CVE-2025-59094

CVE-2025-59094 concerns the Kaba exos 9300 System management application (d9sysdef.exe). The issue is a local privilege escalation that allows an attacker to specify an arbitrary executable and the weekday/start time for it to run with SYSTEM privileges. The cited sources describe the vulnerabili...

CVE-2025-59094 Local Privilege Escalation in dormakaba Kaba exos 9300 System management

A local privilege escalation vulnerability has been identified in the Kaba exos 9300 System management application d9sysdef.exe. Within this application it is possible to specify an arbitrary executable as well as the weekday and start time, when the specified executable should be run with SYSTEM...

RHSA-2026:1148 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

CVE-2026-1425

creationtimestamp| type| source ---|---|--- 2026-01-26 09:43:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdcxfkvvbn2n 2026-01-26 10:58:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115961044303697007...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2026-1417 GPAC filedump.c dump_isom_rtp null pointer dereference

A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dumpisomrtp of the file applications/mp4box/filedump.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and coul...

PT-2026-4753

Name of the Vulnerable Software and Affected Versions Access Manager 92xx hardware revision K7 affected versions not specified Description The Access Manager 92xx hardware revision K7 utilizes a Linux-based operating system, differing from older revisions that used Windows CE. An SSH service is...

RHEL 8 : kernel-rt (RHSA-2026:1148)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1148 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

CVE-2026-23009

creationtimestamp| type| source ---|---|--- 2026-01-25 15:35:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdb2mem7lr2c...

MAL-2026-505 Malicious code in flask-hookserver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4d5afd1538994efa55632d3ed6d7c9fa419fb26c542b641a3efbd7b35501ea58 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-502 Malicious code in test-poc-package-for-session (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9f768feb5a11add4d0ac64d8f24777461d3586e719a57d4432711ee6aae4f112 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

Malicious code in test-poc-package-for-session-2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0b7003b7bd9585bbb25ce1f957ffef83603883d550f07f77443780a7d47a7f20 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

MAL-2026-503 Malicious code in test-poc-package-for-session-2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0b7003b7bd9585bbb25ce1f957ffef83603883d550f07f77443780a7d47a7f20 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

Mitigating the OWASP Top 10 for Large Language Models Applications Using Intelligent Agents

Large Language Models LLMs have emerged as a transformative and disruptive technology, enabling a wide range of applications in natural language processing, machine translation, and beyond. However, this widespread integration of LLMs also raised several security concerns highlighted by the Open...

GHSA-CH7P-MPV4-4VG4

creationtimestamp| type| source ---|---|--- 2026-01-24 21:26:48+00:00| seen| https://gist.github.com/alon710/8ba7ed49e46933dff872240af51e2b2d 2026-01-24 22:42:10+00:00| seen| https://gist.github.com/alon710/09b665ccbc9a4582770dd271d38993ea...

GHSA-GFPW-JGVR-CW4J

creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:38+00:00| seen| https://gist.github.com/alon710/6cb56ce49fdd250735cd1e3f48481606 2026-01-24 22:26:33+00:00| seen| https://gist.github.com/alon710/f30dfca4833be946bfbfe3ad5d0ceea4 2026-01-24 22:26:36+00:00| seen|...

GHSA-2P49-45HJ-7MC9

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:59+00:00| seen| https://gist.github.com/alon710/4b217fe2cf8ffb61c81cdbc3ae7afb81 2026-01-24 22:19:21+00:00| seen| https://gist.github.com/alon710/a4941f2432a88ce8da6f5f32e199afb8 2026-01-24 22:19:24+00:00| seen|...

GHSA-4XC5-WFWC-JW47

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:28+00:00| seen| https://gist.github.com/alon710/8f142f8cf4ae5a8648d9ce5ea421de58 2026-01-24 22:16:35+00:00| seen| https://gist.github.com/alon710/2f37f44190d816a945e9b4fe5951c151 2026-01-24 22:16:37+00:00| seen|...

CVE-2026-0687

creationtimestamp| type| source ---|---|--- 2026-01-24 10:48:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md623pjguk2m...

CVE-2026-0633

The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.1.0. This is due to the use of a forgeable cookie value derived only from the entry ID and current user ID without...