vault

Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...

CVE-2026-86353

The Dell PowerStore appliance is vulnerable to a use of a weak cryptographic algorithm (CWE-327). This vulnerability could allow an attacker with existing privileged access to the appliance to recover stored credentials . No specific remediation steps or exploit details are provided in the docume...

EUVD-2026-125294

Dell PowerStore contains a use of a weak cryptographic algorithm vulnerability that could allow an attacker with existing privileged access to the appliance to recover stored credentials...

CVE-2021-44967

CVE-2021-44967 - Authenticatedprivileged RCE Authenticated privileged remote command execution in LimeSurvey Version 5.2.4 via upload and install plugins allows a remote user to upload arbitrary PHP code file. Usage python3 exploit.py --url --user --password --lhost --lport A superadmin user is...

Reaper

「💀」 About Reaper Reaper is a proof-of-concept designed to exploit BYOVD Bring Your Own Vulnerable Driver driver vulnerability. This malicious technique involves inserting a legitimate, vulnerable driver into a target system, which allows attackers to exploit the driver to perform malicious action...

MAL-015

MAL-015: Isolation Escape 2 in Ansible Tower Installations of Ansible Tower on certain Rhel 7/8 setups are potentially vulnerable to “Job Isolation” Escapes that allows an attacker to elevate to the “awx” user from outside the isolated environment. The following files/setups can be leveraged by...

CVE-2025-27840-WIP

CVE-2025-27840-WIP A Work-In-Progress for CVE-2025-27840 CVE-2025-27840 Overview CVE-2025-27840 is a medium-severity vulnerability CVSS 6.8 affecting Espressif ESP32 Bluetooth chips , which are integrated into over 1 billion IoT devices globally. The flaw involves 29 undocumented Host Controller...

CVE-2021-20253

CVE-2021-20253: Privilege Escalation via Job Isolation Escape in Ansible Tower A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated...

Gorsair

Gorsair Gorsair is a penetration testing tool for discovering and remotely accessing Docker APIs from vulnerable Docker containers. Once it has access to the docker daemon, you can use Gorsair to directly execute commands on remote containers. Exposing the docker API on the internet is a tremendo...

CVE-2026-85317

A flaw was found in the Apache Camel HTTP component. The OAuth2 authentication token cache incorrectly shares stored tokens across different endpoints because key authorization attributes, such as requested permissions and target service destinations, are omitted from the cache key. In...

CVE-2026-94460 IRISPowerscan Insecure default privilege assignment for installation account

IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, which could allow an unauthenticated attacker to gain unauthorised access to privileged application functionality...

EUVD-2026-116800

IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, which could allow an unauthenticated attacker to gain unauthorised access to privileged application functionality...

CVE-2026-119636: Devolutions Server: Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server…

Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through 2026.2.22.0 allows an authenticated user with checkout rights on a PAM account to retain access to that account on the target system after the checkout expires via a...

PT-2026-136442

Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through 2026.2.22.0 allows an authenticated user with checkout rights on a PAM account to retain access to that account on the target system after the checkout expires via a...

CLEANSTART-2024-AO02193 By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content

CVE-2019-11761 affects multiple packages. By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. See references for individual vulnerability details...

EUVD-2026-39474

Keycloak: Attacker can re-enable and take over disabled clients via registration access token...

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise

In this article 1. What’s happening 2. What is ARTEX? 3. Mitigation and protection guidance 4. References 5. Learn more As early as September 2026, Storm-0940, a China-state aligned actor, used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of...

Latchset LUKSMeta buffer error vulnerability

The LATCHSET LUKSMeta exists buffer error vulnerability stems from luksmeta’s improper boundary verification of metadata slots. Attackers can redirect erasure or loading operations outside the intended metadata area by providing or modifying disk heads. This allows them to overwrite or clear...

Astra Linux – Vulnerability in Qemu

An integer overflow issue was identified in the vmxnet3 NIC emulator of QEMU for versions up to v5.2.0. This issue can occur if a guest provides invalid values for the rx/tx queue size or other NIC parameters. A privileged guest user may exploit this flaw to crash the QEMU process on the host,...

CVE-2026-74037

Wazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for runas users with zero static roles, because checktoken never consults the blacklist. Attackers with revoked administrator grants can continue authenticating and self-link the administrator role to permanently retain privileged access...