CVE-2022-0778-POC

A simple remote triggering POC for CVE-2022-0778 Why While trying to validate whether server implementations on our side where/are vulnerable to CVE-2022-0778, it proved extremely cumbersome to do so remotely. Instructions to create maliciously crafted certificates to trigger the parsing bug in...

whathost

📖 About whathost is a high-performance reconnaissance tool designed for security professionals, penetration testers, and bug bounty hunters. It rapidly resolves IP addresses to hostnames through SSL/TLS certificate inspection and DNS PTR lookups, providing comprehensive host enumeration for...

CVE-2026-67598

CVE-2026-67598 Emlog Pro — Disabled TLS Certificate Validation in the AI Assistant Network-adjacent MITM → LLM-provider API-key theft & AI-response injection Summary · Attack Flow · Affected Code · Proof · Remediation · Timeline · References 📋 At a glance | ---|--- CVE ID| CVE-2026-67598 Product|...

CVE-2025-65753

CVE-2025-65753 Proof of concept for CVE-2025-65753: Remote code execution on the Gryphon Guardian access point, firmware version 01.06.0006.22, through an improper TLS certificate validation. Description The Gryphon Guardian WiFi access point, with firmware version 01.06.0006.22, does not properl...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation installrustbuster echo "Installing latest version o...

CVE-2026-0257

CVE-2026-0257: GlobalProtect Authentication Bypass Overview This exploit achieves unauthenticated VPN access to a Palo Alto GlobalProtect gateway/portal by forging an authentication cookie using only the server's publicly available TLS certificate. The Core Vulnerability Why It Works GlobalProtec...

Critical: Red Hat Security Advisory: OpenJDK 8u512 Security Update for Portable Linux Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

Critical: Red Hat Security Advisory: OpenJDK 8u512 Windows Security Update

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

Important: Red Hat Security Advisory: java-1.8.0-openjdk security update for RHEL 8

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8...

SUSE-SU-2026:5203-1 Security update for alloy

This update for alloy fixes the following issues: Security issues fixed: - CVE-2026-14362: HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue bsc1271206. - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to...

Security update for distribution

This update for distribution fixes the following issues: CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control bsc1277966. CVE-2026-41178:...

SUSE-SU-2026:5202-1 Security update for distribution

This update for distribution fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control bsc1277966. - CVE-2026-41178:...

undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options

A flaw was found in undici's BalancedPool component. This vulnerability allows a remote attacker to bypass Transport Layer Security TLS certificate validation. The BalancedPool constructor incorrectly processes its options, silently discarding custom certificate validation functions. Consequently...

Important: Red Hat Security Advisory: nodejs26 security, bug fix, and enhancement update

An update for nodejs26 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2026-97163

CVE-2026-97163 — UP Plugin GitHub Remote Code Installation Joomla Python 3 PoC for CVE-2026-97163 — UP Universal Plugin for Joomla lomart.fr. Description PoCbit / GitHub CVE-2026-97163 — UP 5.0.0–5.2.0 and 6.0.0–6.0.29 especially the mini package without bundled actions allow unauthenticated remo...

CVE-2026-0073

0-Click RCE on Android Critical vulnerability CVE-2026-0073 in Android ADB, an authentication bypass flaw in the TLS certificate verification of the adbd daemon, specifically in the adbdtlsverifycert function. The TLS certificate verification makes Wireless Debugging accept an attacker as if they...

RHEL 9 : java-1.8.0-openjdk security update for RHEL 9 (Important) (RHSA-2026:95613)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95613 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

RHEL 10 : nodejs26 (RHSA-2026:98060)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98060 advisory. Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an...

RHEL 7 : java-1.8.0-openjdk (RHSA-2026:95598)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95598 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

RHEL 8 : java-1.8.0-openjdk security update for RHEL 8 (Important) (RHSA-2026:95609)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95609 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...