Exploit for CVE-2026-64638

🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit Behav...

Exploit for CVE-2026-64638

XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/s...

CVE-2026-62293

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the hidden scan command concatenates attacker-controlled Implementation Guide titles, profile titles, and source references into scan.html without escaping in Scanner.java. As...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182---Advanced-React-Server-Components-RCE-Exploit...

CVE-2026-19190

A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files x86\StableBit\Scanner\Service\Scanner.Service.exe of the component ScannerService. This manipulation causes permission issues. The attack is restricted to local execution. Th...

CVE-2026-19190 StableBit Scanner ScannerService Scanner.Service.exe permission

A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files x86\StableBit\Scanner\Service\Scanner.Service.exe of the component ScannerService. This manipulation causes permission issues. The attack is restricted to local execution. Th...

CVE-2026-19190

CVE-2026-19190 affects StableBit Scanner 2.6.13.4088, specifically the Scanner.Service.exe component under C:\Program Files (x86)\StableBit\Scanner\Service. The root cause is a permission manipulation in the ScannerService, enabling local privilege escalation. Exploitation maturity is shown as PR...

EUVD-2026-54354

A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files x86\StableBit\Scanner\Service\Scanner.Service.exe of the component ScannerService. This manipulation causes permission issues. The attack is restricted to local execution. Th...

Clam AntiVirus Toolkit 1.5.4

Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs ar...

SimpleHelp 5.5.x < 5.5.16 OIDC Authentication Bypass

The version of SimpleHelp running on the remote web server is 5.5.x prior to 5.5.16 or a 6.0 pre-release prior to 6.0 RC2. It is, therefore, affected by an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during...

SecureAI-Scan v0.8.0

SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...

@whalent/agent (0.3.255) potentially affected by unknown CVE via @whalent/agent-core (0.3.255)

@whalent/agent-core NPM version 0.3.255 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.255 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-70609 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +11 more potentially affected by CVE-2026-70604 via electron (>=40.0.0, <=40.8.5)

electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-70604 Source advisory: OSV:GHSA-V3J7-R9GQ-3GJW...

MAL-2026-12825 Malicious code in beaver-ui-split-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9758e9a6587fb3c1314e69b881d33a634fb0255cf6bdd3540ab74a533aacc1 On require'beaver-ui-split-view', index.js loads bootstrap.js, which selects an OS/arch-specific asset and fetches an opaque binary over HTTPS from...

CVE-2026-59881 vulnerabilities

Vulnerabilities for packages: kserve, dask-kubernetes, text-generation-inference, puppygraph-python, datahub-ingestion-fips, lmcache-cuda-12.8, awx, kserve-models-web-app, apache-beam-python-3.11-sdk, apache-beam-python-3.12-sdk, open-webui, py3-vllm-cuda-12.4,...

GHSA-MQ44-7P77-Q5H7 vulnerabilities

Vulnerabilities for packages: kserve, dask-kubernetes, text-generation-inference, puppygraph-python, datahub-ingestion-fips, lmcache-cuda-12.8, awx, kserve-models-web-app, apache-beam-python-3.11-sdk, apache-beam-python-3.12-sdk, open-webui, py3-vllm-cuda-12.4,...

CVE-2026-69244 vulnerabilities

Vulnerabilities for packages: kserve, vllm-cuda-13.2, dask-kubernetes, text-generation-inference, puppygraph-python, datahub-ingestion-fips, lmcache-cuda-12.8, awx, kserve-models-web-app, apache-beam-python-3.11-sdk, apache-beam-python-3.12-sdk, open-webui, py3-vllm-cuda-12.4,...

CVE-2026-69243 vulnerabilities

Vulnerabilities for packages: kserve, dask-kubernetes, text-generation-inference, puppygraph-python, datahub-ingestion-fips, lmcache-cuda-12.8, awx, kserve-models-web-app, apache-beam-python-3.11-sdk, apache-beam-python-3.12-sdk, open-webui, py3-vllm-cuda-12.4,...

GHSA-MFX4-HV73-Q22V vulnerabilities

Vulnerabilities for packages: kserve, dask-kubernetes, text-generation-inference, puppygraph-python, datahub-ingestion-fips, lmcache-cuda-12.8, awx, kserve-models-web-app, apache-beam-python-3.11-sdk, apache-beam-python-3.12-sdk, open-webui, py3-vllm-cuda-12.4,...