CVE-2026-64386

creationtimestamp| type| source ---|---|--- 2026-07-27 06:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmaklkyki2e 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-64384

creationtimestamp| type| source ---|---|--- 2026-07-27 06:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmakkgqiq2z 2026-09-02 04:45:25+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260902 2026-09-15 12:46:43+00:00|...

CVE-2026-64319

creationtimestamp| type| source ---|---|--- 2026-07-27 06:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrma7swnmd2u 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...

EUVD-2026-49078

The Smart Manager WordPress plugin before 8.92.0 does not properly encode a post field before rendering it into an HTML attribute in its management grid, allowing users with the Contributor role or above to inject JavaScript that executes in the browser session of an administrator who views the...

CVE-2026-14203 Smart Manager < 8.92.0 - Contributor+ Stored XSS via Post Title

The Smart Manager WordPress plugin before 8.92.0 does not properly encode a post field before rendering it into an HTML attribute in its management grid, allowing users with the Contributor role or above to inject JavaScript that executes in the browser session of an administrator who views the...

CVE-2026-48366

creationtimestamp| type| source ---|---|--- 2026-07-27 03:42:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrly4c3mvq2u...

CVE-2026-59534: Missing Authorization

Unauthenticated Broken Access Control in Post My CF7 Form = 6.2.0 versions...

Xerox Printers Loop with Unreachable Exit Condition (CVE-2022-23968)

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as so...

RedAmon 6.2.2

An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merged patch, with human oversight at every...

CVE-2026-14568: Improper Authentication

The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8 does not correctly verify ownership before deleting an attachment, allowing unauthenticated attackers to permanently delete author-less attachments su...

emp3r0r v4.8.0

emp3r0r Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents. What is emp3r0r? emp3r0r is an advanced, zero-trust post-exploitation framework and command & control C2 system designed for Linux and Windows target environments. Built from the...

CVE-2026-16473

creationtimestamp| type| source ---|---|--- 2026-07-26 20:01:28+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrl6d4xcee2x...

Exploit for Missing Authentication for Critical Function in Cpanel

cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...

Malicious Package

Overview 11ty-simple-page-post-creator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Production ML-DSA Verification in 350 Lines of Python

I don’t do a lot of Python, at least not in my most recent life.1 However, I happen to have just written a production ML-DSA verifier in pure Python. It’s 350 lines of code plus many more of tests, it supports all parameter sets, and I am pretty satisfied with it. You can fetch it as mldsa from...

CVE-2026-10681

creationtimestamp| type| source ---|---|--- 2026-07-26 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mrkcbsxd2k2o...

emp3r0r v4.7.1

emp3r0r Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents. What is emp3r0r? emp3r0r is an advanced, zero-trust post-exploitation framework and command & control C2 system designed for Linux and Windows target environments. Built from the...

CVE-2017-5373

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:10+00:00| seen| https://t.me/KaitNews/2838 2026-07-27 00:01:50+00:00| seen| https://t.me/KaitNews/2838 2026-08-05 19:00:06+00:00| seen| https://t.me/KaitNews/2838 2026-08-06 00:00:26+00:00| seen| https://t.me/KaitNews/2838...

CVE-2017-5066

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:05+00:00| seen| https://t.me/KaitNews/4131 2026-07-27 00:01:46+00:00| seen| https://t.me/KaitNews/4131 2026-08-04 12:00:08+00:00| seen| https://t.me/KaitNews/4131 2026-08-05 00:00:44+00:00| seen| https://t.me/KaitNews/4131...

CVE-2018-8351

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:51+00:00| seen| https://t.me/KaitNews/8295 2026-07-27 00:01:34+00:00| seen| https://t.me/KaitNews/8295 2026-07-29 02:00:03+00:00| published-proof-of-concept| https://t.me/KaitNews/8295 2026-07-30 00:03:18+00:00|...