openSUSE 16 Security Update : pcapplusplus (openSUSE-SU-2026:22017-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22017-1 advisory. Changes in pcapplusplus: - Update to version 26.07 libpcap / WinPcap / Npcap is now optional. Bumped the minimum required C++ standard to C++14...

Decepticon v1.2.2

Decepticon — Autonomous Red Team Agent "Another AI hacker? Let us guess — it runs nmap and writes a report." Commercial product demo ☁️ Don't want to self-host? Decepticon is live in the cloud. Skip the Docker setup — run autonomous red-team engagements right from your browser. Open-source CLI dem...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: kayenta-fips, apache-hop, commercial-elasticsearch, wildfly, conductor-fips, apache-nifi-registry, logstash, cass-config-builder-fips, apicurio-registry, elasticsearch, lmcache-cuda-12.8, apache-nifi, s3proxy-fips, akhq, floci-az, opensearch-fips, cassandra-fips,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: kayenta-fips, apache-hop, commercial-elasticsearch, wildfly, conductor-fips, apache-nifi-registry, logstash, cass-config-builder-fips, apicurio-registry, elasticsearch, lmcache-cuda-12.8, apache-nifi, s3proxy-fips, akhq, floci-az, opensearch-fips, cassandra-fips,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: wildfly, flyway, akhq, apicurio-registry, sonarqube, gradle, opensearch, dependency-track, strimzi-kafka-operator, apache-nifi-registry, tez, druid, keycloak-config-cli, apache-nifi, infinispan, spdx-tools-java, apache-tika, trino, logstash, keycloak, scala,...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: wildfly, flyway, akhq, apicurio-registry, sonarqube, gradle, opensearch, dependency-track, strimzi-kafka-operator, apache-nifi-registry, tez, druid, keycloak-config-cli, apache-nifi, infinispan, spdx-tools-java, apache-tika, trino, logstash, keycloak, scala,...

CVE-2025-32432

CVE-2025-32432 - Craft CMS 未認証 RCE PoC CVE-2025-32432 の実証 PoC。Craft CMS バージョン 5.6.16 以前（同等のコードパスで 4.x および 3.x 系統も影響を受ける）における未認証のリモートコード実行脆弱性。 検索キーワード: CVE-2025-32432, Craft CMS RCE, Craft 5.6.16 exploit, Yii2 PhpManager gadget, craftcms generate-transform, Component::set as behavior, nginx log...

Malicious code in infrabench (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f8f2854fc15ef2f2a5d4c44b050aa9f3c87a7f5a832949390cf22ccd7882a6 The package's public API harness.runedge= downloads two sha256-pinned gzipped native binaries 'inference-core.bin.gz' and 'edge-conn.bin.gz' from...

MAL-2026-17469 Malicious code in infrabench (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f8f2854fc15ef2f2a5d4c44b050aa9f3c87a7f5a832949390cf22ccd7882a6 The package's public API harness.runedge= downloads two sha256-pinned gzipped native binaries 'inference-core.bin.gz' and 'edge-conn.bin.gz' from...

CVE-2024-12270

CVE-2024-12270 Beautiful Taxonomy Filters = 5.1 AND string error-based - WHERE, HAVING, ORDER BY or GROUP BY clause UPDATEXML' injectable POST parameter 'selects0term' is vulnerable. Do you want to keep testing the others if any? y/N n Ghauri identified the following injection points with a total...

CVE-2022-1015

CVE-2022-1015 id uid=1000d gid=1000d groups=1000d ./poc + unshare done table created: leaktable chain created: leakchain rule added Listening on port 9999 table created: leaktable chain created: leakchain rule added Listening on port 9999 kerneladdress: ffffffffb4a00000 kernelstack:...

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries. The activity, observed by the Symantec and Carbon Black Threat...

Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access. Vulnerability Details CVEID:CVE-2026-46242 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix epremove struct eventpoll / struct file UAF...

Security Bulletin: IBM Maximo Application Suite is vulnerable to a sensitive information disclosure

Summary IBM Maximo Application Suite login service could allow an unauthenticated user to access sensitive system information. This bulletin contains information regarding the vulnerabilities and their fix. Vulnerability Details CVEID:CVE-2026-105052 DESCRIPTION: Maximo Application Suite could...

givewp-cve-2026-82222-rce-lab

CVE-2026-82222 — GiveWP 仅标记 RCE 验证实验室 用于在隔离的 Docker 实验室中复现和验证 CVE-2026-82222 的安全研究材料。 如需直接 RCE PoC 和 URL 扫描，请使用CVE-2026-8222-RCE.py 结论 状态：在所提供的实验室中已验证 GiveWP 4.16.5.1 允许最初未经身份验证的攻击者持久化一个 PHP 对象图，通过 GiveWP 会话处理将其复活，并以 WordPress Web 服务器用户身份 执行一个固定的标记命令。 测试阳性结果： GiveWP: 4.16.5.1 WordPress: 6.6.2 PHP...

CVE-2022-1388

CVE-2022-1388 远程代码执行、反弹Shell及自动导出PCAP -- 仅供教育用途 -- 作者不对使用本项目或仓库中的任何方面所采取的任何行为负责或承担责任。我创建此项目是为了理解该攻击以及在SIEM中编写检测规则，并希望分享给其他人以做同样的事情。使用风险自负。 此漏洞利用程序针对F5 Systems的BIG-IP iControl REST漏洞CVE-2022-1388。请参阅F5公告（https://support.f5.com/csp/article/K23605346）了解受影响版本及其他信息。 欢迎提交PR或报告任何问题。此程序已在Google...

Malicious code in voxcpmtts3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208e19b8b5c2d9ed6169765b2b5985147d0be136e9bb5f83adac6cc691ff4aa5 The package presents itself as a text-to-speech inference library but ships two bundled binaries that implement a cryptojacking payload...

MAL-2026-17463 Malicious code in voxcpmtts3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208e19b8b5c2d9ed6169765b2b5985147d0be136e9bb5f83adac6cc691ff4aa5 The package presents itself as a text-to-speech inference library but ships two bundled binaries that implement a cryptojacking payload...

PT-2026-104557

Name of the Vulnerable Software and Affected Versions Dell Container Storage Modules CSM Operator versions prior to 1.18.0 Description An improper privilege management issue exists in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could exploit this flaw t...

Linux Distros Unpatched Vulnerability : CVE-2026-18036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately...