The vulnerability of the XmlLayout() function in the Apache Log4j Core library allows attackers to compromise the integrity of the protected information.

The vulnerability of the XmlLayout function in the Apache Log4j Core logging library is related to improper encoding or escaping of output data. Exploiting this vulnerability allows an attacker to influence the integrity of the protected information from a remote location...

The vulnerability of the Unbound DNS server, related to excessive resource consumption during the cycle, allows a hacker to cause a service failure.

The vulnerability of the Unbound DNS server is related to excessive resource consumption during the cycle. Exploiting this vulnerability allows a malicious actor to cause service failures...

Web-Exploitation-for-Bug-Bounty-Hunter

Web-Exploitation-for-Bug...

SUSE CVE-2026-17968

Uninitialized Use in WebXR in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-22620

Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device...

CVE-2026-64266

A flaw was found in the Linux kernel's FUSE Filesystem in Userspace component. The fusereffolio function does not properly re-lock a request after unlocking it, which can lead to a use-after-free vulnerability. A local attacker could exploit this flaw to potentially execute arbitrary code or caus...

Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center FMC Software to its Known Exploited Vulnerabilities KEV catalog, following reports of zero-day exploitation. The vulnerability,...

CVE-2026-64483

A flaw was found in the Linux kernel's ALSA FireWire iSight driver. A malicious or faulty Apple iSight device connected via FireWire can send specially crafted audio packets. The driver incorrectly processes the sample count in these packets, leading to a buffer overflow where data can be written...

ABB Ability Zenon

SUMMARY ABB is aware of publicly reported vulnerabilities affecting MongoDB 4.2, which is bundled within the IIoT Services of the affected product versions. MongoDB 4.2 has reached end-of-life and contains multiple known security vulnerabilities. An attacker who successfully exploits these...

CVE-2026-17989

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17979

Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17956

Inappropriate implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17886

Use after free in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

Adobe Format Plugins Buffer Overflow Vulnerability

Adobe format plugins are a series of format extension plugins developed by the American company Adobe. Adobe format plugins have a buffer overflow vulnerability, and attackers can exploit this vulnerability to execute arbitrary code within the context of the current user...

VulnCheck KEV: CVE-2026-1623

A weakness has been identified in Totolink A7000R 4.1cu.4154. Impacted is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument FileName causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the DHCP Client Service for Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the DHCP Client Service for Windows operating systems is related to a countable level of significance loss. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Xalgorix Autonomous AI Pentesting Agent 4.5.114

Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported - so you get proof, not a pile of maybes to triage. Self-hosted, private, and bring-your-own-LLM. Built in Go + TypeScript...

The vulnerabilities of the functions __ksmbd_close_fd() and ksmbd_reopen_durable_fd() in the fs/smb/server/vfs_cache.c module of the Smb kernel of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions ksmbdclosefd and ksmbdreopendurablefd in the fs/smb/server/vfscache.c module of the Smb file system in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow a remote attacker to...

B&R Automation X20EDS410 Incorrect Resource Transfer Between Spheres (CVE-2026-31431)

The Linux kernel version shipped with the affected B&R product X20EDS410 is affected by a vulnerability. A flaw in the kernel's crypto algifaead in-place operation handling. Successful local exploitation of this vulnerability could allow an authenticated attacker with low privileges to escalate...