POC-CVE-2026-56164-exploit

CVE-2026-56164 — Microsoft SharePoint Server Authentication Bypass Exploit Critical CVSS 9.8 — Unauthenticated Privilege Escalation to Farm Administrator in Microsoft SharePoint Server Table of Contents Overview Vulnerability Details Affected Versions Architecture Diagrams Project Structure...

Astra Linux – Vulnerability in WebKit2GTK

A memory management issue related to “use after free” operations has been addressed through improved memory management practices. This issue is fixed in Safari 16.4.1, iOS 15.7.5, and iPadOS 15.7.5; iOS 16.4.1, and iPadOS 16.4.1; as well as macOS Ventura 13.3.1. Processing maliciously crafted web...

Astra Linux – Vulnerability in Firefox

An unexpected message in the WebGPU IPC framework could lead to a use-after-free error and an exploitable sandbox escape. There have been reports of attacks exploiting this flaw in real-world scenarios. This vulnerability affects Firefox versions earlier than 97.0.2, Firefox ESR versions earlier...

mikrotrick-poc

PoC di laboratorio MikroTrick — CVE-2026-67276 bypass autenticazione chiave pubblica SSH RouterOS Solo per uso in laboratorio. Eseguire esclusivamente contro istanze RouterOS di tua proprietà. Attaccare dispositivi che non possiedi è un reato CFAA, art. 267 polacco, equivalenti. Contesto CERT PL...

CISA Adds One Known Exploited Vulnerability to Catalog  

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-76504link is external Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber...

Cisco IOS XE Web UI - Command Injection

A vulnerability in the web UI component of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to improper input validation in the web UI. An attacker could exploit...

Only 26% of Detected CISA Known Exploited Vulnerabilities Were Fully Remediated

A recent Verizon study found that vulnerability exploitation became the most common initial access vector, appearing in 31%…...

CVE-2026-66457

creationtimestamp| type| source ---|---|--- 2026-09-23 08:00:38+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4ab1e200-28ab-455a-8f7b-a4da9fa29a0e...

Security Advisory 0183

Security Advisory 0183 . CSAF PDF Date: September 22, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 22, 2026 | Initial release 1.1 | September 23, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-93952 CVSSv3.1 Base Score: 10.0...

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things people already trust: code that takes a bad turn, old payloads coming back, exposed systems, weak checks, fake fixes, and attack paths that look almost...

CVE-2021-48008

creationtimestamp| type| source ---|---|--- 2026-09-19 20:00:41+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f3db3454-5e05-426b-9952-73c9165409df...

CVE-2019-25776

creationtimestamp| type| source ---|---|--- 2026-09-19 20:00:41+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/67435dfc-7eda-4399-96d1-5714f7249ed0...

CVE-2017-20284

creationtimestamp| type| source ---|---|--- 2026-09-19 20:00:39+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/658a8fd7-a69e-4a17-86ca-a5f73c20f5d3 2026-10-05 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-10-05 2026-10-06...

CVE-2026-54196

creationtimestamp| type| source ---|---|--- 2026-09-17 12:00:27+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/981aac5c-5075-4d2d-b365-6ed8b27d86d0...

Vulnerabilities found in Cisco Identity Services Engine (ISE)

Cisco has identified 21 vulnerabilities in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC. These vulnerabilities concern various security issues in Cisco ISE and ISE-PIC, including opportunities for unauthorized and low-privilege malicious actors to perform...

Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Firewall Adaptive Security Appliance ASA Software, Cisco Secure Firewall Threat Defense FTD Software and Cisco Secure Firewall Management Center FMC Software engineering team has conducted a...

Cisco Identity Services Engine Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a comprehensive internal security review. This review resulted in software hardening releases...

CVE-2022-32025

creationtimestamp| type| source ---|---|--- 2026-09-15 11:00:51+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/31c6441e-f30f-4596-92dc-89053d7d36c0 2026-09-17 10:00:08+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-16 2026-09-23...

CVE-2022-32026

creationtimestamp| type| source ---|---|--- 2026-09-15 11:00:50+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/19dd0d3e-7ea3-4e5a-ad2f-caaba40dcc1b...

CVE-2018-10736

creationtimestamp| type| source ---|---|--- 2026-09-15 11:00:47+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4c2acc9-6e65-4f57-906d-6e641b6e31d1 2026-09-22 10:00:07+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-21...