heaphopper

...

mongoaudit

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: root@kitploit: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install...

AppSecEzine

AppSec Ezine Raising awareness towards the prevention of security risks is challenging. Most people are unaware of or just don’t have access to the right information. Keeping up the pace in the tech world is a golden rule. If you are not ready to deal with security issues, you are heading in the...

advisories

SBA Research Security Advisories Security advisories published by SBA Research...

CVE-2025-4686

CVE-2025-4686 Se espera la publicación oficial por parte de USOM...

CVE-2025-2404

CVE-2025-2404 Se espera la publicación oficial por parte de USOM...

CVE-2025-5319

CVE-2025-5319 Se espera la publicación oficial por parte de USOM...

CVE-2026-89669

CVE-2026-89669 is a use-after-free in the Linux kernel's nfsd (NFS server) component. The copy-notify state ID was published into the s2s_cp_stateids IDR before its cp_p_stateid/cp_p_clid fields were fully initialized. A racing OFFLOAD_CANCEL with a crafted client ID and guessable sequence number...

CVE-2026-89669 nfsd: initialize copy-notify stateid before publishing it

In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid before publishing it nfsd4copynotify finished initializing the cpntf state after nfs4allocinitcpntfstate had already linked it into the s2scpstateids IDR and the parent's sccplist, with cscoun...

CVE-2024-5535

CVE-2024-5535 PoC - Sobrellectura de búfer en NPN de OpenSSL Nota: No descubrimos esto, solo hicimos un PoC basado en la publicación. https://nvd.nist.gov/vuln/detail/cve-2024-5535...

CVE-2025-4688

CVE-2025-4688 Official publication by USOM is awaited...

CVE-2025-2301

CVE-2025-2301 Se espera la publicación oficial de USOM...

CVE-2025-4822

CVE-2025-4822 Se espera la publicación oficial por parte de USOM...

CVE-2025-5329

CVE-2025-5329 Se espera la publicación oficial por parte de USOM...

Statement

Declaración Con respecto a CVE-2021-36593 y CVE-2021-36594, me gustaría mencionar que solo había enviado una solicitud para dividir el CVE-ID. hace 2 años Los CVE-ID se publicarán en los próximos meses, ya que actualmente no hay una actualización disponible. Hemos pospuesto el proceso de...

Linux Distros Unpatched Vulnerability : CVE-2026-80858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: publish io-uring queues with release semantics fuseuringcreatequeue initializes a fuseringqueue and then publishes the pointer into ring-queuesqid with...

CVE-2026-78070

creationtimestamp| type| source ---|---|--- 2026-09-03 22:00:06+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4 2026-09-04 00:00:11+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4...

CVE-2026-79755

creationtimestamp| type| source ---|---|--- 2026-09-02 18:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mukjbo7hk32h 2026-09-02 18:54:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5duznc7mbj25r...

EUVD-2026-69850

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not restrict access to a REST route that lists an author's courses, nor does it filter that listing by publication status, allowing unauthenticated users to read the titles and IDs of unpublished draft, pending and private...

SUSE CVE-2026-72341

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix publication race for priv-channelstats mlx5echannelstatsalloc publishes a new entry to priv-channelstats and then increments priv-statsnch as a publication token, but neither store carries any memory barrier:...