Important: php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Denial of Service via unbounded recursion in SOAP parser CVE-2026-91765 php: OOM bailout during request parsing leads to memory corruption and RCE CVE-2026-109618 php: fatal error...

Important: php:7.4 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Out-of-bounds read via empty HTTP redirect Location header CVE-2026-93682 php: PHP: Archive entry injection via integer overflow in TAR parser CVE-2026-6103 php: PHP: Denial of Service...

are-you-get-tanstack-attack

TanStack Router CVE Scanner A security scanning tool to detect the TanStack Router CVE | TanStack Router GHSA in your projects. Overview This tool scans your codebase for indicators of the TanStack Router vulnerability CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx, which affects specific versions of...

GateX

GateX TUI that re-keys the "Fortinet Hunter 2026" Nuitka password gate. Part of a capture-the-flag challenge from @YoSoth0 Write-up: Hunting the Fortinet Hunter 0-day The ELF never runs on the host. GateX statically unpacks the onefile payload, XOR-unmasks the scrambled Argon2id hash and AES-GCM...

cve-2015-1592

These files were discussed in my Houston Perl Mongers talk about "Weaponizing Perl Serialization Flaws With MetaSploit". The video of the talk that explains these files is available here: https://youtu.be/Gzx6KlqiIZE The storable-.pl files are used to generate the 'config' parameter values used i...

CGA-WQQQ-H6M4-CGPG

Bulletin has no description...

CGA-8G6Q-CVWR-V7JH

Bulletin has no description...

CGA-7V65-6328-HF76

Bulletin has no description...

CGA-28V4-MF23-52J2

Bulletin has no description...

SUSE CVE-2026-98722

In the Linux kernel, the following vulnerability has been resolved: mtd: block2mtd: Fix divide error when erasesize is zero The erase size is parsed from the "block2mtd" module parameter and can be set to zero. adddevice then evaluates if size % erasesize with a zero divisor, which triggers a...

CVE-2026-19632

TranslatePress Password Reset Link Disclosure to Administrator Account Takeover CVE: CVE-2026-19632 | CVSS: 9.8 Critical Unauthenticated account-takeover via TranslatePress plugin for wordpress. Time from CVE publication to working Day-One PoC: 5 hours, 9 minutes, 40 seconds Up to and including...

CGA-2FW8-PRMH-6RRW

Bulletin has no description...

cve-2025-29384-poc

CVE-2025-29384 Proof-of-Concept Exploit Overview This repository contains an advanced proof-of-concept PoC exploit for CVE-2025-29384 , a critical stack-based buffer overflow vulnerability discovered in the Tenda AC9 router running firmware version V15.03.05.14multi. This vulnerability allows...

CGA-7G5J-659R-GR2W

Bulletin has no description...

CGA-7H4R-FJQ8-3WXW

Bulletin has no description...

CGA-GPJ9-RW62-39FP

Bulletin has no description...

CGA-CF77-8V94-97MQ

Bulletin has no description...

CGA-2HFP-FFWJ-F5X2

Bulletin has no description...

Exploit-CVE-2026-56705

CVE-2026-56705 – Adminer MSSQL DSN Injection Mass Exploiter 𝘾𝙤𝙣𝙩𝙖𝙘𝙩: 𝙔𝙤𝙧𝙪 يورو 🔥 https://t.me/ChiefYoru — Channel https://t.me/TeamLeets — Group https://t.me/ChiefYoruPoCs 📌 Description This tool exploits CVE-2026-56705 , an unauthenticated Remote Code Execution RCE vulnerability in Adminer 5.4.3...

Security Bulletin: IBM Planning Analytics Local is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by security vulnerabilities. These vulnerabilities have been addressed in IBM Planning Analytics Local v2.0 - IBM Planning Analytics Workspace version 2.1.24. Vulnerability Details CVEID:CVE-2026-11541...