Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• What are business logic vulnerabilities, and why are they so hard to catch? ↗ (opens in a new tab)

  Theori BLOG · Published 2026-03-06 · First collected 2026-10-24

• Bypassing egress filtering in BullFrog GitHub Action using shared IP ↗ (opens in a new tab)

  devansh · Published 2026-03-02 · First collected 2026-10-24

• IBC Client Confusion on Neutron ICQ ↗ (opens in a new tab)

  Maxwell Dulin's Blog · Published 2026-03-02 · First collected 2026-10-24

• CVE-2025-59201 - Network Connection Status Indicator (NCSI) EoP ↗ (opens in a new tab)

  itm4n's blog · Published 2026-02-23 · First collected 2026-10-24

• Total.js RCE gadgets all around ↗ (opens in a new tab)

  Critical Thinking - Bug Bounty Podcast · Published 2026-02-23 · First collected 2026-10-24

• Reconnaissance Has Begun for the New BeyondTrust RCE (CVE-2026-1731): Here's What We See So Far ↗ (opens in a new tab)

  The GreyNoise Blog · Published 2026-02-12 · First collected 2026-10-24

• Hello world ↗ (opens in a new tab)

  NULL CATHEDRAL · Published 2026-02-10 · First collected 2026-10-24

• [Cryptodev-linux] Page-level UAF exploitation ↗ (opens in a new tab)

  nasm.re · Published 2026-01-12 · First collected 2026-10-24

• Analysis of PPPP “encryption” ↗ (opens in a new tab)

  Almost Secure · Published 2026-01-05 · First collected 2026-10-24

• The Story of a Perfect Exploit Chain: Six Bugs That Looked Harmless Until They Became Pre-Auth RCE in a Security Appliance ↗ (opens in a new tab)

  Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter · Published 2026-01-01 · First collected 2026-10-24

• CVE-2025-38352 (Part 1) - In-the-wild Android Kernel Vulnerability Analysis + PoC ↗ (opens in a new tab)

  faith2dxy · Published 2025-12-21 · First collected 2026-10-24

• Kali Linux 2025.4 Release (Desktop Environments, Wayland & Halloween Mode) ↗ (opens in a new tab)

  Kali Linux · Published 2025-12-12 · First collected 2026-10-24

• Ghostwire: a clear, lightweight Docker toolkit for Web, networking, and Active Directory. ↗ (opens in a new tab)

  Hacktive Security · Published 2025-11-19 · First collected 2026-10-24

• No Leak, No Problem – Bypassing ASLR with a ROP Chain to Gain RCE ↗ (opens in a new tab)

  modzero / Blog · Published 2025-11-10 · First collected 2026-10-24

• Bringing USB to Life in QEMU - Kernel Build, Debug, and Redirection ↗ (opens in a new tab)

  StreyPaws · Published 2025-11-07 · First collected 2026-10-24

• A File Format Uncracked for 20 Years ↗ (opens in a new tab)

  lander's posts · Published 2025-11-06 · First collected 2026-10-24

• Pwn2Own Cork 2025 ↗ (opens in a new tab)

  XploitBengineer · Published 2025-10-31 · First collected 2026-10-24

• kernel-rt: CVSS (Max): 9.8 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-25 · First collected 2026-10-26

• ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots ou... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-25 · First collected 2026-10-26

• RHSA-2026:88834: Important: php:8.2 security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-23 · First collected 2026-10-24

• BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations ↗ (opens in a new tab)

  The Hacker News · Published 2026-10-23 · First collected 2026-10-24

• PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches ↗ (opens in a new tab)

  Security Affairs · Published 2026-10-23 · First collected 2026-10-24

• Fortinet security advisory (AV26-1037) - Update 1 ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-23 · First collected 2026-10-24

• HPE patches eight max severity RCE and auth bypass AOS flaws ↗ (opens in a new tab)

  BleepingComputer · Published 2026-10-23 · First collected 2026-10-24

• Security Alert (A26-10-44): Multiple Vulnerabilities in GitLab ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-23 · First collected 2026-10-24

• DSA-6580-1 erlang - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans Microsoft Edge (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• Multiple Cisco Products Snort 3 Security Hardening Release: October 2026 ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-22 · First collected 2026-10-24

• Security teams urged to center defense on the flaw profile attackers target most ↗ (opens in a new tab)

  CSO Online · Published 2026-10-22 · First collected 2026-10-24

• Tell us: have you been affected by the PHP code flaw? ↗ (opens in a new tab)

  Data and computer security | The Guardian · Published 2026-10-22 · First collected 2026-10-24