773 PoCs | 119 CISA KEV

tag

Electron

Termix Stored XSS via Malicious SVG Upload -> LFI / Session Hijack (CVE-2026-22804 / GHSA-m3cv-5hgp-hv35)

CVE-2026-22804 (GHSA-m3cv-5hgp-hv35) web Patched

CVE-2026-22804webHIGHPatched2026-07-05Discord Desktop Client Uncontrolled Search Path Element / Local Code Execution (CVE-2026-0776)

CVE-2026-0776 (ZDI-CAN-27057, credit: Trend Micro Zero Day Initiative) binary Unverified

CVE-2026-0776binaryHIGH 7.3Unverified2026-07-05Lunar Client Modrinth Explore Raw-HTML to Local Launcher Execution Chain

None assigned as of 2026-07-03 binary Unverified

None assigned as of 2026-07-03binaryCRITICAL 3.1Unverified2026-07-03