Release Information for Veeam KubeVirt Proxy

Purpose This article documents releases of the Veeam KubeVirt Proxy KVP utilized by the Veeam Plug-In for KubeVirt. Note: Veeam Plug-In for KubeVirt is also know as Veeam Plug-In for Red Hat OpenShift Virtualization. Release Information 1.0.1 2026-10-02 Security Updated the following packages to...

stratum-c2

Cloud Persistence Framework · v3.0.2 A fallback foothold that routes through infrastructure defenders can't block. The problem Your primary C2 goes silent. The domain gets blacklisted. The beacon gets flagged. The EDR kills the process. You're out. You need a second channel — one that was never...

ghidra_svr_bridge

binja-ghidra A Binary Ninja plugin that connects to a Ghidra Server repository and imports its analysis — symbols, function names, and comments — directly into an open Binary Ninja binary view. What it does Ghidra and Binary Ninja each have strengths. This plugin lets you use both on the same...

CVE-2026-25589-25588-25243-23631-23479-REDIS

GUIDE TO CHECKING & REMEDIATING 5 REDIS CVEs AS OF 2026.05.08 Release date: 2026-05-08 Author: TonyCao [email protected] Source: Redis Security Advisory TABLE OF CONTENTS 1. Overview 2. Affected Versions 3. Details of Each CVE CVE-2026-23479 — Use-after-free in Unblock Client Flow...

CVE-2026-26717

CVE-2026-26717: HMAC Timing Attack in OpenFUN Richie LMS Author: Elvin Latifli CVE ID: CVE-2026-26717 Severity: Medium CVSS 3.1: 4.8 — AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Product: OpenFUN Richie all versions prior to commit a1b5bbd Affected Component: src/richie/apps/courses/api.py —...

Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass

SummaryThe Mnemosyne sync server's authentication check decoded JWT bearer tokens but never verified their HMAC-SHA256 signatures. Any well-formed token was accepted, allowing an unauthenticated attacker to impersonate any user and read or modify their sync data.Severity: CriticalCVSS 3.1:...

Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes

SummaryA user who is demoted from admin by an identity provider keeps admin-level read and write access to every user's notes, over any Socket.IO connection that was already open when the demotion happened. Open WebUI caches the user's role on the socket at connection time, and the two SSO...

PoC-CVE-2025-3914-Aeropage-WordPress-File-Upload

CVE-2025-3914 - Subida arbitraria de archivos en Aeropage Sync for Airtable WordPress Descripción El plugin Aeropage Sync for Airtable de WordPress ≤ v3.2.0 es vulnerable a subidas arbitrarias de archivos autenticadas debido a una validación insuficiente del tipo de archivo en la función...

CVE-2026-62060

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2...

The Vault by Focused Hunts

The Vault Tus secretos. Tu control. La mayoría de los gestores de contraseñas quieren que confíes tus datos sensibles a una empresa que no conoces. Controlan los servidores y las claves, y solo te queda esperar que nada salga mal. The Vault hace las cosas de otra manera. Tus archivos de bóveda...

Exploit_Sync_Breeze_v10.0.28_CVE-2017-14980

ExploitSyncBreezev10.0.28CVE-2017-14980...

tomcat-cluster-session-sync-exp

La herramienta se utiliza únicamente para investigación de seguridad y autoevaluación interna. Está prohibido usarla para lanzar ataques ilegales; el usuario es responsable de las consecuencias. Exploit de sincronización de sesiones del clúster de Tomcat Este es un exploit de deserialización...

CVE-2026-62060 WordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2...

CVE-2026-62060 WordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2...

EUVD-2026-90808

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2...

CVE-2026-62060

The WordPress Captivate Sync plugin (versions

WordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Captivate Sync versions = 3.3.2...

Blackash-CVE-2025-41115

🔐 CVE-2025-41115: Escalada de privilegios crítica en SCIM de Grafana Vulnerabilidad crítica de escalada de privilegios en SCIM de Grafana Enterprise 🌟 Resumen CVE-2025-41115 es una vulnerabilidad Crítica CVSS 10.0 en Grafana Enterprise que afecta a su función de aprovisionamiento de usuarios SCIM...

CVE-2026-90972

The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users' email addresses and to trigger a cross-user CRM re-sync...

EUVD-2026-90515

The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users' email addresses and to trigger a cross-user CRM re-sync...