CVE-2025-49844

CVE-2025-49844 RediShell AI-made Revshell PoC Untested completition of the Redishell PoC made by AI. Original PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py Korean Piece: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua Progress ? We later went...

CVE-2026-42089

CVE-2026-42089 A local package installation helper trusted caller-supplied package names too much. In yeoman-environment, missing generators could be installed without user confirmation, turning attacker-controlled project metadata into a package-install and code-execution path. Intro I found thi...

CVE-2026-89510

creationtimestamp| type| source ---|---|--- 2026-09-18 17:40:02+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117293265787549640 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

SUSE CVE-2026-90237

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: move custom expectation support to helper Originally, the ct expectation support called nfcthelperextadd for confirmed conntracks, which is invalid, triggering a splat. This was fixed by commit 1710eb913bdc...

CVE-2026-85500 `require_confirmed_with` is not enforced on the action and fails open on an unreadable attribute in AshAuthentication

Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session, defeating a mandatory email confirmation requirement. AshAuthentication.Strategy.Password.Actions.checkuser/2 decides whether the attribute named by...

CVE-2026-85500 `require_confirmed_with` is not enforced on the action and fails open on an unreadable attribute in AshAuthentication

Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session, defeating a mandatory email confirmation requirement. AshAuthentication.Strategy.Password.Actions.checkuser/2 decides whether the attribute named by...

CVE-2026-85500: Authentication Bypass by Primary Weakness

Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session, defeating a mandatory email confirmation requirement. AshAuthentication.Strategy.Password.Actions.checkuser/2 decides whether the attribute named by...

CVE-2026-87184

creationtimestamp| type| source ---|---|--- 2026-09-16 02:14:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2xvgqfk2f 2026-09-16 07:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmkvthlv62f 2026-09-23 03:07:07+00:00| seen|...

CVE-2026-83282

creationtimestamp| type| source ---|---|--- 2026-09-16 01:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlzlhlam52n 2026-09-16 02:12:57+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2udztim2w 2026-09-16 16:00:43+00:00| seen|...

CVE-2026-83151

creationtimestamp| type| source ---|---|--- 2026-09-16 00:13:46+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu7aiuku2p 2026-09-16 03:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm76b3jxp2t 2026-09-23 09:45:21+00:00| seen|...

CVE-2026-87288

creationtimestamp| type| source ---|---|--- 2026-09-15 21:03:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvljkvepjn2e...

CVE-2026-19886

creationtimestamp| type| source ---|---|--- 2026-09-15 20:13:28+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvlgrkta4a2i...

CVE-2026-80947

creationtimestamp| type| source ---|---|--- 2026-09-15 04:50:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvjt6cirjh27 2026-09-15 04:50:04+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117273251175352978 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-82439

creationtimestamp| type| source ---|---|--- 2026-09-14 21:20:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvizzsw2fw2f...

CVE-2026-73470

creationtimestamp| type| source ---|---|--- 2026-09-14 20:50:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mviye7evdw2t...

CVE-2026-86349

creationtimestamp| type| source ---|---|--- 2026-09-14 14:47:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ig6ptzcc3vra4...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftct: Skip the evaluation of rules for confirmed conntrack entries. The nftctexpectobjeval function calls nfctextadd for confirmed conntrack entries. However, nfctextadd can only be called when !nfctisconfirmed is...

CVE-2026-18073

creationtimestamp| type| source ---|---|--- 2026-09-13 16:00:02+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117264561041032721 2026-09-13 16:00:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvfxojck6k2g...

CVE-2026-89708

creationtimestamp| type| source ---|---|--- 2026-09-13 12:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvflfcinod2t 2026-09-14 05:03:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvhdhyyi7f2z 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-89671

creationtimestamp| type| source ---|---|--- 2026-09-13 11:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfhzw7v7j2f 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...