773 PoCs | 119 CISA KEV

tag

Aslr-Bypass

nginx PCRE Capture Variable Heap Overflow to Pre-Auth RCE (CVE-2026-42533)

CVE-2026-42533 web Patched

CVE-2026-42533webCRITICAL 9.8Patched2026-08-16MariaDB — Low-Privilege Remote Code Execution via ST_Area OOB Read + SYS_REFCURSOR Use-After-Free

MDEV-40328 (ST_Area OOB read); cursor-array UAF has no assigned CVE yet binary Unpatched

MDEV-40328binaryCRITICAL 8.8Unpatched2026-08-09GitLab Notebook-Diff Oj Parser Memory-Corruption Chain → Unauthenticated-Reach RCE (No CVE Yet)

N/A (no CVE assigned as of 2026-07-27 — researcher disclosure via depthfirst.com blog, covered by The Hacker News) web Unverified

N/AwebCRITICALUnverified2026-07-27PostgreSQL pgcrypto PGP Heap Overflow to Superuser Escalation — CVE-2026-2005

CVE-2026-2005 binary Unverified

CVE-2026-2005binaryCRITICALUnverified2026-07-05nginx PoolSlip × Rift Chained ASLR-Independent Remote Code Execution (CVE-2026-9256 / CVE-2026-42945)

CVE-2026-9256 ("PoolSlip"), chained with CVE-2026-42945 ("rift") web Unverified

CVE-2026-9256webCRITICALUnverified2026-07-05objdump DLX ELF Backend Out-of-Bounds Write (Crash-to-Calc)

None assigned as of 2026-07-03 binary Unverified

None assigned as of 2026-07-03binaryMEDIUMUnverified2026-07-03