18345 matches found
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182-POC React2Shell POC Usage: bash sudo p...
CVE-2026-44179
creationtimestamp| type| source ---|---|--- 2026-06-21 19:03:12+00:00| published-proof-of-concept| https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-w56x-9778-rppx...
CVE-2026-12787
Technical details (affected product/version, root cause, remediation) are not provided in the supplied documents; monitor for updates.
CVE-2026-46488
creationtimestamp| type| source ---|---|--- 2026-06-20 16:48:06+00:00| published-proof-of-concept| https://github.com/motioneye-project/motioneye/security/advisories/GHSA-r3cw-c95m-wfh9...
CVE-2026-31978
creationtimestamp| type| source ---|---|--- 2026-06-20 16:47:55+00:00| published-proof-of-concept| https://github.com/motioneye-project/motioneye/security/advisories/GHSA-g9fx-5r4h-pcw3...
CVE-2026-32315
creationtimestamp| type| source ---|---|--- 2026-06-20 16:47:31+00:00| published-proof-of-concept| https://github.com/motioneye-project/motioneye/security/advisories/GHSA-rhgp-6wq6-9j67 2026-06-24 23:13:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp324me4xg2i...
CVE-2026-55488
creationtimestamp| type| source ---|---|--- 2026-06-20 16:47:06+00:00| published-proof-of-concept| https://github.com/motioneye-project/motioneye/security/advisories/GHSA-rw9q-97r9-8gvh 2026-07-13 22:00:16+00:00| seen| https://t.me/GithubRedTeam/91371 2026-07-14 00:00:32+00:00| seen|...
py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size
py7zr's Worker.decompress extracts archive entries without tracking total decompressed size. A crafted .7z file can exhaust disk or memory before the extraction completes. Measured: 15.6 KB archive → 100 MB output 6,556:1 ratio. Proof of concept: python import py7zr, tempfile, os create bomb:...
GHSA-M999-J542-5W3R Open Redirect Bypass in miniflux-v2
Summary The URL restrictions in miniflux-v2 can be bypassed by attackers, leading to an open redirect vulnerability. Details Normally, the redirect URL needs to be validated using IsRelativePath. There are some security measures in place, such as requiring relative paths, prohibiting host and...
CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality
Impact When the proof key recovered from the RSTR can be observed by a party that is not the legitimate client, that party can impersonate the authenticated Windows principal for the lifetime of the SCT default 10 hours and decrypt or forge any subsequent WS‑SecureConversation traffic that uses...
The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes
The Gentlemen ransomware-as-a-service RaaS operation is actively developing and maintaining a suite of endpoint detection and response EDR killers that it hands out to affiliates for impairing system defenses before deploying the encryptor. This mature portfolio of EDR-terminating tools is center...
CVE-2026-55691
creationtimestamp| type| source ---|---|--- 2026-06-19 18:22:24+00:00| published-proof-of-concept| https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/security/advisories/GHSA-7h5p-637f-jfr7...
CVE-2026-55692
creationtimestamp| type| source ---|---|--- 2026-06-19 18:22:09+00:00| published-proof-of-concept| https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/security/advisories/GHSA-5c7p-g73q-rpg5...
CVE-2026-55690
creationtimestamp| type| source ---|---|--- 2026-06-19 18:21:21+00:00| published-proof-of-concept| https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/security/advisories/GHSA-c29q-5xm7-5p62...
NextJS-Middleware-Bypass-PoC
MCID15795619: Next.js Middleware Bypass PoC Executive Summ...
CVE-2026-55447
creationtimestamp| type| source ---|---|--- 2026-06-19 13:25:18+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-ccv6-r384-xp75 2026-06-20 01:38:03+00:00| seen| https://bsky.app/profile/suriq.io/post/3moopuvtpix24 2026-06-26 19:07:07+00:00| seen|...
CVE-2026-55255
creationtimestamp| type| source ---|---|--- 2026-06-19 13:17:29+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-qrpv-q767-xqq2 2026-06-19 23:56:24+00:00| seen| https://bsky.app/profile/suriq.io/post/3mook75kc3e2d 2026-06-25 02:37:07+00:00| seen|...
CVE-2026-55446
creationtimestamp| type| source ---|---|--- 2026-06-19 13:09:48+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-qwqc-p3q8-wcg9...