CVE-2026-44566

creationtimestamp| type| source ---|---|--- 2026-05-05 15:44:20+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-9pgh-j74g-qj6m...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 Copy Fail Toolset This repository contains t...

Exploit for Double Free in Apache Http_Server

CVE-2026-23918-test This repository contains a Proof of Concep...

CVE-2026-44737

creationtimestamp| type| source ---|---|--- 2026-05-05 10:55:40+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-fmg2-f5r9-24qc...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

Copy Fail ARM64 Research CVE-2026-31431 Analysis and ARM64...

CVE-2026-44588

creationtimestamp| type| source ---|---|--- 2026-05-05 05:57:59+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-25rp-h46x-2hjm...

CVE-2026-350234

creationtimestamp| type| source ---|---|--- 2026-05-05 03:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/82846 2026-05-05 09:00:04+00:00| seen| Telegram/YNBAQ7wY3nDaf6oW9SSpET1W5P-GdTLvm9dgaOEDkfw4Y...

PT-2026-38894

Summary attachments: pocs.zip Submodule names coming from .gitmodules are exposed as unvalidated names and are later reused to derive the submodule git directory as: /modules/ Because the submodule name is joined directly as a filesystem path component, a name such as ../../../escaped-target.git...

Generating Proof-Of-Vulnerability Tests to Help Enhance the Security of Complex Software

Developers create modern software applications Apps on top of third-party libraries Libs. When library vulnerabilities are reachable through application code, the applications can be vulnerable to software supply chain attacks. Prior work shows that developers often require concrete and executabl...

📄 Python-Multipart 0.0.22 Path Traversal

Python-Multipart version 0.0.22 suffers from a path traversal vulnerability. Exploit Title: Python-Multipart 0.0.22 - Path Traversal Date: 2026-02-23 Exploit Author: cardosource Vendor Homepage: https://github.com/Kludex/python-multipart Software Link: https://pypi.org/project/python-multipart/...

CVE-2026-44721

creationtimestamp| type| source ---|---|--- 2026-05-04 23:42:51+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-gf5m-wcrh-7928...

Arbitrary File Upload

Overview devcode-it/openstamanager is a management software for technical assistance and electronic invoicing Affected versions of this package are vulnerable to Arbitrary File Upload via the uploadmodules.php process. An attacker can upload arbitrary files by exploiting insufficient validation...

GHSA-6PJF-3R9X-M592 Distribution's tag deletion bypasses `storage.delete.enabled` configuration

Summary Tag deletion via the DELETE /v2//manifests/ endpoint bypasses the storage.delete.enabled: false configuration, allowing any API client to remove tags from repositories even when the operator has explicitly disabled deletion. Details When storage.delete.enabled is configured to false,...

CVE-2026-44310

creationtimestamp| type| source ---|---|--- 2026-05-04 16:54:58+00:00| published-proof-of-concept| https://github.com/sigstore/gitsign/security/advisories/GHSA-7c37-gx6w-8vc5...

CVE-2026-44429

creationtimestamp| type| source ---|---|--- 2026-05-04 14:34:31+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/registry/security/advisories/GHSA-rqv2-m695-f8j4...

CVE-2026-44427

creationtimestamp| type| source ---|---|--- 2026-05-04 12:25:03+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/registry/security/advisories/GHSA-v8vw-gw5j-w7m6...

CVE-2026-44670

creationtimestamp| type| source ---|---|--- 2026-05-04 07:03:18+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-2h64-c999-c9r6...

Exploit for CVE-2026-27778

PoC-SimulatorCVE-2026-27778...

CVE-2026-44009

creationtimestamp| type| source ---|---|--- 2026-05-03 21:34:48+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-9vg3-4rfj-wgcm 2026-07-09 07:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq753cw5on2d...

CVE-2026-44008

creationtimestamp| type| source ---|---|--- 2026-05-03 21:34:12+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-9qj6-qjgg-37qq 2026-07-09 07:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq75jncjll2q...