scodescanner

SCodeScanner SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod. Website for newreleases, new...

React19-fix-vibecoders

React 19 & Next.js 安全修复提示（AI Agent 版） 🚨 严重安全漏洞 — CVE-2025-55182 与 CVE-2025-66478 本仓库包含可复用的提示词，帮助 AI 编码助手自动修复关键的 React/Next.js 安全漏洞。 📋 内容概览 SECURITYFIXPROMPT.md — 包含完整上下文的综合性详细提示 SECURITYFIXPROMPTSHORT.md — 简洁版本，便于快速分享 SECURITYPROMPTREADME.md — 详细使用指南 🚀 快速开始 选项 1：快速修复（推荐） 复制...

MCPwnfluence

MCPwnfluence — CVE-2026-27825 y CVE-2026-27826 Dos vulnerabilidades críticas en mcp-atlassian, uno de los servidores MCP más populares del ecosistema más de 4.4K estrellas en GitHub, más de 4M de descargas. Descubiertas por el equipo de Pluto Security. Las Vulnerabilidades...

CVE-2026-33453

Apache Camel 4.18.0 — Evaluación de Seguridad CVE Tres vulnerabilidades críticas en Apache Camel 4.18.0, descubiertas de forma independiente y validadas con exploits de prueba de concepto funcionales...

PT-2026-88448

A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via...

dahua-cve-research

Dahua IP Camera CVE Exploit Tools ⚠️ UNDER DEVELOPMENT — These scripts are based on published CVE details and require further testing against vulnerable devices to confirm full functionality. Research and proof-of-concept scripts for four critical Dahua IP camera vulnerabilities. ⚠️ LEGAL...

nmap-scan-results

Nmap 扫描：发现 200 多个漏洞 严重： CVE-2023-38408 9.8, CVE-2024-38476 9.8, Slowloris DoS 完整报告...

T3-Technology-CPE-Advisories

T3 Technology CPE — Avisos de Seguridad Múltiples vulnerabilidades críticas descubiertas en dispositivos CPE ONU/Router T3 Technology desplegados por TrueOnline Tailandia. Vulnerabilidades ID CVE| Severidad| Resumen ---|---|--- CVE-2026-35904| 4.3 Media| Telnet sin autenticación habilitado vía CG...

Photon OS 5.0: Linux PHSA-2024-5.0-91-0245

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0245. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

APSB26-120 : Security update available for Adobe Campaign Classic

Adobe has released a security update for Adobe Campaign Classic. This update addresses critical vulnerabilities that could result in arbitrary code execution...

CLEANSTART-2026-NK33439 Security fixes in velero-plugin-for-csi 0.7.1-r4

Package velero-plugin-for-csi version 0.7.1-r4 fixes 3 vulnerabilities: CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

APSB26-114 : Security update available for Adobe Campaign Classic

Adobe has released a security update for Adobe Campaign Classic. This update addresses critical vulnerabilities that could result in arbitrary code execution and arbitrary file system read...

PT-2026-65832

Name of the Vulnerable Software and Affected Versions VMware vCenter affected versions not specified Description An authentication bypass exists in the VMware Directory Service. A malicious actor with network access to vCenter can exploit this flaw to bypass authentication mechanisms and gain...

VMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)

Advisory ID: | VMSA-2026-0006.2 ---|--- Advisory Severity: | Critical CVSSv3 Range: | 2.7-9.8 Synopsis: | VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709 Issue date: | 2026-07-29...

APSB26-87: Security update for Adobe Format Plugins

Adobe has released an update for Adobe Format Plugins. This update addresses critical vulnerabilities that could lead to arbitrary code execution...

APSB26-89 : Security update available for Adobe Bridge

Adobe has released a security update for Adobe Bridge. This update addresses critical vulnerabilities that could lead to privilege escalation and arbitrary code execution...

Vulnerabilities in Oracle PeopleSoft Enterprise

Oracle has identified 84 vulnerabilities in various modules of Oracle PeopleSoft Enterprise, including HCM Talent Acquisition Manager, In-Memory Project Discovery, FIN Expenses, SCM eProcurement, CC Common Application Objects, SCM Order Management, CRM Common Objects, and FIN Program Management,...

Vulnerabilities in Oracle Commerce Platform

Oracle has identified 39 vulnerabilities in Oracle Commerce Platform and Oracle Commerce Guided Search/Experience Manager, both versions 11.4.0. Some of these vulnerabilities have a CVSS score of 9 or higher. The remaining vulnerabilities have lower scores, and detailed information about them is...

KLA91168 Multiple vulnerabilities in Oracle VirtualBox

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability can be exploited remotely to cause denial of servic...

Begun, the Patch Wars have

Welcome to this week's edition of the Threat Source newsletter. We all knew, to some degree or another, that this summer was going to a hot mess. I don't mean FIFA drama or record setting heat waves. I mean the slow but steady momentum that AI frontier models were accruing for vulnerability...