20914 matches found
sigma-audit
Sigma Stack Audit Full-spectrum security audit combining five...
PT-2026-32505
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, an untrusted peer could crash a validator by publishing a signed tendermint proposal message where signer == validators.num validators...
PT-2026-32563
Name of the Vulnerable Software and Affected Versions nimiq/core-rs-albatross versions prior to 1.3.0 Description An unauthenticated p2p peer can cause the RequestMacroChain message handler task to panic. This occurs when a RequestMacroChain message is sent where the first locator hash on the...
AnyPoC: Universal Proof-Of-Concept Test Generation for Scalable LLM-Based Bug Detection
While recent LLM-based agents can identify many candidate bugs in source code, their reports remain static hypotheses that require manual validation, limiting the practicality of automated bug detection. We frame this challenge as a test generation task: given a candidate report, synthesizing an...
SkillCyberPunk
Security Vulnerability Scanner A Claude Code plugin that auto...
patchbot
patchbot patchbot is an AI-assisted security reviewer for p...
CVE-2026-40576
creationtimestamp| type| source ---|---|--- 2026-04-12 06:20:53+00:00| published-proof-of-concept| https://github.com/haris-musa/excel-mcp-server/security/advisories/GHSA-j98m-w3xp-9f56 2026-04-21 19:25:31+00:00| published-proof-of-concept| Telegram/ul8xPPBt1TpPWUc6F08s489cG5Kpdb6-6jXrljeUyK6zBrY...
CVE-2025-81110
creationtimestamp| type| source ---|---|--- 2026-04-12 03:00:07+00:00| published-proof-of-concept| Telegram/S964UnaAzc4FW7CZCUbAm7wNqkztcWapRmtGqRf9U9sXCaA 2026-04-12 03:00:11+00:00| published-proof-of-concept| Telegram/uShh7JQ-RKU8UrIGlZFZPf5aOBK5MJm9YT2tTiL1E4LyHaQ...
Exploit for Path Traversal in Gogs
Gogs RCE Exploit CVE-2025-8110 !Pythonhttps://img.shield...
CVE-2026-40481
creationtimestamp| type| source ---|---|--- 2026-04-11 21:55:30+00:00| published-proof-of-concept| https://github.com/monetr/monetr/security/advisories/GHSA-v7xq-3wx6-fqc2 2026-04-18 01:18:04+00:00| published-proof-of-concept| Telegram/u5f3Gra6Haipf3VJEB4yu-gwc95-0FLxvYnhbIvKSTo7fn8...
CVE-2026-3690
creationtimestamp| type| source ---|---|--- 2026-04-11 03:21:08+00:00| published-proof-of-concept| Telegram/jQJESTxAnDJkcV3IOr4zcsYk9e3AhwwItG0ad6oUuWk-UR8...
GHSA-VVJH-F6P9-5VCF
creationtimestamp| type| source ---|---|--- 2026-04-11 03:21:08+00:00| published-proof-of-concept| Telegram/jQJESTxAnDJkcV3IOr4zcsYk9e3AhwwItG0ad6oUuWk-UR8...
PT-2026-32122
Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a3921445252849126c6266b2, command injection in release update.yml workflow dispatch input allows arbitrary code execution. Commit fcba413f55dd47f8a3921445252849126c6266b2 patches the issue...
GHSA-FF24-4PRJ-GPMJ
creationtimestamp| type| source ---|---|--- 2026-04-10 23:27:06+00:00| published-proof-of-concept| Telegram/azLV8BVN7oG3TROgln-jCTMw5r1pt6lKfNlckhfBfrofK-k...
GHSA-WVHV-QCQF-F3CX
creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:55+00:00| published-proof-of-concept| Telegram/4ztR6gRcWXk6YwHnamVGk5ZiVkHzJEoA9sdr8vYKwKHNiwI...
GHSA-2943-CRP8-38XX
creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:55+00:00| published-proof-of-concept| Telegram/4ztR6gRcWXk6YwHnamVGk5ZiVkHzJEoA9sdr8vYKwKHNiwI...
GHSA-PCR3-6647-JH72
creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:55+00:00| published-proof-of-concept| Telegram/4ztR6gRcWXk6YwHnamVGk5ZiVkHzJEoA9sdr8vYKwKHNiwI...
GHSA-2943-CRP8-38XX goshs is Missing Write Protection for Parametric Data Values
Summary The SFTP command rename sanitizes only the source path and not the destination, so it is possible to write outside of the root directory of the SFTP. Details Here is the issue: go // helper.go:155-215 func cmdFileroot string, r sftp.Request, ip string, sftpServer SFTPServer error fullPath...