Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Inside Event Tracing for Windows with EtwSuite ↗ (opens in a new tab)

  Ido Veltzman :: Security Research · Published 2026-08-09 · First collected 2026-10-24

• CVE-2026-63030 and CVE-2026-60137: 'wp2shell' Captured Exploit Payload ↗ (opens in a new tab)

  F5 Labs All · Published 2026-08-08 · First collected 2026-10-24

• From Finding to Fixing: Reducing maintainer burden with automated patches ↗ (opens in a new tab)

  Google Security · Published 2026-07-29 · First collected 2026-10-24

• Adobe Patches Acrobat Chrome Extension Flaw That Exposed WhatsApp Web Chats to Any Website ↗ (opens in a new tab)

  Cybersecurity News: Threats, Vulnerabilities & Privacy Updates - gHacks · Published 2026-07-23 · First collected 2026-10-24

• TSUBAME Report Overflow (Jan-Mar 2026) ↗ (opens in a new tab)

  JPCERT advisories · Published 2026-07-23 · First collected 2026-10-24

• Part II: Android CVEs: How Patch Levels and Vendors Change Exposure ↗ (opens in a new tab)

  Resources RSS Feed | ONEKEY · Published 2026-07-23 · First collected 2026-10-24

• Against All Odds: Exploiting a QNAP NAS ↗ (opens in a new tab)

  SySS Tech Blog · Published 2026-07-22 · First collected 2026-10-24

• Dnsmasq DNS Remote Heap Buffer Overflow ↗ (opens in a new tab)

  Exodus Intelligence · Published 2026-07-20 · First collected 2026-10-24

• Introducing rCTF v2 ↗ (opens in a new tab)

  OtterSec · Published 2026-07-14 · First collected 2026-10-24

• [tl;dr sec] #336 - Autonomous Vulnerability Hunting, GuardDog 3.0, Are Bug Bounties Cooked? ↗ (opens in a new tab)

  tl;dr sec · Published 2026-07-09 · First collected 2026-10-24

• Process Parameter Poisoning ↗ (opens in a new tab)

  :: Orange Cyberdefense :: on Orange Cyberdefense · Published 2026-07-06 · First collected 2026-10-24

• How I write malware that evades AV and EDR ↗ (opens in a new tab)

  frereit's blog · Published 2026-06-30 · First collected 2026-10-24

• Docker Internal (4) ↗ (opens in a new tab)

  u1f383 · Published 2026-06-20 · First collected 2026-10-24

• An update on FortiBleed — what’s happening with victim orgs ↗ (opens in a new tab)

  DoublePulsar - Medium · Published 2026-06-19 · First collected 2026-10-24

• PeopleSoft PeopleTools Pre-Authentication RCE: A PSIGW SSRF Chain That Executes Inside the JVM ↗ (opens in a new tab)

  Trend Micro Research, News and Perspectives · Published 2026-06-18 · First collected 2026-10-24

• FreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs (Part 1 of 2) ↗ (opens in a new tab)

  Blog - Praetorian · Published 2026-06-17 · First collected 2026-10-24

• Exploiting CVE-2024-1065 via the Page Cache ↗ (opens in a new tab)

  Cyber Blog · Published 2026-06-09 · First collected 2026-10-24

• [CONFERENCE] SSTIC 2026 ↗ (opens in a new tab)

  RandoriSec · Published 2026-06-08 · First collected 2026-10-24

• One of the many flaws of Phi untagging: CVE-2026-4447 ↗ (opens in a new tab)

  kqx · Published 2026-06-03 · First collected 2026-10-24

• Android SELinux Internals Part III - Kernel-Level SELinux Bypass and Real-World Exploit Chains ↗ (opens in a new tab)

  8kSec Blog · Published 2026-06-03 · First collected 2026-10-24

• Patched But Vulnerable, Vulnerable But Patched: What Your Scanner Isn't Telling You ↗ (opens in a new tab)

  Binarly Research · Published 2026-06-01 · First collected 2026-10-24

• Smuggling Through the Front Door... Achieving Global Redirect Poisoning at the Edge ↗ (opens in a new tab)

  Malicious Group · Published 2026-05-30 · First collected 2026-10-24

• SNI proxy SSRF vulnerabilities: Misconfigurations, exploitation, and defense ↗ (opens in a new tab)

  Acunetix Blog · Published 2026-05-26 · First collected 2026-10-24

• A File Format Uncracked for 20 Years: Part 2 ↗ (opens in a new tab)

  lander's posts · Published 2026-05-16 · First collected 2026-10-24

• Unpacking Russian-Iranian Private-Sector Cyber Connections ↗ (opens in a new tab)

  Margin Research · Published 2026-05-06 · First collected 2026-10-24

• The TSIG That Wasn’t: Finding an Authentication Bypass Across CoreDNS Transports ↗ (opens in a new tab)

  Hacktive Security · Published 2026-05-06 · First collected 2026-10-24

• Detecting Copy Fail Linux Vulnerability Agentlessly with Sandfly ↗ (opens in a new tab)

  Sandfly Security Blog RSS Feed · Published 2026-05-05 · First collected 2026-10-24

• Security Onion and Linux Kernel Copy Fail Vulnerability CVE-2026-31431 ↗ (opens in a new tab)

  Security Onion · Published 2026-05-01 · First collected 2026-10-24

• Discovering Vulnerabilities in Enterprise Audiovisual Hardware ↗ (opens in a new tab)

  Spaceraccoon's Blog · Published 2026-05-01 · First collected 2026-10-24

• Zero-Click RCE in Figma Desktop: A Race-Conditioned Prototype Pollution Chain That Escapes the Plugin Sandbox ↗ (opens in a new tab)

  Critical Thinking - Bug Bounty Podcast · Published 2026-04-27 · First collected 2026-10-24