5572 matches found
Exploit for CVE-2026-85706
CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection...
Vulnerability handling is handled differently in GitLab Community and Enterprise editions.
GitLab has identified a vulnerability in both the Community and Enterprise editions of the platform. The vulnerability resides in the repository commit API, where path traversal is possible. As a result, unauthenticated users can read arbitrary files on the system. The root cause of the...
Metasploit Wrap Up: This One Goes to Sixteen!
This One Goes to Sixteen! Another banger from Metasploit with sixteen new modules, including ten exploit modules, with five on the CISA KEV list. Cisco, Papercut, Sonicwall, Jetbrains, and Langflow all have exploit modules, and not to be outdone, we even have a Metasploit scanner to watch the...
CVE-Project
CVE-Project CISA KEV vulnerability PoC collection — 393 CVEs...
CISA Malcolm
RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and...
CVE-2026-87020
creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:27+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-02 2026-09-10 20:01:51+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6ts5ifxy2y...
CVE-2026-38058
creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:24+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01...
CVE-2026-81824
creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:10+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01...
CVE-2026-81823
creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:07+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01 2026-09-11 04:02:58+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv7ooi23as2g...
CVE-2026-81822
creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:05+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01 2026-09-11 04:02:58+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv7ooi23as2g...
CVE-2026-81821
creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01 2026-09-11 04:02:58+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv7ooi23as2g...
CVE-2026-38056
creationtimestamp| type| source ---|---|--- 2026-09-10 16:07:33+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6gp7bwml2q 2026-09-10 16:15:12+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01 2026-09-11 16:07:58+00:00| seen|...
CVE-2026-78224
creationtimestamp| type| source ---|---|--- 2026-09-10 16:05:49+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6gm3rxy52o 2026-09-10 16:15:31+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01...
CVE-2026-82578
creationtimestamp| type| source ---|---|--- 2026-09-10 16:05:49+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6gm3rxy52o 2026-09-10 16:15:33+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01...
CVE-2026-82583
creationtimestamp| type| source ---|---|--- 2026-09-10 16:05:49+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6gm3rxy52o 2026-09-10 16:15:29+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01...
BlueMoon exploit kit turns Chrome and Windows flaws into attacks
BlueMoon, a shared Chrome and Windows exploit kit, shows why “patch later” is becoming a dangerous gamble. Security updates are easy to put off. The browser still opens, Windows still works, and choosing to relaunch your browser or restart your computer later can feel harmless. But a newly...
NextGen Healthcare Mirth Connect
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to exfiltrate date or cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize...
U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok
U.S. cybersecurity and intelligence agencies have accused China-based artificial intelligence AI companies of conducting "systematic extraction" of proprietary functionalities and capabilities of American frontier models through distillation attacks. The activity has been described as occurring a...
N-able N-central Pre-Auth RCE Flaw Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a maximum-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities KEV catalog, requiring Federal Civilian Executive Branch FCEB agencies to apply the fixes by September 11, 2026. The...
