Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA

German and US law enforcement have taken down the core infrastructure of Kratos , described by German investigators as one of the world's most widely used criminal phishing kits, and Indonesian authorities arrested the man they say developed and ran it. In a joint announcement on Monday, the...

Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library

Cybersecurity researchers have discovered a NuGet typosquat that's unlike the typical information-stealing malware distributed via package registries: usual info-stealers: it's designed to rig live game results on Digitain. The package, named "Newtonsoftt.Json.Net," masquerades as the...

CVE-2026-16364

creationtimestamp| type| source ---|---|--- 2026-07-22 04:46:10+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722...

CVE-2026-16416

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:10+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722...

Exploit for CVE-2026-50055

cve-id Donate Support the maintenance of this project wit...

CodeAlpha_SecureCodingReview

CodeAlphaSecureCodingReview Cyber Security Internship — Co...

FastJson-JsonType-RCE

Fastjson @JSONType RCE Exploit Toolkit ⚠️ Only for authoriz...

CVE-2026-56817

creationtimestamp| type| source ---|---|--- 2026-07-22 02:10:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7am2pn732e...

pedit-cow-exploit

CVE-2026-46331 – pedit COW Local Privilege Escalation Proof-of...

LG to Ban Residential Proxies from Smart TV Apps

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available...

Exploit for Deserialization of Untrusted Data in Microsoft

cve-id ⚡ Simple Usage Use this project only in safe and...

EUVD-2026-46540

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

SUSE CVE-2026-56623

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2026-64822

creationtimestamp| type| source ---|---|--- 2026-07-21 23:10:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6wk7clm42i...

CVE-2026-60212

creationtimestamp| type| source ---|---|--- 2026-07-21 23:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6wju6gyj2j...

CVE-2026-60210

creationtimestamp| type| source ---|---|--- 2026-07-21 23:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6wjrzxac2z...

CVE-2026-58438

creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:10+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-xv9x-fj9g-vj6h...

CVE-2026-47054

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

Exploit for Command Injection in Microsoft

🔑 YellowKey-Bitlocker-CVE-2026-45585 - Manage your BitLocker r...