773 PoCs | 119 CISA KEV

tag

Session-Hijack

WeGIA Authenticated Error-Based SQL Injection Exploitation Helper (CVE-2026-23723)

CVE-2026-23723 / GHSA-xfmp-2hf9-gfjp web Patched

CVE-2026-23723 / GHSA-xfmp-2hf9-gfjpwebHIGHPatched2026-07-05TypiCMS Core — Stored XSS via Unsanitized SVG File Upload (CVE-2026-27621)

CVE-2026-27621 (GHSA-xfvg-8v67-j7wp) web Patched

CVE-2026-27621webMEDIUMPatched2026-07-05Saleor Stored XSS via Unrestricted File Upload (CVE-2026-23499)

CVE-2026-23499 web Patched

CVE-2026-23499webHIGHPatched2026-07-05Realtime Collaboration Platform — CORS Misconfiguration Leading to Authenticated Data Exposure (CVE-2026-27579)

CVE-2026-27579 (GHSA-qh5m-p8jh-hx88) web Unverified

CVE-2026-27579webHIGH 7.4Unverified2026-07-05OpenCode Unauthenticated Local HTTP Server -> Remote Code Execution (CVE-2026-22812) EPSS 17%

CVE-2026-22812 (GHSA-vxw4-wv6m-9hhh) web Patched

CVE-2026-22812webHIGH 8.8Patched2026-07-05JupyterHub Cross-Origin Form POST XSRF Bypass (CVE-2026-40864)

CVE-2026-40864 (GHSA-m68r-v472-jgq9) web Patched

CVE-2026-40864webMEDIUMPatched2026-07-05AutoGPT Platform Chat Session IDOR / Session Hijack — CVE-2026-30950

CVE-2026-30950 (GHSA-q58p-v9r9-7gqj) web Patched

CVE-2026-30950webHIGH 7.1Patched2026-07-05Citrix NetScaler CitrixBleed 2 Session Token Disclosure (CVE-2025-5777) KEV RW EPSS 100%

CVE-2025-5777 web Patched

CVE-2025-5777webCRITICAL 9.3Patched2026-05-16