Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Across Solana Event Spoofing ↗ (opens in a new tab)

  Maxwell Dulin's Blog · Published 2026-04-22 · First collected 2026-10-24

• Finding and Patching a CPython 0day in Hours: CVE-2026-6100 ↗ (opens in a new tab)

  Theori BLOG · Published 2026-04-13 · First collected 2026-10-24

• CHECK Removed, Context Confused, Checkmate Achieved ↗ (opens in a new tab)

  StreyPaws · Published 2026-04-01 · First collected 2026-10-24

• Kali Linux 2026.1 Release (2026 Theme & BackTrack Mode) ↗ (opens in a new tab)

  Kali Linux · Published 2026-03-24 · First collected 2026-10-24

• Obfuscated Admin IAM Policy ↗ (opens in a new tab)

  Hacking The Cloud · Published 2026-03-23 · First collected 2026-10-24

• CVE-2026-20817 - Windows Error Reporting Service EoP ↗ (opens in a new tab)

  itm4n's blog · Published 2026-03-21 · First collected 2026-10-24

• Vulnerability Testing as a Part of Information Security Management ↗ (opens in a new tab)

  SCNSoft – Information Security · Source updated 2026-03-20 · First collected 2026-10-24

• Perfex CRM <=3.4.0 allows unauthenticated RCE via insecure deserialization ↗ (opens in a new tab)

  NULL CATHEDRAL · Published 2026-03-16 · First collected 2026-10-24

• CVE-2026-20127: Critical Cisco SD-WAN vulnerability exploited in wild ↗ (opens in a new tab)

  Intel 471 Blog · Published 2026-03-13 · First collected 2026-10-24

• We're Hiring! ↗ (opens in a new tab)

  modzero / Blog · Published 2026-03-11 · First collected 2026-10-24

• Four Vulnerabilities in Parse Server ↗ (opens in a new tab)

  devansh · Published 2026-03-07 · First collected 2026-10-24

• How Neo found an SSRF vulnerability in Faraday, and why it matters for every team that ships code ↗ (opens in a new tab)

  ProjectDiscovery Blog · Published 2026-03-03 · First collected 2026-10-24

• From DDS Packets to Robot Shells: Two RCEs in Unitree Go2 Robot Dog ↗ (opens in a new tab)

  Boschko Security Blog · Published 2026-02-26 · First collected 2026-10-24

• VANTAGE – Vulnerability Assessment aNd Testing Automation for Global Enhancement ↗ (opens in a new tab)

  SI-CERT news · Published 2026-02-24 · First collected 2026-10-24

• [Netbsd - cryptodev] CVE-2026-32848 and CVE-2026-32849 ↗ (opens in a new tab)

  nasm.re · Published 2026-02-06 · First collected 2026-10-24

• Binary Rewriting across different Architectures ↗ (opens in a new tab)

  TSMR.eu · Published 2026-01-25 · First collected 2026-10-24

• A patch for the NIS2 Directive ↗ (opens in a new tab)

  CERT.at news · Published 2026-01-21 · First collected 2026-10-24

• Backdoors in VStarcam cameras ↗ (opens in a new tab)

  Almost Secure · Published 2026-01-07 · First collected 2026-10-24

• Drone Hacking Part 1: Dumping Firmware and Bruteforcing ECC ↗ (opens in a new tab)

  Neodyme’s Blog · Published 2026-01-05 · First collected 2026-10-24

• CVE-2025-38352 (Part 2) - Extending The Race Window Without a Kernel Patch ↗ (opens in a new tab)

  faith2dxy · Published 2025-12-23 · First collected 2026-10-24

• mediatek? more like media-REKT, amirite. ↗ (opens in a new tab)

  hyprblog · Published 2025-12-15 · First collected 2026-10-24

• Securing Multi-VPN Access ↗ (opens in a new tab)

  The Hacker’s Choice Knowledge Base · Published 2025-12-03 · First collected 2026-10-24

• Tp-Link Router Deep Research ↗ (opens in a new tab)

  r0keb · Published 2025-11-15 · First collected 2026-10-24

• OffSec Web Expert (OSWE) Review ↗ (opens in a new tab)

  Steflan’s Security Blog · Published 2025-11-11 · First collected 2026-10-24

• Exploiting CVE-2025-21479 on a Samsung S23 ↗ (opens in a new tab)

  XploitBengineer · Published 2025-11-03 · First collected 2026-10-24

• Cloudflared unresolvable repository ↗ (opens in a new tab)

  Markuta · Published 2025-11-02 · First collected 2026-10-24

• Four Bytes, One Lie: A SMAP-Free Confidence Trick on Kernel Pointers ↗ (opens in a new tab)

  Research on Out of Bounds · Published 2025-11-02 · First collected 2026-10-24

• A Retrospective Analysis of CVE-2025-59287 in Microsoft WSUS ↗ (opens in a new tab)

  Blog on CODE WHITE | Red Teaming & Attack Surface Management · Published 2025-10-29 · First collected 2026-10-24

• SourceCodester Performance Indicator System edit_dealer.php sql injectionA vu... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-25 · First collected 2026-10-25

• How new PHP vulnerabilities threaten home users ↗ (opens in a new tab)

  NCSC Finland Daily Security News · Published 2026-10-25 · First collected 2026-10-25