CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added seven security flaws to its Known Exploited Vulnerabilities KEV catalog after they landed in attackers' crosshairs. The vulnerabilities are as follows - CVE-2026-83548 CVSS score: 10.0 - A server-side request forger...

CVE-2026-82329-JFrog-Artifactory-Auth-Bypass

artifactory.py root@kitploit: ╔══════════════════════════════════════════════════════════╗ ║ artifactory · CVE-2026-82329 unauth admin takeover ║ ║ mitsec · https://x.com/ynsmroztas ║ ╚══════════════════════════════════════════════════════════╝ CVE-2026-82329 — JFrog Artifactory self-hosted...

4jfinder.github.io

Base de datos de Log4j buscable Página buscable para la Lista de proveedores y software afectados por Log4j CVE-2021-44228 de CISA, mantenida por la Agencia de Seguridad de Infraestructura y Ciberseguridad de EE. UU. CISA. Cómo usar Descargue los archivos index.html y cisalist.css y ejecútelos...

CGA-MM48-5H2X-9XM9

Bulletin has no description...

CVE-2026-72898-metabase-sqli

CVE-2026-72898 — Metabase unauthenticated SQL injection detector + analysis -black Unauthenticated SQL injection in Metabase via POST /api/session/resetpassword. CVSS 10.0 , in the CISA KEV catalog, exploited in the wild. An undeclared field in the password-reset request body reaches the...

CVE-2026-21509-PoC

CVE-2026-21509 — Educational Dummy PoC for Defender Visibility ⚠️ This repository provides a harmless, non-exploit Proof of Concept. Its purpose is to support defensive research , EDR/AV visibility testing , and training. It does not exploit CVE‑2026‑21509 and contains only dummy OLE artifacts. 📝...

Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data

Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data CVE‑2026‑20805: A Windows Desktop Window Manager flaw causing local information disclosure. Requires low privileges, no user interaction. Rated CVSS 5.5 Medium. Actively exploited and listed in CISA KEV; patch released January...

CVE-2026-72530-TrueConf-Sandbox-Escape-

CVE-2026-72530: TrueConf Server Sandbox Escape - Mitigation & Detection PoC 📌 General Description This repository contains an educational demonstration of mitigation and detection for CVE-2026-72530 , a critical Code Injection and Sandbox Escape vulnerability in TrueConf Server. Vulnerability...

cve-2026-31431

CVE-2026-31431 — "Copy Fail": Linux Kernel algifaead Local Privilege Escalation CISA KEV | CVSS 7.8 HIGH | Affects Linux kernels 4.14 – early 2026 9 years Table of Contents 1. Executive Summary 2. Risk Assessment 3. Technical Deep Dive 4. Attack Methodology — Red Team 5. Detection & Incident...

CVE-2025-62593-PoC

CVE-2025-62593 — Ray Ejecución Remota de Código sin autenticación Prueba de concepto para CVE-2025-62593 , una vulnerabilidad de Ejecución Remota de Código sin autenticación en el motor de computación distribuida de IA Ray, explotada mediante ataques de rebinding de DNS basados en navegador. Fue...

MINI-F888-JR8X-PRVP

Bulletin has no description...

CVE-2026-18717

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:51+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-04 2026-08-28 02:07:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4bpd22y22p 2026-08-31 20:26:27+00:00| seen|...

CVE-2026-77977

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:47+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 00:40:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dcfmboxreko4m 2026-08-28 07:03:58+00:00| seen|...

CVE-2026-77975

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:44+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05...

CVE-2026-73819

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:42+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-31 16:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mufbmp6qrf2e 2026-08-31 18:07:30+00:00| seen|...

CVE-2026-76133

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:40+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-31 16:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mufc6jjqv72p 2026-08-31 18:07:40+00:00| seen|...

CVE-2026-69658

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:38+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 02:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4bq3g6b42m 2026-08-29 13:12:09+00:00| seen|...

CVE-2026-75548

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:35+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05...

CVE-2026-71187

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:33+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 02:08:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4bqeqavt23 2026-08-29 13:12:09+00:00| seen|...

CVE-2026-73809

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:30+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 12:00:53+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mu5cu5ndbv2j 2026-08-28 12:01:02+00:00| seen|...