Exploit for CVE-2026-43494

SLEY — PinTheft PoC CVE-2026-43494 Proof o...

Exploit for CVE-2026-48188

CVE-2026...

CVE-2026-X4992-Uniswap-PoC

CVE-2026-X4992: Uniswap V3 SwapRouter Reentrancy Vulnerability...

exploits

Exploits Exploits and proof-of-concept code from the team at...

PT-2026-43209

Name of the Vulnerable Software and Affected Versions Nord VPN version 6.14.31 Description A denial of service issue exists that allows unauthenticated attackers to crash the application. This occurs when an excessively long string, such as a buffer of repeated characters, is submitted in the...

Exploit for CVE-2025-13673

CVE-2025-13673 — Tutor LMS SQL Injection Lab Unauthenticated...

CVE-2026-45617

creationtimestamp| type| source ---|---|--- 2026-05-24 13:22:51+00:00| published-proof-of-concept| https://github.com/harttle/liquidjs/security/advisories/GHSA-r7g9-xpmj-5fcq...

CVE-2026-45618

creationtimestamp| type| source ---|---|--- 2026-05-24 13:22:43+00:00| published-proof-of-concept| https://github.com/harttle/liquidjs/security/advisories/GHSA-gf2q-c269-pqgc 2026-08-11 20:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstiir6g362q...

CVE-2026-45357

creationtimestamp| type| source ---|---|--- 2026-05-24 13:22:38+00:00| published-proof-of-concept| https://github.com/harttle/liquidjs/security/advisories/GHSA-hh27-hf48-9f5q...

CVE-2026-46526

creationtimestamp| type| source ---|---|--- 2026-05-24 07:26:23+00:00| published-proof-of-concept| https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-g23j-2vwm-5c25...

Invincibility

CVE POC Collection Validated Proof-of-Concept exploits for CV...

Exploit for Heap-based Buffer Overflow in Microsoft

the bug is at DnsQueryRaw function to be specific, inside DnsRa...

CVE-2026-48126

creationtimestamp| type| source ---|---|--- 2026-05-24 00:08:50+00:00| published-proof-of-concept| https://github.com/xyproto/algernon/security/advisories/GHSA-jc3j-x6pg-4hmv...

CVE-2026-48988

creationtimestamp| type| source ---|---|--- 2026-05-23 23:47:27+00:00| published-proof-of-concept| https://github.com/markdown-it/markdown-it/security/advisories/GHSA-6v5v-wf23-fmfq 2026-06-17 22:39:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojeymb5ll2z...

npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

GitHub has rolled out new controls for npm to improve the security of the software supply chain, giving maintainers the ability to explicitly approve a release prior to the packages becoming publicly available for installation. Called staged publishing, the feature is now generally available on...

Exploit for CVE-2026-42945

CVE-2026-42945 - Critical NGINX RCE CVSS 9.2 Classifi...

CVE-2026-46702

creationtimestamp| type| source ---|---|--- 2026-05-23 07:53:38+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-wwx6-x28x-8259 2026-06-10 22:48:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxs62eub52l 2026-06-11 03:00:36+00:00| seen...

CVE-2026-44587

creationtimestamp| type| source ---|---|--- 2026-05-23 05:40:33+00:00| published-proof-of-concept| https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-7g26-2qgj-chfg 2026-06-17 03:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohfhrsnfp2j...

Exploit for Code Injection in Langflow

CVE-2026-33017 — Langflow Unauthenticated Remote Code Executio...

MAL-2026-4639 Malicious code in pg-expense-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d939ad3f0e8e9754bf3562f06692713a76d5c0f18ac13c956f9cb199ed0fbf On require/load, index.js unconditionally collects host identifiers hostname, username, platform, arch, cwd, pid and sends them as URL query paramete...