CVE-2026-14172

CVE-2026-14172 affects Rapid7 InsightVM, Nexpose, and the Insight Agent. The issue allows a local, low-privilege user to execute discovered executables during authenticated assessments due to lack of file ownership validation, enabling code execution as the scan credential (Scan Engine) or as roo...

CVE-2026-14172

Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential Scan Engine or as root/SYSTEM Insight Agent. Fixed in Scan Engine content...

CVE-2026-14172 Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation

Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential Scan Engine or as root/SYSTEM Insight Agent. Fixed in Scan Engine content...

EUVD-2026-48487

Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential Scan Engine or as root/SYSTEM Insight Agent. Fixed in Scan Engine content...

Pentest-Home-Lab

Pentest Home Lab A personal cybersecurity home lab for practi...

A Method of Risk Analysis and Threat Management Using Analytic Hierarchy Process

Efficient risk analysis and threat management are essential requirements of modern air defense AD systems. The paper is halfway between the analytic hierarchy process AHP and practical reasoning to model and analyze the risks and threats associated with military AD applications. The models are...

adPEAS v2.3.0

adPEAS v2 — Active Directory Privilege Escalation Awesome Scripts Comprehensive Active Directory security assessment — zero dependencies, single file, ready to go. What is adPEAS? adPEAS is a PowerShell-based security assessment tool that identifies misconfigurations, vulnerabilities, and privile...

Exploit for Command Injection in Php

Vulnerability Assessment and OSINT: CVE-2012-1823 My reposito...

Critical: Red Hat Security Advisory: Migration Toolkit for Applications

A new version of Migration Toolkit for Applications MTA is now available. Migration Toolkit for Applications MTA accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. This solution provides insight throughout the adoption process, at both...

CVE-2026-60427

CVE-2026-60427 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware, impacting versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability can be exploited by an unauthenticated attacker over the network via LDAP to compromise data integrity and confidentiality, with scope change pot...

Rockwell Automation 1734 POINT I/O (Update A)

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow for an attacker to cause a denial-of-service condition on the product. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network...

Rockwell Automation 1718-AENTR/1719-AENTR

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow for an attacker to cause a denial-of-service condition on the product. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network...

Tycon Systems TPDIN-Monitor-WEB2 (Update A)

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could result in an attacker accessing sensitive credentials, disrupting connected infrastructure, or manipulating physical equipment, which could present a physical safety risk. 2. RECOMMENDED PRACTICES CISA recommends users take...

Volume Is Not Risk: Making Sense of the “Vulnpocalypse”

A briefing for security leaders on separating vulnerability disclosure volume from exploitable risk in 2026...

cve-hunter

CVE Hunter v3 — Autonomous Penetration Testing Platform One...

Exploit for Eval Injection in Langflow

Langflow RCE Exploitation Framework CVE-2026-33017 · Auth...

monkey365 v0.98.5

Monkey365 is an open-source security assessment framework for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals, consultants, administrators, and incident responders identify misconfigurations, review cloud security posture, and evaluate environments against industry...

K000162319: Spring Framework vulnerability CVE-2026-41854

Security Advisory Description Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery SSRF attack. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through...

EUVD-2024-55672

HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this issue. You should review the contents of the cookie to determine its function...

A Control-Driven Framework for Secure SaaS Onboarding in Regulated Enterprises

As enterprises increasingly adopt Software-as-a-Service SaaS platforms for mission-critical functions, onboarding these services has emerged as a complex challenge extending well beyond procurement and basic security review. In regulated environments, SaaS onboarding must address multiple...