🕵️ RESEARCH & DEEP DIVES
GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereferenceA vulnerabil... — CVE ThreatInt
davenardella snap7 s7_micro_client.cpp opUpload memory corruptionA vulnerabil... — CVE ThreatInt
Exrick xmall Order Printing order-print.jsp cross site scriptingA vulnerabili... — CVE ThreatInt
linlinjava litemall Product Detail index.vue AdminGoodsService.validate cross... — CVE ThreatInt
linlinjava litemall Admin Topic index.vue AdminTopicController.validate cross... — CVE ThreatInt
moxi624 Mogu Blog v2 blogSort Endpoint info.ftl BlogSortServiceImpl.addBlogSo... — CVE ThreatInt
quequnlong shiyi-blog Search index.vue highlightKeyword cross site scriptingA... — CVE ThreatInt
Rizwan17 inventory-management-system Registration register.php createUserAcco... — CVE ThreatInt
In this latest edition of ~ this week in security ~ Apple goes all-in on "always-listening," Berlin is in crisis mode... — @zackwhittaker@mastodon.social
Spug through 3.4.0 RCE via ping_check Command Injection (CVE-2026-90770) — thehackerwire.com (discovered)
Why isn’t my process terminating on Windows on ARM? — securityboulevard.com (discovered)