CVE-2017-7921-Writeup-2026

CVE-2017-7921 — Hikvision IP Camera / DVR / NVR Improper Authentication — Privilege Escalation via Crafted Query Parameter | ---|--- CVE ID| CVE-2017-7921 Vulnerability Class| CWE-287: Improper Authentication CVSS v3.0 Base Score| 10.0 Critical — AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS v2.0 Scor...

third-thoughts

Third Thoughts A Lightless Labs research project studying AI agent behavior at scale through multi-disciplinary corpus analysis basically, throwing stuff at the wall and seeing what sticks. Named after Tiffany Aching's concept from Discworld: first thoughts agents thinking, second thoughts agents...

CVE-2026-44756

CVE-2026-44756 is a memory safety vulnerability in the SAP Extended Passport Protocol (EPP) processing library . A malformed EPP header in a crafted network request can trigger undefined behavior and abnormal program termination. The vulnerability is rated CVSS 10.0 (Critical) with a changed scop...

CVE-2026-44756 Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing

A memory safety vulnerability exists in the Extended Passport Protocol EPP processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program...

CVE-2026-44756 Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing

A memory safety vulnerability exists in the Extended Passport Protocol EPP processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program...

EUVD-2026-72572

A memory safety vulnerability exists in the Extended Passport Protocol EPP processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program...

aeBPF2-analysis

aeBPF2, eBPF verifier scalar-ID pruning vulnerability 한국어 문서...

Multimodal-web-attack-Dataset

MWAD: A Multimodal Web Attack Dataset for AI-Driven SQL Injection Detection Overview The Multimodal Web Attack Dataset MWAD is a novel labelled cybersecurity dataset developed as part of the author's research in cybersecurity at La Trobe University, Australia. The dataset generation methodology,...

Setup IPsec VPN

English | 简体中文 | 繁體中文 | 日本語 | Русский IPsec VPN Server Auto Setup Scripts Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. An IPsec VPN encrypts your network traffic, so that nobody between you and the VPN server can eavesdrop on your data as it...

PT-2026-88444

News: Xen published XSA-509 to 513 at 12:00 UTC. Worst is XSA-513 CVE-2026-79605/79606: a guest can run code in tapdisk as root in dom0. Also host DoS via PCI passthrough and oxenstored. Apply vendor Xen/XAPI patches now. https://t.co/CHBHEfTqbS...

PT-2026-87012

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

ROS-20260908-73-0090

The vulnerability in Ruby is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Linux Distros Unpatched Vulnerability : CVE-2026-85484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. The Select, RadioGroup,...

NewStart CGSL MAIN 7.02 : busybox Multiple Vulnerabilities (NS-SA-2026-0087)

The remote NewStart CGSL host, running version MAIN 7.02, has busybox packages installed that are affected by multiple vulnerabilities: - BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal...

EulerOS 2.0 SP12 : docker-engine (EulerOS-SA-2026-3330)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privileg...

Revoked but Still Authoritative: An Empirical Study of Revocation Enforcement in Agent-Memory Systems

Long-running language-model agents depend on persistent memory. Many agent-memory systems preserve history through soft revocation: a contradicted fact is marked invalid and retained rather than deleted. However, whether that mark is enforced at retrieval time is unexamined. In this paper, we...

UEFI Shell module embedded in SPI Flash can be used to bypass Secure Boot

Overview The UEFI Shell program may expose raw memory access capabilities that, if present in platform firmware for debugging or advanced support use cases, could be abused to undermine UEFI Secure Boot protections. When the UEFI Shell is included in SPI flash, an attacker with the ability to...

Trellix SecondSight Threat Hunting Report: How AI and Human Intelligence Expose 2026 Cyber Threats

Trellix SecondSight Threat Hunting Report: How AI and Human Intelligence Expose 2026 Cyber Threats By John Fokker and Adam Rocker · September 8, 2026 Threat hunting is changing. As adversaries adopt new technologies, techniques, and increasingly AI-enabled ways of operating, defenders have access...

Important: xmlrpc-c security update

XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC remote procedure call over the Internet. It converts an RPC into an XML document,...

Debian dsa-6489 : gir1.2-gst-plugins-base-1.0 - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6489 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6489-1 [email protected] https://www.debian.org/security/ Moritz...