io.jenkins.plugins:design-library (>=444.v568b_174ece88, <=483.v401c307fdd1b), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +5 more potentially affected by CVE-2026-84654 via org.kohsuke.stapler:stapler (>=2092.v91b_2c63e0c97, <=2107.v8dfcb_e8ed317)

org.kohsuke.stapler:stapler MAVEN version =2092.v91b2c63e0c97, =444.v568b174ece88, =2.569, =2.569, =2092.v91b2c63e0c97, =2092.v91b2c63e0c97, =2092.v91b2c63e0c97, =2107.v8dfcbe8ed317 Source cves: CVE-2026-84654 Source advisory: MEND:CVE-2026-84654...

io.jenkins.plugins:design-library (>=444.v568b_174ece88, <=483.v401c307fdd1b), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +1 more potentially affected by CVE-2026-84650 via org.jenkins-ci.main:jenkins-core (>=2.569, <=2.579)

org.jenkins-ci.main:jenkins-core MAVEN version =2.569, =444.v568b174ece88, =2.569, =2.579 Source cves: CVE-2026-84650 Source advisory: MEND:CVE-2026-84650...

io.jenkins.plugins:design-library (>=444.v568b_174ece88, <=483.v401c307fdd1b), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +5 more potentially affected by CVE-2026-84649 via org.kohsuke.stapler:stapler (>=2092.v91b_2c63e0c97, <=2107.v8dfcb_e8ed317)

org.kohsuke.stapler:stapler MAVEN version =2092.v91b2c63e0c97, =444.v568b174ece88, =2.569, =2.569, =2092.v91b2c63e0c97, =2092.v91b2c63e0c97, =2092.v91b2c63e0c97, =2107.v8dfcbe8ed317 Source cves: CVE-2026-84649 Source advisory: MEND:CVE-2026-84649...

io.jenkins.plugins:design-library (>=444.v568b_174ece88, <=483.v401c307fdd1b), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +5 more potentially affected by CVE-2026-84647 via org.kohsuke.stapler:stapler (>=2092.v91b_2c63e0c97, <=2107.v8dfcb_e8ed317)

org.kohsuke.stapler:stapler MAVEN version =2092.v91b2c63e0c97, =444.v568b174ece88, =2.569, =2.569, =2092.v91b2c63e0c97, =2092.v91b2c63e0c97, =2092.v91b2c63e0c97, =2107.v8dfcbe8ed317 Source cves: CVE-2026-84647 Source advisory: MEND:CVE-2026-84647...

linux-server-pentest-lab

🔐 Linux Black-Box-Style Penetration Test — Full Attack Chain...

China Is Strapping ‘Digital Bombs’ to Civilian Infrastructure—Is the US Ready?

This week on “Uncanny Valley,” Andy Greenberg discusses sitting in on a war game simulating a cyberattack from the Chinese hacking group Volt Typhoon...

io.jenkins.plugins:design-library (444.v568b_174ece88), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +1 more potentially affected by CVE-2026-19429 +1 more via org.jenkins-ci.main:jenkins-core (>=2.569, <=2.574)

org.jenkins-ci.main:jenkins-core MAVEN version =2.569, =2.569, =2.574 Source cves: CVE-2026-19429, CVE-2026-33001 Source advisory: SNYK:JAVA-ORGJENKINSCIMAIN-18609775...

io.jenkins.plugins:design-library (444.v568b_174ece88), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +1 more potentially affected by CVE-2026-70430 via org.jenkins-ci.main:jenkins-core (>=2.569, <=2.575)

org.jenkins-ci.main:jenkins-core MAVEN version =2.569, =2.569, =2.575 Source cves: CVE-2026-70430 Source advisory: MEND:CVE-2026-70430...

io.jenkins.plugins:design-library (444.v568b_174ece88), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +1 more potentially affected by CVE-2026-70429 via org.jenkins-ci.main:jenkins-core (>=2.569, <=2.575)

org.jenkins-ci.main:jenkins-core MAVEN version =2.569, =2.569, =2.575 Source cves: CVE-2026-70429 Source advisory: MEND:CVE-2026-70429...

io.jenkins.plugins:design-library (444.v568b_174ece88), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +1 more potentially affected by CVE-2026-70428 via org.jenkins-ci.main:jenkins-core (>=2.569, <=2.575)

org.jenkins-ci.main:jenkins-core MAVEN version =2.569, =2.569, =2.575 Source cves: CVE-2026-70428 Source advisory: MEND:CVE-2026-70428...

io.jenkins.plugins:design-library (444.v568b_174ece88), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +1 more potentially affected by CVE-2026-70427 via org.jenkins-ci.main:jenkins-core (>=2.569, <=2.575)

org.jenkins-ci.main:jenkins-core MAVEN version =2.569, =2.569, =2.575 Source cves: CVE-2026-70427 Source advisory: MEND:CVE-2026-70427...

io.jenkins.plugins:design-library (444.v568b_174ece88), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +1 more potentially affected by CVE-2026-70426 via org.jenkins-ci.main:jenkins-core (>=2.569, <=2.575)

org.jenkins-ci.main:jenkins-core MAVEN version =2.569, =2.569, =2.575 Source cves: CVE-2026-70426 Source advisory: MEND:CVE-2026-70426...

io.jenkins.plugins:design-library (444.v568b_174ece88), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +3 more potentially affected by CVE-2026-70426 via org.jenkins-ci.main:remoting (>=3383.vc8881d4b_0e76, <=3384.v60d89463d9e0)

org.jenkins-ci.main:remoting MAVEN version =3383.vc8881d4b0e76, =2.571, =2.571, =6703.v926e472d7050, =6731.vaeadd2a673a4 Source cves: CVE-2026-70426 Source advisory: MEND:CVE-2026-70426...

org.apache.jspwiki.wikipages:jspwiki-wikipages-builder (>=2.12.2, <=2.12.3), org.apache.jspwiki.wikipages:jspwiki-wikipages-de (>=2.12.2, <=2.12.3) +10 more potentially affected by CVE-2026-48910 via org.apache.jspwiki:jspwiki-markdown (>=2.11.0.m1, <=2.12.3)

org.apache.jspwiki:jspwiki-markdown MAVEN version =2.11.0.m1, =2.12.2, =2.12.2, =2.12.2, =2.12.2, =2.12.2, =2.12.2, =2.12.2, =2.12.2, =2.12.2, =2.12.2, =2.12.2, =2.11.0.m1, =2.12.3 Source cves: CVE-2026-48910 Source advisory: MEND:CVE-2026-48910...

CVE-2026-41939

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...

Jolokia <= 1.7.1 Information Leakage Detection

Tomcat's credential disclosure leading to Remote Code Execution via WAR upload. !/usr/bin/env python3 -- coding: utf-8 -- """Tomcat's credential disclosure leading to Remote Code Execution via WAR upload.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

DHS Official Resigns, Citing ‘War on Immigrants’

The outgoing executive director of the Office of Homeland Security Statistics is one of very few federal officials to speak out against the Trump administration’s immigration crackdown...

K000162249: Spring Framework Path Traversal vulnerability CVE-2025-41242

Security Advisory Description Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded...

What Happens if China Hacks the US Water Supply? I Went to a Secret War Game to Find Out

Burst water mains. Evacuated hospitals. In a closed-door simulation, insurers played out their response to a mass disruption by China’s Volt Typhoon hackers—and found a nightmare scenario...

EUVD-2026-39117

ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The...