PT-2026-84567

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...

PT-2026-84465

Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary operating system commands by supplying a crafted PHP object graph in the back query GET parameter of the logout handler. Attackers can pass a base64-encoded serialized payloa...

PT-2026-84454

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

PT-2026-84119

Name of the Vulnerable Software and Affected Versions Cobham SATCOM VSAT7090 Maritime Satellite Router versions prior to 20260704 Description Command injection is possible via remote attack in the JSON Parsing component. The issue exists within the c set reports decode function of the...

KLA91248 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1...

CVE-2026-52022

Kamailio v.6.1.1 and before contains a vulnerability in its IMS P-CSCF registration handling components that allows a remote, unauthenticated attacker to trigger a denial of service over the network (CVSS 3.1: 7.5 HIGH ). The vulnerability requires no user interaction and results in high availabi...

PT-2026-84405

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...

PT-2026-84519

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

PT-2026-84075

Name of the Vulnerable Software and Affected Versions WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode versions prior to 4.4.2 Description An arbitrary file upload issue exists due to missing file type validation in the saas upload logo function combin...

ROS-20260901-73-0049

The vulnerability in Netty is related to the incorrect checking of the specified data type for input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-52111

An issue in fast-note-sync-service =2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes authTokenKey...

PT-2026-84558

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-52023

Kamailio (SIP router) versions v.6.1.1 and earlier contain a Denial of Service vulnerability in the ims_registrar_pcscf module. The root cause lies in the pcscf_save_pending/save_pending code path and the security-agreement parsing function parse_sec_agree() in sec_agree.c, which a remote attacke...

Erlang/OTP -- remote crash via gen_tcp with {packet,4}

The OTP 29.0.6 release notes report: A gentcp socket using the inet driver and packet,4 had a bug if receiving a packet with size just below INTMAX. That packet size wrapped in size calculations and made the received data overwrite its allocation and trash allocator metadata and subsequent blocks...

KLA91254 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denia...

CVE-2025-59287

在本研究中，我们将剖析在 Microsoft Windows Server Update Services WSUS 环境中发现的严重漏洞（CVE-2025-59287）。该漏洞源于发送至 GetCookie 端点的 AuthorizationCookie 对象的不安全反序列化：加密的 Cookie 数据使用 AES-128-CBC 解密，随后通过 BinaryFormatter 进行反序列化，且未经过适当的类型验证，从而能够以 SYSTEM 权限执行远程代码。 此 EXP 首先需要获取 Wusu 的密钥。该密钥需通过其他攻击手段获取。这一点需要予以说明。...

Analysis-for-stage1-shellcode-loader-from-hacking-

来自 Hacking Team 的 stage1 shellcode 加载器分析 代码流程图 网络 IoC https://172\.20\.20\.164 root@kitploit: Mozilla/4.0 compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; MDDRJS 感染 IoC（释放的文件）...

CVE-2026-82222

CVE-2026-82222 — GiveWP 作者： Rx019 CVSS： 10.0（严重） 类型： 未认证 PHP 对象注入 → 远程代码执行 插件： GiveWP give — 捐赠插件与筹款平台 受影响版本： 已修复版本： 4.16.8 描述 GiveWP 将捐赠者的 lastname 未经清理地存储在 PHP 会话中。当提交捐赠时未包含 givelast 字段，GiveWP 会直接将数据库中的原始值反序列化到会话中。这使得未认证攻击者能够通过捐赠者资料端点将 PHP 序列化对象注入 lastname，然后通过提交精心构造的捐赠来触发反序列化——从而利用 GiveWP...

CVE-2025-59528

Version francaise CVE-2025-59528 Proof of Concept Minimal PoC focused on technical validation of the vulnerability in an authorized environment. Prerequisites You must have a user account on the target Flowise dashboard. You must have a valid API key linked to that account. You must start a...

cve-2025-20333

CVE-2025-20333 - Complete Research & Exploitation Toolkit Overview This directory contains comprehensive research, analysis, and proof-of-concept code for CVE-2025-20333 , a critical stack buffer overflow vulnerability in Cisco ASA/FTD WebVPN servers. Status: ⚠️ Actively exploited in the wild...