20850 matches found
Exploit for CVE-2026-26555
🔍 Vulnerability Research A curated collection of in-depth vul...
Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public
Cisco has patched a bug in Unified Communications Manager that lets an unauthenticated attacker on the network write files to the box and, from there, climb to root. It is tracked as CVE-2026-20230, and proof-of-concept exploit code is already public. Cisco's PSIRT says it has not seen the flaw...
CVE-2026-6815
creationtimestamp| type| source ---|---|--- 2026-06-04 15:07:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87299 2026-06-04 21:00:04+00:00| seen| Telegram/hAogTto79Jt-ZuW6HpUeFLdQ6LmAiGRTnFY6xKkiQBfaYY...
CVE-2026-54458
creationtimestamp| type| source ---|---|--- 2026-06-04 14:49:58+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-8whc-2wmv-ww35 2026-07-15 22:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpq2bpz642l 2026-07-15 23:01:02+00:00|...
poc-exploit-github-actions-pull-request-write-vuln-demo
No d...
Use of Weak Hash
Overview Affected versions of this package are vulnerable to Use of Weak Hash in the mlflow.data.digestutils function. An attacker can compromise data integrity or cause unexpected behavior by exploiting the use of a weak hash algorithm during dataset digest computation. PoC python import pandas ...
Use of Weak Hash
Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Use of Weak Hash in the mlflow.data.digestutils function. An...
ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories
It got stupid again. The internet still feels held together with tape. Bad plugins, old bugs, fake tools, trusted apps doing shady things. Same mess, new wrapper. And now the weird stuff is normal. Forums go down and come back worse. Cheap hackers get better toys. AI starts breaking real systems...
Lack of transparency in Cisco Unified Communications Manager
Cisco has identified a vulnerability in Unified Communications Manager CM and Unified Communications Manager Session Management Edition CM SME. A malicious individual could exploit this vulnerability to carry out a Server-Side Request Forgery SSRF attack. Successful exploitation could result in t...
CVE-2026-54353
creationtimestamp| type| source ---|---|--- 2026-06-04 08:57:12+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-gfq7-5x4g-3xhf 2026-06-26 21:59:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7wwbufwl2l 2026-06-28 11:00:56+00:00|...
CVE-2026-54351
creationtimestamp| type| source ---|---|--- 2026-06-04 08:55:20+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-rgvg-3wpc-h44p 2026-06-26 21:52:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7wjwi2zx2m 2026-06-26 22:07:44+00:00|...
CVE-2026-53755
creationtimestamp| type| source ---|---|--- 2026-06-04 08:37:00+00:00| published-proof-of-concept| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-6qhc-x826-342c 2026-06-23 21:04:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moycht3map2r 2026-06-24 09:11:18+00:00...
CVE-2026-54096
creationtimestamp| type| source ---|---|--- 2026-06-04 05:54:39+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-3q2p-72cj-682c...
copra-theorem-prover (>=1.0.0, <=1.1.11), openvoiceplus (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2026-10783 via gradio (3.48.0)
gradio PYPI version 3.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - copra-theorem-prover =1.0.0, =0.0.1, =1.0.0, =1.1.6 Source cves: CVE-2026-10783 Source advisory: OSV:PYSEC-2026-211...
PT-2026-46888
Name of the Vulnerable Software and Affected Versions Shopware versions 6.7.3.0 through 6.7.10.0 Description An open redirect exists in the public SSO entry point at GET /api/oauth/sso/auth. When the endpoint is accessed without the expected SSO session state, the application uses the Referer...
CVE-2026-49144
creationtimestamp| type| source ---|---|--- 2026-06-03 21:38:40+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-8rpw-6cqh-2v9h 2026-06-03 23:10:53+00:00| seen| https://gist.github.com/alon710/f7bc5351b219485c56b8d23a92985578 2026-06-03 23:20:57+00:00| seen|...
CVE-2026-35904
creationtimestamp| type| source ---|---|--- 2026-06-03 17:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87170 2026-06-03 19:00:30+00:00| seen| Telegram/Ze-uNkS3kIdAJGbWQE6AK--K-SMWz6YbrFE-sDGCdUicf4Q 2026-06-03 21:00:04+00:00| seen|...
CVE-2026-35906
creationtimestamp| type| source ---|---|--- 2026-06-03 17:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87170 2026-06-03 21:00:04+00:00| seen| Telegram/kE9cLUPBGVlQM0eKet2aE5O-03aGK7deKtr42pLnxraAufk...
CVE-2026-35905
creationtimestamp| type| source ---|---|--- 2026-06-03 17:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87170 2026-06-03 21:00:04+00:00| seen| Telegram/kE9cLUPBGVlQM0eKet2aE5O-03aGK7deKtr42pLnxraAufk...