TrustedRouter-ExploitBench

TrustedRouter-ExploitBench Notes, harness configs, and a runb...

firefox: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some ...

mythox-opencode-cyber

⬡ MYTHOX CYBER OPS — OpenCode Agent Suite 6 agents متخصصو...

Wiz Exposure Management Dashboard: Your CTEM Command Center

New exposure management dashboard helps organizations align with CTEM to stay ahead in an era of AI exploiting vulnerabilities faster than ever...

binary-exploitation-labs

Binary Exploitation & Reverse Engineering Labs Hands-on labs...

Exploit for OS Command Injection in Redhat Openshift_Container_Platform

Usage: For anonymos login: python3 exploit.py --lho...

Mr-Robot-CTF-Automation-Scripts

No d...

PT-2026-50059

Name of the Vulnerable Software and Affected Versions Oracle Project Portfolio Analysis versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Project Portfolio Analysis product within Oracle E-Business Suite. A high privileged attacker with...

PT-2026-50054

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Person. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Human Resources. Successf...

PT-2026-49971

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.9 MySQL Server versions 9.0.0 through 9.7.0 MySQL Cluster versions 8.0.11 through 8.0.46 MySQL Cluster versions 8.4.0 through 8.4.9 MySQL Cluster versions 9.0.0 through 9.7.0 Description An issue exists ...

PT-2026-50051

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Quality versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Quality product. A low privileged attacker with network access via HTTP can exploit this flaw...

PT-2026-49967

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description An issue in the Security component of the Oracle Agile PLM product allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can result in a...

PT-2026-50022

Name of the Vulnerable Software and Affected Versions Oracle Complex Maintenance, Repair and Overhaul versions 12.2.3 through 12.2.15 Description An issue exists in the Production component of Oracle Complex Maintenance, Repair and Overhaul within Oracle E-Business Suite. A low privileged attacke...

PT-2026-49941

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 14.1.2.0.0 Description An issue in the Content Server component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise the system. The attack requires human...

Microsoft SharePoint Server Security Issue

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...

DWM Core Library Privilege Escalation

The vulnerability of the DWM Core Library in Windows operating systems relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2026-48518

Affected software: MultiJuicer (versions 8.0.0–10.0.0) running on a central Kubernetes deployment. Vulnerability: CSRF in the team join endpoint (POST /multi-juicer/api/teams/{team}/join) that accepts any Content-Type, bypassing CORS preflight and enabling a cross-site form to force a victim to j...

CVE-2026-49062

Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.Js: from n/a through 1.8.7...

Cyber-Arena

CyberArena - Cybersecurity Challenge Platform CyberArena is a...

Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw

Palo Alto Networks has revealed that it has observed "active exploitation" of a recently disclosed PAN-OS vulnerability by an unknown threat actor to obtain unauthorized access to GlobalProtect portals. The vulnerability in question is CVE-2026-0257 CVSS score: 7.8, an authentication bypass flaw...