🕵️ RESEARCH & DEEP DIVES
PHPGurukul Bank Locker Management System sidebar.php access controlA security... — CVE ThreatInt
PHPGurukul Bank Locker Management System view-assign-locker.php authorization... — CVE ThreatInt
SIPp through 3.7.7 Buffer Overflow via Oversized SIP Header ContentSIPp throu... — CVE ThreatInt
SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Param... — CVE ThreatInt
SIPp through 3.7.7 Buffer Overflow via SIP To Header TagSIPp through 3.7.7 co... — CVE ThreatInt
ESPnet before 202609 Remote Code Execution via Unsafe DeserializationESPnet b... — CVE ThreatInt
Nodemailer 9.1.0 through 10.0.4 Denial of Service via Quadratic Address Parsi... — CVE ThreatInt
SourceCodester School Registration and Fee System pay_report.php sql injectio... — CVE ThreatInt
SourceCodester School Registration and Fee System delete_stud.php sql injecti... — CVE ThreatInt
PostGIS address_standardizer through 3.7.0 Out-of-Bounds Read via Unvalidated... — CVE ThreatInt
SourceCodester School Registration and Fee System save_stud.php sql injection... — CVE ThreatInt
rustypaste before 0.18.1 Path Traversal via filename headerrustypaste before ... — CVE ThreatInt
procs through 0.14.12 Terminal Escape Sequence Injection via Commandprocs thr... — CVE ThreatInt
Amundsen Frontend through 4.3.0 Stored XSS via DescriptionAmundsen frontend t... — CVE ThreatInt
joi before 17.13.8 and 18.2.9 Prototype Pollution via messagesjoi before vers... — CVE ThreatInt
Spug through 3.4.0 Remote Code Execution via ping_checkSpug through 3.4.0 con... — CVE ThreatInt
Open Notebook before 1.11.0 Server-Side Request Forgery via link-sourceOpen N... — CVE ThreatInt
CAPEv2 through commit 471ee4b REST API Task Endpoints Missing Ownership Check... — CVE ThreatInt
Froxlor before 2.3.12 SSH Key Injection via authorized_keysFroxlor before 2.3... — CVE ThreatInt
LangBot before 4.10.11 Authentication Bypass via Weak Recovery KeyLangBot bef... — CVE ThreatInt
Strapi Stored XSS via Content Manager Preview — thehackerwire.com (discovered)
Purple-team validation of detections against MITRE ATT&CK — securityboulevard.com (discovered)
Zscaler Private Access over Palo Alto Global Protect VPN — r/cybersecurity