---|--- 2026-07-06 18:35:06+00:00| published-proof-of-concept| https://github.com/flytohub/flyto-core/security/advisories/GHSA-h9f9-h6gm-wc85 2026-09-15 08:00:37+00:00| exploited|...
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems
A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it. Dubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD. The publ...
How to Evaluate an AI SOC Platform in 2026: 6 Capabilities That Separate Leaders from Bolt-On AI solutions
Building a shortlist for an AI SOC evaluation can be tough. SIEM, SOAR, and pureplay AI SOC vendors are all saying the same thing. But behind the identical label sit very different products, from chat assistants bolted onto a legacy SIEM to agent platforms that run detection, triage, investigatio...
Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages
Researchers found a flaw in Opera GX, the gaming-focused version of the Opera browser, that let a malicious website silently install a browser add-on and use it to lift specific data from the pages a victim visits. In a proof of concept, they reconstructed a signed-in user's full Gmail address fr...
Exploit for CVE-2026-25555
CVE-2026-2555...
Exploit for Observable Discrepancy in Intel Atom_C
🛡️ Spectre Variant 2 CVE-2017-5715 — Hardware Vulnerability...
Memory Allocation with Excessive Size Value
Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the decodeFromByteBuffer function due to improper handling of the numberOfSignificantValueDigits argument. An attacker can cause excessive memory consumption by supplying crafted input...
PoCHarness
...
EUVD-2026-41629
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check...
CVE-2026-26247 Gitea OAuth2 PKCE S256 challenges are not enforced during token exchange
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2026-26114 Chi su dung trong lab hoac he thong duoc phep...
CVE-2026-54431
A flaw was found in liboauth2. The Demonstrating Proof-of-Possession DPoP verifier incorrectly accepts a malformed DPoP proof. This proof contains private key material in its JSON Web Key JWK header, which should be rejected according to RFC 9449. This vulnerability could allow an attacker to...