CVE-2023-3897

CVE-2023-3897 Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version...

CVE-2024-10355

Source code Petrol pump management software free download | SourceCodester Description SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, A vulnerability has been found that is rated as high risk, affecting some unknown functionality of the admin\invoice.php file,...

GOXLR-malware-family

This repo initially was my analysis and report for malware found at goxlr.net. Recently I uncovered they ALSO ran several other malware domains with varying malware variants, so far all stealers, and they are all a clone of "goxlr". So I am now reverse engineering every sample I can find from all...

CVE-2026-94142

creationtimestamp| type| source ---|---|--- 2026-09-21 05:57:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fzxp3dzmb4w2n 2026-09-21 06:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvyzvrnydn24 2026-09-21 06:04:01+00:00| seen|...

PixelDump_CVE-2016-8462

PixelDump - CVE-2016-8462 PixelDump CVE-2016-8462 was one of Pixel bootloader vulnerabilities found/worked out by beaups and Jon 'jcase' Sawyer. Disclaimer This is a dirty POC that was never intended to be released, I just copied another project, spent a few minutes adding a few lines, and sent i...

USN-8783-1: OpenJDK 25 vulnerabilities

Weber Leon discovered that the 2D component of OpenJDK 25 did not correctly handle user authentication. A remote attacker could possibly use this issue to cause a denial of service. CVE-2026-70906 Kai Aizen discovered that the Networking component of OpenJDK 25 did not correctly handle user...

RHEL 10 : curl (RHSA-2026:69125)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69125 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including...

RHEL 10 : tomcat update (Moderate) (RHSA-2026:69259)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69259 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: Apache Tomcat: Apache...

Linux Distros Unpatched Vulnerability : CVE-2026-54634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld sendraw command on TCP port 4532 reaches...

CVE-2026-94413: Exposure of Sensitive Information to an Unauthorized Actor

jshERP through 3.6 fails to redact password hashes in the /user/info endpoint, allowing authenticated users to retrieve unsalted MD5 password digests for any user. Attackers can request arbitrary user information by supplying user IDs to obtain password hashes usable for offline cracking or direc...

Vulnerability of the freerdp_image_copy_from_icon_data() function in the libfreerdp/codec/color.c file of the RDP client FreeRDP, which allows a hacker to disclose protected information or cause service failure.

The vulnerability of the freerdpimagecopyfromicondata function in the libfreerdp/codec/color.c file of the RDP client FreeRDP is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the sftp_symlink() function in the src/sftp.c component of the SSH2 protocol implementation library Libssh2 allows a attacker to disclose sensitive information or cause service failures.

The vulnerability of the sftpsymlink function in the src/sftp.c component of the SSH2 protocol implementation in the Libssh2 library is related to the issue of operations going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitiv...

The vulnerability of the functions raw_client_psk(), raw_server_psk(), raw_cookie_generate(), and raw_stateless_cookie_generate() in the OpenSSL library’s src/ssl/callbacks.rs module allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the functions rawclientpsk, rawserverpsk, rawcookiegenerate, and rawstatelesscookiegenerate in the OpenSSL library’s src/ssl/callbacks.rs module is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to...

CVE-2026-94494: Authorization Bypass Through User-Controlled Key

jshERP through 3.6 contains a tenant isolation bypass vulnerability that allows authenticated users to read other tenants' records via the GET /tenant/info endpoint. Attackers can iterate the primary key to enumerate and access sensitive tenant data including login names, validity dates, user...

CVE-2026-80984

creationtimestamp| type| source ---|---|--- 2026-09-20 18:10:05+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117304708418428139 2026-09-20 18:30:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvxtd7png22g...

CVE-2026-81656

creationtimestamp| type| source ---|---|--- 2026-09-20 18:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxrpuoc2p2m...

ntlmscout

root@kitploit: / // / / / / / / / / / / / / / / / / / / / // / / / / / // // / // / / // ///// // /////,// hunting exposed NTLM BoydHacks · github.com/BoydHacks ntlmscout One tool to squeeze every drop of information out of internet-exposed NTLM endpoints. An unauthenticated NTLM...

CVE-2026-87067

creationtimestamp| type| source ---|---|--- 2026-09-20 16:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxl2gjbcm22...

CVE-2026-80968

creationtimestamp| type| source ---|---|--- 2026-09-20 15:00:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvxhlowjpc2o 2026-09-20 15:00:08+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117303961377350404...

CVE-2026-80994

creationtimestamp| type| source ---|---|--- 2026-09-20 13:30:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvxckrps3w2l 2026-09-20 13:30:07+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117303607472673974...