🕵️ RESEARCH & DEEP DIVES
CrowdStrike SafeMind: When the Best Offense Builds the Best Defense — CrowdStrike Blog
O-RAN-SC SMO OAM VES Collector allocation of resourcesA vulnerability was det... — CVE ThreatInt
LatePoint - Appointment Booking & Scheduling through 5.6.9 - Unauthenticated Insec... — CVE ThreatInt
Aureus ERP through 1.6.0 Stored XSS via Payment Term NoteAureus ERP through 1... — CVE ThreatInt
SOGo before 5.12.11 Password Reset Token Interception via Origin HeaderSOGo b... — CVE ThreatInt
snappy-java through 1.1.10.8 Buffer Overflow in Snappy.compresssnappy-java th... — CVE ThreatInt
snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methodssnap... — CVE ThreatInt
go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSO... — CVE ThreatInt
O-RAN-SC SMO OAM VES Collector allocation of resourcesA vulnerability was fou... — CVE ThreatInt
M365 Copilot Information Disclosure VulnerabilityIncorrect permission assignm... — CVE ThreatInt
Azure Portal Spoofing VulnerabilityImproper neutralization of input during we... — CVE ThreatInt
Azure Database for PostgreSQL Elevation of Privilege VulnerabilityImproper au... — CVE ThreatInt
Azure Billing Elevation of Privilege VulnerabilityInsufficient verification o... — CVE ThreatInt
Local privilege escalation due to insecure file permissions. The following pr... — CVE ThreatInt
Azure AI Foundry Elevation of Privilege VulnerabilityServer-side request forg... — CVE ThreatInt
Azure Logic Apps Elevation of Privilege VulnerabilityImproper limitation of a... — CVE ThreatInt
Azure Cosmos DB Elevation of Privilege VulnerabilityImproper neutralization o... — CVE ThreatInt
Microsoft 365 Copilot Business Chat Information Disclosure VulnerabilityImpro... — CVE ThreatInt
WeGIA Authenticated Authorization Bypass & IDOR (CVE-2026-54671) — thehackerwire.com (discovered)
Top on-prem AI pentesting tools in 2026 — aikido.dev (discovered)