spring-shell-vuln

spring-shell-vuln Spring4Shell: Spring core RCE vulnerability Spring has Confirmed the RCE in Spring Framework. The team has just published the statement along with the mitigation guides for the issue. Now, this vulnerability can be tracked as CVE-2022-22965. Some information about the Spring4She...

CVE-2024-52317

🚨🚨CVE-2024-52317🚨🚨 CVE-2024-52317 - Apache Tomcat HTTP/2 Data Leakage Vulnerability Overview CVE-2024-52317 is a vulnerability affecting Apache Tomcat's HTTP/2 implementation. The issue arises due to improper recycling of HTTP/2 request and response resources, potentially leading to data leakage...

CVE-2026-69579

creationtimestamp| type| source ---|---|--- 2026-09-08 20:10:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztdfeild2t 2026-09-08 20:20:13+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:00:57+00:00| seen|...

EUVD-2026-74172

The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended locations on the appliance filesystem...

CVE-2026-78624

Okta Access Gateway contains an improper path validation flaw in its backup restore function . The function does not validate the filename embedded in an encrypted backup payload, allowing file contents to be written to unintended locations on the appliance filesystem. The vulnerability is rated ...

CVE-2026-78624 Improper Path Validation in Okta Access Gateway Backup and Restore Functionality

The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended locations on the appliance filesystem...

CVE-2026-5201

CVE-2026-5201 Heap-based buffer overflow in gdk-pixbuf JPEG loader Hi, I'm Kağan Çapar. I discovered a heap-based buffer overflow vulnerability in gdk-pixbuf's JPEG image loader that affects virtually all Linux desktop environments. The vulnerability was assigned CVE-2026-5201 and acknowledged by...

CVE-2026-69525

creationtimestamp| type| source ---|---|--- 2026-09-08 20:10:07+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztd4k6hn25 2026-09-08 20:19:23+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:00:55+00:00| seen|...

defenseclaw

root@kitploit: / \ / / / || | / / / / / / /// \ / \ / |/ | | | |/ |\ \ /\ / / / // / / / // /| | | |\ \ /| | | | | | \ V V / // // / || |||/| |||,| // DefenseClaw Security governance for OpenClaw and agentic AI runtimes. Scan capabilities before use, inspect runtime traffic, and export...

CVE-2026-69496

creationtimestamp| type| source ---|---|--- 2026-09-08 20:09:58+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztcueaas2w 2026-09-08 20:20:11+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:05:09+00:00| seen|...

CVE-2026-69493

creationtimestamp| type| source ---|---|--- 2026-09-08 20:09:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztcmbzgn2f 2026-09-08 20:19:12+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:06:25+00:00| seen|...

CVE-2026-78560

CVE-2026-78560 affects the Okta Access Gateway , specifically its optional pass-through authentication source , which accepts user identity from a client-supplied HTTP header without cryptographic validation. When this source is enabled without an upstream reverse proxy or firewall that sanitizes...

CVE-2026-78560 Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source

The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptographic validation. In architectures where this optional source is enabled without an upstream reverse proxy or firewall configured to saniti...

EUVD-2026-74171

The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptographic validation. In architectures where this optional source is enabled without an upstream reverse proxy or firewall configured to saniti...

tfsec

📣 tfsec to Trivy Migration As part of our goal to provide a comprehensive open source security solution for all, we have been consolidating all of our scanning-related efforts in one place, and that is Trivy. Over the past year, tfsec has laid the foundations to Trivy's IaC & misconfigurations...

CVE-2026-69491

creationtimestamp| type| source ---|---|--- 2026-09-08 20:09:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztcdyiqv2j 2026-09-08 22:02:09+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 00:50:05+00:00| seen|...

CVE-2026-85630

HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the processattrs method. Any application with fields or field labels where some attributes are built from data rather than literals allows attacker-influenced text in an attribute value th...

CVE-2026-85630

HTML::FormHandler for Perl, versions before 0.410002 , is affected by an unescaped HTML attribute injection vulnerability in the process_attrs method. Field attributes rendered into HTML are not escaped, allowing attacker-influenced text in attribute values to override field attributes or embed J...

CVE-2023-32560

CVE-2023-32560 Ivanti Avalanche v6.4.0.0 RCE POC Reference: https://www.tenable.com/security/research/tra-2023-27...

cupntlm-Automated-Exploit-For-CVE-2025-33073-

cupntlm CVE-2025-33073 — NTLM Reflection Bypass via DNS Coercion Automated exploitation tool for Active Directory environments. Overview cupntlm automates the NTLM reflection/relay attack chain that abuses CVE-2025-33073. It combines DNS record injection, forced authentication coercion PetitPotam...