20914 matches found
CVE-2026-34166
creationtimestamp| type| source ---|---|--- 2026-04-08 13:25:28+00:00| published-proof-of-concept| https://github.com/harttle/liquidjs/security/advisories/GHSA-mmg9-6m6j-jqqx...
Exploit for CVE-2026-34197
CVE-2026-34197 CVE-2026-34197 activemq PoC PoC for the Activ...
Exploit for CVE-2020-1938
CVE-2020-1938 Tomcat AJP Ghostcat Analysis This repository co...
GHSA-776C-MPJ7-JM3R
creationtimestamp| type| source ---|---|--- 2026-04-08 01:15:45+00:00| published-proof-of-concept| Telegram/5IJpGI-NXJK68kHyYMdgvSGJLM36tP-Nqj7HMsvD0ckNkg...
CVE-2026-39373
creationtimestamp| type| source ---|---|--- 2026-04-08 00:16:14+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-fjrm-76x2-c4q4...
File Browser discloses text file content via /api/resources endpoint bypassing Perm.Download check
Summary The resourceGetHandler in http/resource.go returns full text file content without checking the Perm.Download permission flag. All three other content-serving endpoints /api/raw, /api/preview, /api/subtitle correctly verify this permission before serving content. A user with download: fals...
GHSA-V9W4-GM2X-6RVF File Browser share links remain accessible after Share/Download permissions are revoked
When an admin revokes a user's Share and Download permissions, existing share links created by that user remain fully accessible to unauthenticated users. The public share download handler does not re-check the share owner's current permissions. Verified with a running PoC against v2.62.2 commit...
CVE-2026-41110
creationtimestamp| type| source ---|---|--- 2026-04-08 00:03:33+00:00| published-proof-of-concept| Telegram/9Mvn6NJqaAwIucsoyVvVXlRvi9eikTOkciRReXyDpmmZFQ...
📄 Dolibarr 23.0.0 dol_eval_standard() Whitelist Bypass
Dolibarr version 23.0.0 bypass proof of concept exploit. The whitelist mode of dolevalstandard does not apply $forbiddenphpstrings checks, and the function-call regex does not detect PHP dynamic callable syntax. This allows 'exec''cmd' to bypass all validation and reach eval. !/usr/bin/env python...
Exploit for Eval Injection in Langflow
CVE-2026-33017-Langflow-POC Proof-of-con...
CVE-2025-24818
creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w...
GHSA-7RHW-5MPV-GP4H
creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w...
GHSA-MH2Q-Q3FH-2475
creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w...
GHSA-V895-833R-8C45
creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w...
CVE-2026-34385
creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w...
CVE-2026-34387
creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w 2026-04-30 12:13:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mkplluaoik2f...
CVE-2026-33034
creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w...
GHSA-4GX2-PC4F-WQ37
creationtimestamp| type| source ---|---|--- 2026-04-07 21:22:30+00:00| published-proof-of-concept| Telegram/PsCoAl2rNCHfpa-IE94yjZNK4tjM6zifbqO0UkQOdEj8yI...