scodescanner

SCodeScanner SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod. Website for newreleases, new...

dahua-cve-research

大华 IP 摄像头 CVE 漏洞利用工具 ⚠️ 开发中 — 这些脚本基于已发布的 CVE 详情，需要针对易受攻击的设备进行进一步测试，以确认其完整功能。 针对大华 IP 摄像头四个严重漏洞的研究与概念验证（PoC）脚本。 ⚠️ 法律免责声明 root@kitploit: 本软件仅供教育和经授权的安全测试目的使用。 使用这些工具即表示您同意： 1. 您已获得测试目标系统的明确书面授权 2. 您不会将这些工具用于非法活动 3. 您对自己的行为承担全部责任 4. 作者不对任何滥用或损害承担责任 在大多数司法管辖区，未经授权访问计算机系统属于刑事犯罪。 涉及的 CVE CVE| CVSS| 类型|...

nmap-scan-results

Escaneo Nmap: Más de 200 vulnerabilidades encontradas Crítico: CVE-2023-38408 9.8, CVE-2024-38476 9.8, Slowloris DoS Informe completo...

T3-Technology-CPE-Advisories

T3 Technology CPE — 安全公告 发现 TrueOnline（泰国）部署的 T3 Technology CPE（ONU/路由器）设备存在多个严重漏洞。 漏洞列表 CVE ID| 严重性| 概述 ---|---|--- CVE-2026-35904| 4.3 中危| 通过 CGI 未经授权启用 Telnet CVE-2026-35905| 8.8 高危| 硬编码 root 凭据（superadmin） CVE-2026-35906| 9.6 严重| 通过调试 CGI 端点未经授权远程代码执行 评分说明： CVE-2026-35904 根据 CVSS v3.1 §3.5 对其...

React19-fix-vibecoders

React 19 & Next.js 安全修复提示（AI Agent 版） 🚨 严重安全漏洞 — CVE-2025-55182 与 CVE-2025-66478 本仓库包含可复用的提示词，帮助 AI 编码助手自动修复关键的 React/Next.js 安全漏洞。 📋 内容概览 SECURITYFIXPROMPT.md — 包含完整上下文的综合性详细提示 SECURITYFIXPROMPTSHORT.md — 简洁版本，便于快速分享 SECURITYPROMPTREADME.md — 详细使用指南 🚀 快速开始 选项 1：快速修复（推荐） 复制...

MCPwnfluence

MCPwnfluence — CVE-2026-27825 与 CVE-2026-27826 mcp-atlassian 中的两个严重漏洞，该服务器是生态系统中广受欢迎的 MCP 服务器之一（GitHub 星标 4.4K+，下载量 400 万+）。 由 Pluto Security 团队发现。 漏洞详情 CVE| CVSS| 类型| 描述 ---|---|---|--- CVE-2026-27825| 9.1 严重| 任意文件写入 / RCE| 附件下载中的路径遍历漏洞，允许向主机文件系统写入任意文件 CVE-2026-27826| 8.2 高危| 通过 Header 注入实现 SSRF...

CVE-2026-33453

Apache Camel 4.18.0 — CVE 安全评估 Apache Camel 4.18.0 中的三个严重漏洞，由独立发现并验证，附有可用的概念验证（PoC）利用代码。 CVE| 组件| 类型| CVSS| 结论 ---|---|---|---|--- CVE-2026-33453| camel-coap| 标头注入 → 远程代码执行| 10.0 严重| 可利用 CVE-2026-40473| camel-mina| 不安全反序列化 → 远程代码执行| 9.8 严重| 可利用 CVE-2026-40858| camel-infinispan| 不安全反序列化| 8.8 高危| 可...

PT-2026-88448

🚨 CRITICAL — CVE-2026-84390 A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, … CVSS 9.8 🔴 No patch yet Full analysis → https://t.co/s9VAua00U8 Fortinet CyberSecurity InfoSec...

Photon OS 5.0: Linux PHSA-2024-5.0-91-0245

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0245. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

APSB26-120 : Security update available for Adobe Campaign Classic

Adobe has released a security update for Adobe Campaign Classic. This update addresses critical vulnerabilities that could result in arbitrary code execution...

CLEANSTART-2026-NK33439 Security fixes in velero-plugin-for-csi 0.7.1-r4

Package velero-plugin-for-csi version 0.7.1-r4 fixes 3 vulnerabilities: CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

APSB26-114 : Security update available for Adobe Campaign Classic

Adobe has released a security update for Adobe Campaign Classic. This update addresses critical vulnerabilities that could result in arbitrary code execution and arbitrary file system read...

VMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)

Advisory ID: | VMSA-2026-0006.2 ---|--- Advisory Severity: | Critical CVSSv3 Range: | 2.7-9.8 Synopsis: | VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709 Issue date: | 2026-07-29...

PT-2026-65832

Name of the Vulnerable Software and Affected Versions VMware vCenter affected versions not specified Description An authentication bypass exists in the VMware Directory Service. A malicious actor with network access to vCenter can exploit this flaw to bypass authentication mechanisms and gain...

APSB26-87: Security update for Adobe Format Plugins

Adobe has released an update for Adobe Format Plugins. This update addresses critical vulnerabilities that could lead to arbitrary code execution...

APSB26-89 : Security update available for Adobe Bridge

Adobe has released a security update for Adobe Bridge. This update addresses critical vulnerabilities that could lead to privilege escalation and arbitrary code execution...

Vulnerabilities in Oracle PeopleSoft Enterprise

Oracle has identified 84 vulnerabilities in various modules of Oracle PeopleSoft Enterprise, including HCM Talent Acquisition Manager, In-Memory Project Discovery, FIN Expenses, SCM eProcurement, CC Common Application Objects, SCM Order Management, CRM Common Objects, and FIN Program Management,...

Vulnerabilities in Oracle Commerce Platform

Oracle has identified 39 vulnerabilities in Oracle Commerce Platform and Oracle Commerce Guided Search/Experience Manager, both versions 11.4.0. Some of these vulnerabilities have a CVSS score of 9 or higher. The remaining vulnerabilities have lower scores, and detailed information about them is...

KLA91168 Multiple vulnerabilities in Oracle VirtualBox

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability can be exploited remotely to cause denial of servic...

Begun, the Patch Wars have

Welcome to this week's edition of the Threat Source newsletter. We all knew, to some degree or another, that this summer was going to a hot mess. I don't mean FIFA drama or record setting heat waves. I mean the slow but steady momentum that AI frontier models were accruing for vulnerability...