Exploit for CVE-2026-9830

CVE-2026-9830 Investigation Overview This directory contai...

WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.82 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk versions = 6.82...

PT-2026-64901

Name of the Vulnerable Software and Affected Versions Progress Software LoadMaster affected versions not specified Progress ECS Connection Manager affected versions not specified Progress Object Scale Connection Manager affected versions not specified Progress MOVEit WAF affected versions not...

PT-2026-64904

Name of the Vulnerable Software and Affected Versions Progress Software LoadMaster affected versions not specified Progress ECS Connection Manager affected versions not specified Progress Object Scale Connection Manager affected versions not specified Progress MOVEit WAF affected versions not...

CVE-2026-65437: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Spam protection, AntiSpam, FireWall by CleanTalk = 6.82 versions...

PT-2026-64902

Name of the Vulnerable Software and Affected Versions Progress Software LoadMaster affected versions not specified Progress Software ECS Connection Manager affected versions not specified Progress Software Object Scale Connection Manager affected versions not specified Progress Software MOVEit WA...

PT-2026-65316

Name of the Vulnerable Software and Affected Versions Spam protection, AntiSpam, FireWall by CleanTalk versions prior to 6.83 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication...

RollerCoaster

RollerCoaster: Advanced Exploitation of Cisco ASA LINA Firmwar...

pipelock v3.2.0

Pipelock Open-source AI agent firewall forVerifiable Egress Control. !pipelock...

SQL Injection

Overview @budibase/server is a Budibase Web Server Affected versions of this package are vulnerable to SQL Injection via the multipleStatements configuration in the MySQL integration. An attacker can execute arbitrary SQL commands by injecting malicious input into user fields, potentially leading...

AIDRS-Hybrid-Intrusion-Detection

AIDRS — AI-Powered Intrusion Detection & Response System A...

A New Threat Landscape Meets A New Kind of Defender

Three years ago we launched a bug bounty program to accelerate WordPress security research, and it has been incredibly successful and has since secured the WordPress community against 9,727 vulnerabilities reported through our program. We have thus far awarded a total of $981,251 to researchers...

[SECURITY] Fedora 44 Update: nginx-mod-naxsi-1.6-21.fc44

naxsi is an nginx module that provides score based Web Application Firewall WAF abilities in a highly granular fashion...

Malicious code in web3-terminal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff469765665422f3b9a6dd9978d99ddab9f853b02109f154c97b634977cf223 On npm install, package.json scripts.postinstall runs test.js, which invokes routines in index.js that 1 walk the current working directory for id.js...

MAL-2026-11007 Malicious code in web3-terminal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff469765665422f3b9a6dd9978d99ddab9f853b02109f154c97b634977cf223 On npm install, package.json scripts.postinstall runs test.js, which invokes routines in index.js that 1 walk the current working directory for id.js...

Malicious code in habingeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716d1a3d9969396f8ca204c03d403552bb4a990c1bfdb4a2ab05dff5afb93748 package.json declares postinstall: node test.js, which auto-runs on npm install and invokes two functions from index.js. The first recursively walks...

MAL-2026-10995 Malicious code in habingeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716d1a3d9969396f8ca204c03d403552bb4a990c1bfdb4a2ab05dff5afb93748 package.json declares postinstall: node test.js, which auto-runs on npm install and invokes two functions from index.js. The first recursively walks...

CVE-2026-62144

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security...

Security Notice - Statement on Remote Code Execution Vulnerability in Fastjson

Huawei has recently realized the Remote Code Execution RCE vulnerability in Fastjson. A remote attacker can exploit this vulnerability by sending crafted JSON data. Successful exploitation of this vulnerability may lead to remote code execution. If you have deployed Huawei Next-Generation Firewal...

Rockwell Automation 1718-AENTR/1719-AENTR

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow for an attacker to cause a denial-of-service condition on the product. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network...