Exploit for Missing Authentication for Critical Function in Cpanel

cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...

CVE-2026-10681

creationtimestamp| type| source ---|---|--- 2026-07-26 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mrkcbsxd2k2o...

CVE-2017-5373

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:10+00:00| seen| https://t.me/KaitNews/2838 2026-07-27 00:01:50+00:00| seen| https://t.me/KaitNews/2838 2026-08-05 19:00:06+00:00| seen| https://t.me/KaitNews/2838 2026-08-06 00:00:26+00:00| seen| https://t.me/KaitNews/2838...

CVE-2017-5066

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:05+00:00| seen| https://t.me/KaitNews/4131 2026-07-27 00:01:46+00:00| seen| https://t.me/KaitNews/4131 2026-08-04 12:00:08+00:00| seen| https://t.me/KaitNews/4131 2026-08-05 00:00:44+00:00| seen| https://t.me/KaitNews/4131...

CVE-2018-8351

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:51+00:00| seen| https://t.me/KaitNews/8295 2026-07-27 00:01:34+00:00| seen| https://t.me/KaitNews/8295 2026-07-29 02:00:03+00:00| published-proof-of-concept| https://t.me/KaitNews/8295 2026-07-30 00:03:18+00:00|...

CVE-2023-38161

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:24+00:00| seen| https://t.me/PositiveTechnologies/1860 2026-07-27 00:01:27+00:00| seen| https://t.me/PositiveTechnologies/1860 2026-07-28 18:00:05+00:00| seen| https://t.me/PositiveTechnologies/1860 2026-07-29 00:00:29+00:00| seen|...

HTB-Writeups

Hack The Box Writeups This repository contains my Hack The Bo...

RollerCoaster

RollerCoaster: Advanced Exploitation of Cisco ASA LINA Firmwar...

CVE-2026-66140

creationtimestamp| type| source ---|---|--- 2026-07-25 11:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrhpmrowqe2d...

UBUNTU-CVE-2026-64431

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls postwritemstfixup when ntfsibwrite returns an error, intending to restore the buffer after a failed write. However, ntfsibwrite returns an erro...

CVE-2026-49744

creationtimestamp| type| source ---|---|--- 2026-07-25 09:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrhiwmjagk2d...

CVE-2026-64472

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct layout Bitfield operations are not atomic, they use a read-modify-write pattern, therefore we should be careful not to pack bitfields that can be concurrently updated into the same...

EUVD-2026-48775

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls postwritemstfixup when ntfsibwrite returns an error, intending to restore the buffer after a failed write. However, ntfsibwrite returns an erro...

CVE-2026-64431

Summary of CVE-2026-64431 (Linux kernel NTFS driver): A memory corruption vulnerability arises when post_write_mst_fixup() is called for an invalid index_block after ntfs_ib_write() returns an error. The root cause is that ntfs_icx_ib_sync_write() treated any error as a write failure and invoked ...

CVE-2026-64431

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls postwritemstfixup when ntfsibwrite returns an error, intending to restore the buffer after a failed write. However, ntfsibwrite returns an erro...

CVE-2026-15425

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-48765

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-15425 Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name)

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-15425

The CVE concerns the Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress (Yoast SEO) vulnerable to Stored Cross-Site Scripting via the Post Slug (post_name) feature. Affected versions: all up to and including 28.0. Root cause: insufficient input sanitization and ...

CVE-2026-15425 Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name)

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug postname in all versions up to, and including, 28.0 due to insufficient input sanitization and output escaping. This makes it possible for...