CVE-2023-38161

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:24+00:00| seen| https://t.me/PositiveTechnologies/1860 2026-07-27 00:01:27+00:00| seen| https://t.me/PositiveTechnologies/1860 2026-07-28 18:00:05+00:00| seen| https://t.me/PositiveTechnologies/1860 2026-07-29 00:00:29+00:00| seen|...

HTB-Writeups

Hack The Box Writeups This repository contains my Hack The Bo...

Exploit for Code Injection in Kidocode Crawl4Ai

CVE-2026-26216 — Crawl4AI unauthenticated RCE via hooks GHS...

RollerCoaster

RollerCoaster: Advanced Exploitation of Cisco ASA LINA Firmwar...

CVE-2026-66140

creationtimestamp| type| source ---|---|--- 2026-07-25 11:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrhpmrowqe2d...

UBUNTU-CVE-2026-64431

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls postwritemstfixup when ntfsibwrite returns an error, intending to restore the buffer after a failed write. However, ntfsibwrite returns an erro...

CVE-2026-49744

creationtimestamp| type| source ---|---|--- 2026-07-25 09:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrhiwmjagk2d...

CVE-2026-64472

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct layout Bitfield operations are not atomic, they use a read-modify-write pattern, therefore we should be careful not to pack bitfields that can be concurrently updated into the same...

CVE-2026-64431

Summary of CVE-2026-64431 (Linux kernel NTFS driver): A memory corruption vulnerability arises when post_write_mst_fixup() is called for an invalid index_block after ntfs_ib_write() returns an error. The root cause is that ntfs_icx_ib_sync_write() treated any error as a write failure and invoked ...

CVE-2026-64431

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls postwritemstfixup when ntfsibwrite returns an error, intending to restore the buffer after a failed write. However, ntfsibwrite returns an erro...

EUVD-2026-48775

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls postwritemstfixup when ntfsibwrite returns an error, intending to restore the buffer after a failed write. However, ntfsibwrite returns an erro...

CVE-2026-15425

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-15425 Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name)

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-48765

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-15425

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-15425

The CVE concerns the Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress (Yoast SEO) vulnerable to Stored Cross-Site Scripting via the Post Slug (post_name) feature. Affected versions: all up to and including 28.0. Root cause: insufficient input sanitization and ...

CVE-2026-15425 Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name)

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-16800

creationtimestamp| type| source ---|---|--- 2026-07-25 05:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrh3jgtywl2d 2026-07-30 06:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrttajhz6g2v...

CVE-2026-16801

creationtimestamp| type| source ---|---|--- 2026-07-25 05:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrh3ja54xd2d 2026-07-30 06:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrtrkv3pae2m...

JLSEC-2026-793 Hugo's Node tool execution allows file system access outside the project directory

Impact When building a Hugo site that uses Node-based asset pipelines PostCSS, Babel, TailwindCSS, Hugo invoked the configured Node tools without restrictions on file system access. As a result, executing hugo against an untrusted site could allow code running through these tools to read or write...