Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 GhostLock — ARM v7 PoC Trigger CVE-2026-43499:...

CVE-2026-54784

CoreWCF is a port of the service side of Windows Communication Foundation WCF to .NET Core. In version 1.9.0, CoreWCF SPNEGO SecurityContextToken negotiation can expose the proof key recovered from the RSTR when TransportWithMessageCredential with Windows client credentials and session...

CVE-2026-50197

creationtimestamp| type| source ---|---|--- 2026-07-08 22:35:12+00:00| published-proof-of-concept| https://github.com/zalando/skipper/security/advisories/GHSA-659f-rgp5-w4wf 2026-07-23 23:00:19+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mrdww77afc2f 2026-07-23 23:00:45+00:00...

CVE-2026-53600

creationtimestamp| type| source ---|---|--- 2026-07-08 22:35:10+00:00| published-proof-of-concept| https://github.com/dignifiedquire/async-tar/security/advisories/GHSA-35rm-7j9c-2f7m...

CVE-2026-49455

creationtimestamp| type| source ---|---|--- 2026-07-08 22:35:05+00:00| published-proof-of-concept| https://github.com/wakujs/waku/security/advisories/GHSA-75w3-gmqx-993q...

CVE-2026-54784 CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality

CoreWCF is a port of the service side of Windows Communication Foundation WCF to .NET Core. In version 1.9.0, CoreWCF SPNEGO SecurityContextToken negotiation can expose the proof key recovered from the RSTR when TransportWithMessageCredential with Windows client credentials and session...

CVE-2026-54784 CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality

CoreWCF is a port of the service side of Windows Communication Foundation WCF to .NET Core. In version 1.9.0, CoreWCF SPNEGO SecurityContextToken negotiation can expose the proof key recovered from the RSTR when TransportWithMessageCredential with Windows client credentials and session...

CVE-2026-54784

CoreWCF CVE-2026-54784 affects CoreWCF 1.9.0 where SPNEGO SecurityContextToken proof key recovered from the RSTR can be observed when using TransportWithMessageCredential with Windows client credentials, enabling impersonation of the Windows principal and decryption/forgery of WS‑SecureConversati...

CVE-2026-49471

creationtimestamp| type| source ---|---|--- 2026-07-08 21:42:03+00:00| seen| https://gist.github.com/alon710/faf458b17f73f7d92e775ebdde2a6b10 2026-07-08 22:35:03+00:00| published-proof-of-concept| https://github.com/oraios/serena/security/advisories/GHSA-37h2-6p4f-mp3q 2026-07-11 00:42:25+00:00|...

CVE-2026-54685

creationtimestamp| type| source ---|---|--- 2026-07-08 18:35:05+00:00| published-proof-of-concept| https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-7789-65hx-f26w...

CVE-2026-55599

creationtimestamp| type| source ---|---|--- 2026-07-08 18:35:03+00:00| published-proof-of-concept| https://github.com/phpseclib/phpseclib/security/advisories/GHSA-m557-wrgg-6rp4...

Exploit for Path Traversal in Helm

CVE-2...

MAL-2026-6961 Malicious code in waymo-waymax (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1ae76b937a20a588a9b5514b837bb86bd087aceb428216f0abbe8ff16e9da426 Package claims to perform dependency confusion PoC and exfiltrates multiple data, including full sensitive environment variables --- Category: MALICIOUS - The...

CVE-2026-53530

creationtimestamp| type| source ---|---|--- 2026-07-08 00:35:13+00:00| published-proof-of-concept| https://github.com/erweixin/RaTeX/security/advisories/GHSA-4hgp-59h5-gvrj...

CVE-2026-53531

creationtimestamp| type| source ---|---|--- 2026-07-08 00:35:11+00:00| published-proof-of-concept| https://github.com/erweixin/RaTeX/security/advisories/GHSA-4w5h-hx6r-28q7...

CVE-2026-53487

creationtimestamp| type| source ---|---|--- 2026-07-08 00:35:09+00:00| published-proof-of-concept| https://github.com/kite-org/kite/security/advisories/GHSA-gvhc-wv3v-7pf8...

CVE-2026-53553

creationtimestamp| type| source ---|---|--- 2026-07-08 00:35:05+00:00| published-proof-of-concept| https://github.com/zhenorzz/goploy/security/advisories/GHSA-4g5x-hcwm-82jw...

CVE-2026-53552

creationtimestamp| type| source ---|---|--- 2026-07-07 23:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq3sagiirf2r 2026-07-08 00:35:07+00:00| published-proof-of-concept| https://github.com/zhenorzz/goploy/security/advisories/GHSA-26rh-24rg-j3vv...

cve-poc-collection

CVE PoC Vulnerability Reproduction Collection This repository...

PYSEC-2026-1115 ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

Impact A cryptographic semantic binding flaw in ALTCHA libraries allows challenge payload splicing, which may enable replay attacks. The HMAC signature does not unambiguously bind challenge parameters to the nonce, allowing an attacker to reinterpret a valid proof-of-work submission with a modifi...