5572 matches found
CVE-2026-76461-Detection-Kit-
CVE-2026-76461 — Detection & Response Kit Detection, hunting, and remediation resources for CVE-2026-76461 , a critical SQL injection vulnerability in Cisco AsyncOS for Cisco Secure Email Gateway SEG. ⚠️ Disclaimer This repository contains defensive content only : Sigma rules, YARA rules, technica...
CVE-2025-0994
CVE-2025-0994 How does this detection method work? This Nuclei template extracts the version stored in the HTML body and based on the version we can determine whether the instance is vulnerable to CVE-2025-0994 or not. Patched version: 15.8.9 How do I run this script? 1. Download Nuclei from here...
ndaal_public_SBOM_Auditor
ndaal SBOM Auditor A single-binary, offline web application to investigate SBOM Software Bill of Materials files. Upload an SBOM or import a folder of them, analyse each with an ensemble of independent tools, review the normalised findings in one local UI, and export the result in eight formats. ...
CVE-2025-24990
CVE-2025-24990 — Windows Untrusted Pointer Dereference EoP Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. A privileged Windows component dereferences a pointer it receives from an untrusted context without validating it — giving a...
CVE-2025-10035
CVE-2025-10035 — Fortra GoAnywhere MFT License Servlet Deserialization RCE Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. A perfect-10 deserialization chain in Fortra GoAnywhere MFT: a forged license response signature lets an...
Vulnerability-scanner
With the increasing reliance of organizations on digital technologies to carry out communication, data storage, and business operations, the threats to cybersecurity have significantly increased. Given the critical role that endpoint security software plays in securing networks and systems, such...
CVE-2020-13671
CVE-2020-13671 RCE via File Upload — Drupal Core Software: Drupal Core 8.7.5 Affected: 7.x 7.78, 8.x 8.8.11, 8.9.x 8.9.9, 9.0.x 9.0.8 CVSS: 8.8 High CWE: CWE-434 — Unrestricted Upload of File with Dangerous Type CISA KEV: Yes — Known Exploited Vulnerability Advisory: SA-CORE-2020-012 What is Drup...
CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal
CVE-2025-8088: WinRAR’s Zero-Day Path Traversal — From Zero to Pwn 🗿 Intro – The “Old Friend” Just Got Caught Slipping WinRAR — the dusty classic everyone has installed but no one updates — just got slapped with a high-severity zero-day : CVE-2025-8088. Severity: CVSS v3.1 → 8.8 High Exploited in...
CVE-2023-49103
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Exigimos el regreso seguro de todos los ciudadanos que han sido tomados como rehenes por el grupo terrorista Hamás. No descansaremos hasta que todos los rehenes sean liberados y regresen a casa sanos y salvos. Puedes ayudar a traerlos de vuelta a...
cve-threat-intelligence-hub
cve · threat-intelligence · vulnerabilities · cisa-kev · epss ·...
SolarWinds Security Event Manager - Unauthenticated RCE
The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution. id: CVE-2024-0692 info: name: SolarWinds Security Event Manager - Unauthenticated RCE...
Autonomous OSS Threat Detection Via Taxonomy-Aligned LLMs
Open source software OSS ecosystems face growing threats from sophisticated supply chain attacks including typosquatting, dependency confusion, Trojan Source obfuscation, malicious build injection, and CI/CD pipeline poisoning. Existing detection approaches rely on signature-based tools and...
Only 26% of Detected CISA Known Exploited Vulnerabilities Were Fully Remediated
A recent Verizon study found that vulnerability exploitation became the most common initial access vector, appearing in 31%…...
reachproof
ReachProof Evidence-backed EU Cyber Resilience Act Article 14...
vulntriage
VulnTriage A self-hosted correlation layer that turns raw v...
CISA: CISA Election Report
From around 2019 to 2024, the Cybersecurity and Infrastructure Security Agency CISA conducted a set of technical and operational activities to evaluate the security of certain U.S. election systems. These activities, all carried out upon the request of system owners and operators, included direct...
CVE-2026-91018
creationtimestamp| type| source ---|---|--- 2026-09-22 16:09:45+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mw4mg67zwe2j 2026-09-22 16:15:26+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-02 2026-09-24 02:50:04+00:00| seen|...
React-2-Shell
This is a security exploit tool targeting CVE-2025-55182. It exploits a Remote Code Execution RCE vulnerability in React Server Components 🔥 CVE-2025-55182 Background CVE-2025-55182 also widely referred to as “React2Shell” is a critical remote code execution RCE vulnerability found in React Serve...
CISA: CVE Program: Establishing a Quality Era Framework
The Common Vulnerabilities and Exposures CVE Program is the global standard for identifying and cataloging publicly disclosed cybersecurity vulnerabilities. Through a collaborative, federated model and strong community engagement the program has grown to support the timely identification and...