PoC Archive PoC Archive

tag

Data-Exposure

Critical
Django QuerySet/Q Object SQL Injection via `_connector` Kwarg (CVE-2025-64459)
CVE-2025-64459· Django ORM (QuerySet.filter() / Q object construction) patched
High
Realtime Collaboration Platform — CORS Misconfiguration Leading to Authenticated Data Exposure (CVE-2026-27579)
CVE-2026-27579 (GHSA-qh5m-p8jh-hx88)· realtime-collaboration-platform (karnop), backed by Appwrite unpatched