vulnerability-research

Vulnerability Research My corpus of publicly disclosed vulnerabilities and other findings...

pwneye

pwneye is a focused and portable offensive security tool for working with IP cameras that expose ONVIF and RTSP services, aiming to give security researchers and hackers an easy way to handle discovery, authentication testing, metadata collection, stream validation, recording, and follow-up actio...

[slackware-security] libpcap

New libpcap packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libpcap-1.10.7-i586-1slack15.0.txz: Upgraded. This libpcap release fixes a number of vulnerabilities. For more information, see:...

CVE-2026-27771

CVE-2026-27771 Donate...

Slackware Linux 15.0 libxml2 Vulnerability (SSA:2026-249-02)

The version of libxml2 installed on the remote host is prior to 2.11.9. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-249-02 advisory. New libxml2 packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the preceding description block...

OPENSUSE-SU-2026:11696-1 curl-8.22.0-1.1 on GA media

These are all security issues fixed in the curl-8.22.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11702-1 jsoup-1.23.2-1.1 on GA media

These are all security issues fixed in the jsoup-1.23.2-1.1 package on the GA media of openSUSE Tumbleweed...

APSB26-146 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves a critical vulnerability that could result in arbitrary code execution...

CVE-2026-80821

In the Linux kernel, the following vulnerability has been resolved: n...

UBUNTU-CVE-2026-80841

In the Linux kernel, the following vulnerability has been resolved: n...

PT-2026-86670

HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues...

UBUNTU-CVE-2026-80897

In the Linux kernel, the following vulnerability has been resolved: n...

CVE-2026-80907

In the Linux kernel, the following vulnerability has been resolved: d...

CVE-2026-80857

In the Linux kernel, the following vulnerability has been resolved: f...

OPENSUSE-SU-2026:11707-1 libopenslide-devel-4.0.1-1.1 on GA media

These are all security issues fixed in the libopenslide-devel-4.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

UBUNTU-CVE-2026-80866

In the Linux kernel, the following vulnerability has been resolved: t...

UBUNTU-CVE-2026-18707

An issue in MongoDB Server could allow an authenticated user, includin...

UBUNTU-CVE-2026-80842

In the Linux kernel, the following vulnerability has been resolved: n...

Adobe ColdFusion - Pre-Auth Remote Code Execution

Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-29300 info:...

MOVEit Transfer - Remote Code Execution

In Progress MOVEit Transfer before 2021.0.6 13.0.6, 2021.1.4 13.1.4, 2022.0.4 14.0.4, 2022.1.5 14.1.5, and 2023.0.1 15.0.1, a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database...