Exploit for SQL Injection in Drupal

python3 c...

PHANTOM

PHANTOM Autonomous Penetration Testing Framework Recon -...

vulnhunt-agent

Vulnerability Hunting Agent An LLM agent that reads code,...

gatekeeper_wan_poc_server

This is the...

CVE-2026-25879

creationtimestamp| type| source ---|---|--- 2026-05-27 00:56:21+00:00| published-proof-of-concept| https://github.com/langroid/langroid/security/advisories/GHSA-mxfr-6hcw-j9rq 2026-06-02 01:02:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnbfibhj362a 2026-07-09...

PT-2026-44052

Name of the Vulnerable Software and Affected Versions TeamSpeak 3 Server versions prior to 3.13.8 Description An issue exists in the clientek Handshake Handler component due to improper processing. A remote attacker can trigger a reachable assertion by manipulating the proof argument...

The Importance of Out-Of-Band Metadata for Safe Autonomous Agents: The Redpanda Agentic Data Plane

AI agents are increasingly expected to operate as digital employees: accessing enterprise data, making decisions, and taking actions autonomously. But agents are simultaneously less predictable than humans -- prone to hallucination, misinterpretation, and adversarial manipulation -- and more...

PT-2026-43683

Name of the Vulnerable Software and Affected Versions dbgate-serve versions prior to 7.1.9 Description An unauthenticated remote code execution issue exists in the database management tool. Attackers can achieve full system compromise without authentication or user interaction by injecting code...

GodSearch

󰓾 GodSearch v20.0 — THE SOVEREIGN 💀 Universal Exploit Sear...

CVE-2026-49459

creationtimestamp| type| source ---|---|--- 2026-05-26 16:03:05+00:00| published-proof-of-concept| https://github.com/cure53/DOMPurify/security/advisories/GHSA-r47g-fvhr-h676 2026-07-27 03:25:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlx4tdytx2i 2026-07-27...

CVE-2026-5394

creationtimestamp| type| source ---|---|--- 2026-05-26 14:10:25+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-r2f4-ff2p-xc64...

CVE-2026-45162

creationtimestamp| type| source ---|---|--- 2026-05-26 14:09:06+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-36fc-7wjg-mfvj 2026-07-18 20:00:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqx2jeapih2w...

CVE-2026-45703

creationtimestamp| type| source ---|---|--- 2026-05-26 14:02:51+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-332x-r494-54fq 2026-07-17 20:13:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquks76pzc27...

CVE-2026-45704

creationtimestamp| type| source ---|---|--- 2026-05-26 14:01:06+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-jwcc-gv4m-93x6...

CVE-2026-45260

creationtimestamp| type| source ---|---|--- 2026-05-26 14:00:10+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-wc7j-g8wx-m2qx 2026-07-17 22:12:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqurgm2p562q 2026-07-18 17:01:14+00:00|...

CVE-2026-49397

creationtimestamp| type| source ---|---|--- 2026-05-26 07:31:03+00:00| published-proof-of-concept| https://github.com/nezhahq/nezha/security/advisories/GHSA-vrmh-5mmx-hjwx...

CVE-2026-49396

creationtimestamp| type| source ---|---|--- 2026-05-26 07:31:03+00:00| published-proof-of-concept| https://github.com/nezhahq/nezha/security/advisories/GHSA-8qhj-4f8c-j8qg...

SEC-Bench Pro: Can Language Models Solve Long-Horizon Software Security Tasks?

Large language models LLMs now support automated software security tasks, including vulnerability discovery and proof-of-concept PoC generation. Existing benchmarks do not faithfully evaluate LLMs in real-world bug hunting scenarios because they rely on fuzzing harnesses, target-specific...

MAL-2026-4590 Malicious code in json-to-simple-graphql-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9998f4fd6abaaefcf6bd610ce0b558f0e1eb22c9d4dae07a111c27cc7f7322c The package contains a poc.js script that collects host reconnaissance data os.hostname, os.platform, output of whoami via childprocess and POSTs it ...

CVE-2026-28744

creationtimestamp| type| source ---|---|--- 2026-05-25 19:19:11+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-cc8w-r4qh-3v65 2026-07-05 17:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpw2h4rxvw27...