PoC Archive PoC Archive

tag

Drive-By

Nhost Local MCP Server Unauthenticated CORS Bypass Leading to Full Project Takeover (CVE-2026-34200)
CVE-2026-34200 (GHSA-6c5x-3h35-vvw2) web Patched
CVE-2026-34200webCRITICAL 9.6Patched2026-07-05Chrome CSSFontFeatureValuesMap Use-After-Free (CVE-2026-2441) KEV EPSS 22%
CVE-2026-2441 web Unpatched
CVE-2026-2441webHIGH 8.8Unpatched2026-05-16