MAL-2026-7208 Malicious code in apple-mycelium-internal-research (npm)

--- -= Per source details. Do not edit below this line.=-...

PYSEC-2026-1516 Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever

A Server-Side Request Forgery SSRF vulnerability exists in the Web Research Retriever component in langchain-community langchain-community.retrievers.webresearch.WebResearchRetriever. The vulnerability arises because the Web Research Retriever does not restrict requests to remote internet...

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of a new campaign. The activity involves the exploitation of now-patched, critical security flaws in...

Exploit for CVE-2026-53359

cve-id ⚡ Simple Usage Use this project only in safe and...

PT-2026-55983

The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form 7 Form Field in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers ...

Exploit for Improper Input Validation in Apache Activemq

Apache ActiveMQ Classic — RCE Research Private research archi...

vuln-research-mcp

Vulnerability Research MCP Server A vulnerability research MC...

bak-exploitarium

https://discord.gg/WytKH65ZR join up for research, help, documen...

cve-pocs

CVE Proof-of-Concept Collection !GitHub starshttps://img...

Exploit for Improper Authentication in Oracle E-Business_Suite

cve-id ⚡ Simple Usage Use this project only in safe and...

exploitarium

If you wish to collaborate/discuss with me, contact me on discor...

0-day-PoC-Repo

If you wish to collaborate/discuss with me, contact me on discor...

exploitarium-fork

If you wish to collaborate/discuss with me, contact me on discor...

exploitarium

If you wish to collaborate/discuss with me, contact me on discor...

Exploit for CVE-2026-43503

DirtyClone DirtyClone is a C-based local privilege escalation...

PT-2026-53227

Name of the Vulnerable Software and Affected Versions WsgiDAV versions prior to 4.3.5 Description The sample MySQLBrowserProvider in wsgidav/samples/mysql dav provider.py concatenates the record key parsed from a request URL directly into SQL WHERE clauses. This occurs within the exists record by...

OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards

OpenAI on Friday released three versions of GPT-5.6 , called Sol, Terra, and Luna , as a limited preview to a small number of companies as part of an ongoing engagement with the U.S. government. While Sol is the latest flagship model and the most powerful, Terra strikes a balance between efficien...

Exploit for CVE-2026-46331

cve-id ⚡ Simple Usage Use this project only in safe and...

Exploit for Path Traversal in Rarlab Winrar

Amaranth Project A multi-stage backdoor implantation attack c...

GHSA-Q62C-H75R-2XHC ImageMagick: Policy Bypass can Trigger an Out-of-Memory condition

A missing check for maximum memory request in AcquireAlignedMemory could trigger an out-of-Memory condition. Credit Aisle Research Ze Sheng, Dmitrijs Trizna, Luigino Camastra, Guido Vranken...