IoCs

IoCs Sophos-originated indicators-of-compromise from published reports root@kitploit: /@&&@ . @ @ %@%, ./&@@&@@@@ @@ @%&@@& .@, @. @ @% @ && %@ .@@@@. &@&@//@& @/ @ @@ @ %@. ,%@@@@@@@@@&/ ., @% @@ @@,&@@ ,@ .@. @ , @& ,@@@@& .@ @ .@. @ .@ @& @@. %@@% ./. @,...

CVEs

My publicly published security advisories...

CVE-2018-7935

CVE-2018-7935 POC grab vaild Session first curl http://192.168.8.1/html/index.html | grep SessionID Instructions: Edit exploit.py , insert grabbed SessionID Vulnerability Status : Acknowledgemnt Recieved & Patch is released...

CVE-2004-2549

CVE-2004-2549 Nortel Wireless LAN Access Point 2200 Series - Denial of Service Exploit-db publication at https://www.exploit-db.com/exploits/23786/ Author Alex Hernandez aka @alt3kx...

CVE-2026-93528

creationtimestamp| type| source ---|---|--- 2026-09-22 07:00:04+00:00| published-proof-of-concept| Telegram/dT7yXvodNHrxcxQnkvpfsJjdaGRQYlSk9Plw9VoLoilrXc 2026-09-23 00:00:28+00:00| published-proof-of-concept| Telegram/dT7yXvodNHrxcxQnkvpfsJjdaGRQYlSk9Plw9VoLoilrXc...

CVE-2026-63030

Wordpress Core / SQLi 6.9.0 - 6.9.4 7.0.0 - 7.0.1 PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

security-research

Security Research Vulnerability research write-ups. Every entry here corresponds to a fixed, publicly tracked issue — no theoretical findings. Adel Bouachraoui — hydrasecurity.fr/v10/ · LinkedIn · YesWeHack Published...

CVE-2026-59814 Joplin: Stored XSS via inline-served note attachment on published shares

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7, Joplin Server's GET /shares/:id?resourceid= route serves a resource with the attacker-controlled mime value and omits Content-Disposition when the resource title is empty. A...

CVE-2026-55105 Joplin: Fountain embeds allow arbitrary script execution in published notes and the note viewer

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.6.15 and 3.7.2, packages/renderer/MdToHtml/rules/fountain.ts passes HTML generated by the vendored fountain.js renderer into note output without sanitizing it. A malicious Fountain...

CVE-2025-61682

creationtimestamp| type| source ---|---|--- 2026-09-18 18:35:24+00:00| published-proof-of-concept| https://github.com/SemanticMediaWiki/SemanticMediaWiki/security/advisories/GHSA-hg8h-557g-q8pp...

CVE-2026-63405

creationtimestamp| type| source ---|---|--- 2026-09-18 18:35:14+00:00| published-proof-of-concept| https://github.com/anycable/anycable/security/advisories/GHSA-5p54-whvp-x327 2026-09-19 15:31:24+00:00| seen| https://gist.github.com/alon710/5e8f8e10b5d10b651ea44234a36a9e37...

CVE-2026-85058

creationtimestamp| type| source ---|---|--- 2026-09-18 18:35:02+00:00| published-proof-of-concept| https://github.com/moquette-io/moquette/security/advisories/GHSA-9jjc-fw8x-fmwx 2026-09-19 02:31:41+00:00| seen| https://gist.github.com/alon710/6c8180b6898a74f52da1dc6d425e2b77 2026-09-24...

CVE-2026-63459

creationtimestamp| type| source ---|---|--- 2026-09-17 16:35:14+00:00| published-proof-of-concept| https://github.com/vendurehq/vendure/security/advisories/GHSA-xhq9-whgq-49j5...

CVE-2026-63460

creationtimestamp| type| source ---|---|--- 2026-09-17 16:35:13+00:00| published-proof-of-concept| https://github.com/vendurehq/vendure/security/advisories/GHSA-jgm3-qmp2-c4p7...

CVE-2026-91016

The Motors WordPress plugin (a car dealership classified listings plugin) before version 1.4.121 contains an unauthorized disclosure vulnerability . The plugin fails to verify whether a request is authorized to view a user's non-published listings, allowing unauthenticated attackers to read any a...

CVE-2026-90880 D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection

A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/NewGUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injection. The attack may be initiated remotely...

CVE-2026-90858

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected by this vulnerability is the function sessionstart of the file adminappview.php. Executing a manipulation of the argument adminmail can lead to authorization bypass. The...

CVE-2026-90858 subhajitkhan online-clinic-management-system adminappview.php session_start authorization

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected by this vulnerability is the function sessionstart of the file adminappview.php. Executing a manipulation of the argument adminmail can lead to authorization bypass. The...

PT-2026-92036

A flaw has been found in OpenClaw ClawScan up to 0.1.6. This affects an unknown function of the file internal/runner/static scanner.go of the component Static Scanner. This manipulation causes incomplete comparison with missing factors. It is possible to launch the attack on the local host. The...

CVE-2026-61578

creationtimestamp| type| source ---|---|--- 2026-09-14 20:00:06+00:00| published-proof-of-concept| Telegram/1Vwrq603LNSzLjTsf8z6M76upo6xgVWjVAK5cahZOMce6I 2026-09-15 00:00:10+00:00| published-proof-of-concept| Telegram/1Vwrq603LNSzLjTsf8z6M76upo6xgVWjVAK5cahZOMce6I...