18339 matches found
CVE-2026-50139
creationtimestamp| type| source ---|---|--- 2026-07-01 22:35:03+00:00| published-proof-of-concept| https://github.com/goshs-labs/goshs/security/advisories/GHSA-j48m-h7xq-2xpj...
CVE-2026-49857
creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:16+00:00| published-proof-of-concept| https://github.com/ymw0407/auth-fetch-mcp/security/advisories/GHSA-pvrj-8cg3-j5f8...
CVE-2026-49864
creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:13+00:00| published-proof-of-concept| https://github.com/butlerx/wetty/security/advisories/GHSA-p26j-h7wj-r568...
CVE-2026-49986
creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:11+00:00| published-proof-of-concept| https://github.com/cdeust/Cortex/security/advisories/GHSA-gvpp-v77h-5w8g...
CVE-2026-49987
creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:09+00:00| published-proof-of-concept| https://github.com/yamadashy/repomix/security/advisories/GHSA-9mm9-rqhj-j5mx 2026-07-15 21:05:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpmqxdh3a22...
CVE-2026-49989
creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:07+00:00| published-proof-of-concept| https://github.com/crate/crate/security/advisories/GHSA-2xv8-gjwh-fv8p...
CVE-2026-48816
creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:05+00:00| published-proof-of-concept| https://github.com/sigstore/sigstore-js/security/advisories/GHSA-xgjw-pm74-86q4 2026-07-27 02:50:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlv6kpck723 2026-07-27...
CVE-2026-48815
creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:03+00:00| published-proof-of-concept| https://github.com/sigstore/sigstore-js/security/advisories/GHSA-52v5-jr5w-gjxr 2026-07-15 12:00:58+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqoodrr2wi2t 2026-07-27...
sigstore-js has Insufficient Verification of Data Authenticity
sigstore-js derives a transparency-log timestamp from tlogEntries.integratedTime and uses it to validate certificate validity windows and satisfy timestampThreshold. For bundle v0.2, a tlog entry can be inclusionProof-only no signed inclusionPromise/set, and the inclusion proof path does not...
GHSA-XGJW-PM74-86Q4 sigstore-js has Insufficient Verification of Data Authenticity
sigstore-js derives a transparency-log timestamp from tlogEntries.integratedTime and uses it to validate certificate validity windows and satisfy timestampThreshold. For bundle v0.2, a tlog entry can be inclusionProof-only no signed inclusionPromise/set, and the inclusion proof path does not...
ExploitKnowdledgebase
poc2detect Defense-first pipeline that discovers GitHub proof...
Malicious code in npm-show-date-proof-strings (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884f2797ddf6247c906bb97e72b3c0891551b260980811d50c7211ab2ea0bbcf The package's postinstall.js runs on every npm install and collects the installer's username via whoami and os.userInfo, hostname os.hostname, platfo...
MAL-2026-6791 Malicious code in npm-show-date-proof-strings (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884f2797ddf6247c906bb97e72b3c0891551b260980811d50c7211ab2ea0bbcf The package's postinstall.js runs on every npm install and collects the installer's username via whoami and os.userInfo, hostname os.hostname, platfo...
CVE-2026-44840
creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:40+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q2m9-6jp9-c6mc...
CVE-2026-29080
creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:37+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-vjr5-c9qv-hgm3...
CVE-2026-29090
creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6j7p-qjhg-9947...
CVE-2026-47077
creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:33+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jq4m-q6p2-8gwc...
CVE-2026-48791
creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:25+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-qqw8-7c2r-jxch...