faction v1.8.13

OWASP - FACTION PenTesting Report Generation and Collaboration Framework Faction is now an OWASP Project! You can find more informationhere Sponsors Premium Sponsors otto-js - PCI and Client Side Security | Secninjaz Technologies LLP ---|--- Become a Sponsor ❤️ If you like the project and would...

MINI-PPX7-9JR8-89PF

Bulletin has no description...

faraday_plugins v1.29.0

Install root@kitploit: pip install faraday-plugins Commands List Plugins List all plugins and if its compatible with command or/and report Optional params: -cpf / --custom-plugins-folder PATH: If given will also look for custom plugins on that path root@kitploit: faraday-plugins list-plugins Test...

CVE-2026-32475

creationtimestamp| type| source ---|---|--- 2026-08-19 23:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthtintyc32y 2026-08-20 06:21:25+00:00| seen| https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtim5rbjj42a 2026-08-20 06:57:35+00:00| seen|...

CVE-2026-76310

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the associated search job dispatch archive, recover session material, and use it to access all relevant data available to the report owner and affect...

CVE-2026-76311

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the dispatch archive for an embedded report search job and use exposed session material to access all relevant data and affect system integrity on the...

CVE-2026-55089

creationtimestamp| type| source ---|---|--- 2026-08-19 22:11:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthqsjpskr2e 2026-08-20 01:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mti3cwawod24 2026-08-20 08:00:04+00:00| published-proof-of-concept|...

CVE-2026-76139

creationtimestamp| type| source ---|---|--- 2026-08-19 22:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthq6olui527 2026-08-20 14:47:10+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtjig5p2f42w...

CVE-2026-76347

Splunk Secure Gateway's Report Notifications REST API fails to validate notification path values before sending system-authenticated internal requests, allowing non-admin users to trigger SSRF, alter Search Head Cluster state, and cause denial of service. Affected versions: Splunk Enterprise belo...

CVE-2026-76311 Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the dispatch archive for an embedded report search job and use exposed session material to access all relevant data and affect system integrity on the...

CVE-2026-76311

Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 are affected by an improper access control flaw in the embedded report authorization flow. The flow fails to block dispatch archive download requests before the archive is sent to the requester, allowing an unauthenticated user p...

CVE-2026-76310 Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the associated search job dispatch archive, recover session material, and use it to access all relevant data available to the report owner and affect...

CVE-2026-76310

An unauthenticated user with an embedded report token can download the search job dispatch archive via REST API, recover session material, and access all data available to the report owner—including admin-level actions—due to embedded report access not blocking dispatch archive downloads. Affecte...

MINI-546V-JM58-7QQH

Bulletin has no description...

MINI-HFW5-JFG3-VXH4

Bulletin has no description...

MINI-WX87-H5FJ-M3JW

Bulletin has no description...

MINI-X5H6-493V-WF8J

Bulletin has no description...

MINI-CJM9-QCW3-MQM8

Bulletin has no description...

JLSEC-2026-1345 GNU Bison allows for an execution of an arbitrary program during HTML report generation due to...

GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define tool.xsltproc, which is accepted without...

CVE-2026-76347: Server-Side Request Forgery (SSRF)

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could use Server-Side Request Forgery SSRF in report notifications to send system-authenticated...