xss2shell-pro

XSS2Shell PRO v4.0 — WordPress XSS→RCE Automated Testing Platf...

Why API Discovery Is Critical for Modern AppSec Programs

Hidden API Estate And AI-speed Recon Are Reshaping Modern Application Risk Key Takeaways Unknown APIs create unattributed exposure , and such exposure rarely gets tested. Attackers build their own inventory through live reconnaissance; they do not wait for your spreadsheet. API discovery must pul...

DEBIAN-CVE-2026-53791

rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a...

CVE-2026-63424

During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges...

ECHO-4F46-4DDD-9DFD

Bulletin has no description...

CVE-2026-71194

creationtimestamp| type| source ---|---|--- 2026-08-13 10:21:09+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-71194...

PT-2026-71416

CWE-306: Missing Authentication for Critical Function...

PT-2026-71554

Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...

MINI-MWWF-6HXM-GPXW

Bulletin has no description...

CGA-6J7X-XXJ6-VQ4V

Bulletin has no description...

CVE-2026-67558

creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:10+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 2026-08-11 22:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/66wymlkohacrk...

CVE-2026-62738

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:51+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:21:46+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:48+00:00| seen|...

MINI-QQG9-JM6W-HV5Q

Bulletin has no description...

Oracle Linux 9 : ruby:3.3 (ELSA-2026-50828)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50828 advisory. ruby 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 rubygem-mysql2 0.5.5-3 - Disable tests on the 32bit platforms ix86...

Medixant RadiAnt DICOM

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to cause the application to crash if a maliciously crafted DICOM file is opened. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

@whalent/agent (0.3.291) potentially affected by unknown CVE via @whalent/agent-core (0.3.291)

@whalent/agent-core NPM version 0.3.291 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.291 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

Vulnerability-Assessment-Penetration-Testing-Engagement-X-Company

VAPT Report — Venus & Napping X Company Engagement Vulnerab...

Exploit for CVE-2026-12720

CVE-2026-12720 Proof-of-Concept PoC !Licensehttps://img...

Important: Red Hat Security Advisory: Migration Toolkit for Applications

A new version of Migration Toolkit for Applications MTA is now available. Migration Toolkit for Applications MTA accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. This solution provides insight throughout the adoption process, at both...

Acrisure KARR BT and DR-100

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to perform unauthorized vehicle control operations. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure...