Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• IonStack part III: Rooting Android 17 with GhostLock ↗ (opens in a new tab)

  Nebula Security · Published 2026-07-15 · First collected 2026-10-24

• Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager ↗ (opens in a new tab)

  Threat Intelligence · Published 2026-06-24 · First collected 2026-10-24

• Out of Shift: How a Shared State Bug in V8’s AsmJS Parser Broke the Ubercage ↗ (opens in a new tab)

  Exodus Intelligence · Published 2026-06-22 · First collected 2026-10-24

• The goldmine of insecure WebView integrations ↗ (opens in a new tab)

  OtterSec · Published 2026-06-18 · First collected 2026-10-24

• TURN! - What could possibly go wrong? ↗ (opens in a new tab)

  SySS Tech Blog · Published 2026-06-18 · First collected 2026-10-24

• RTOS Binary Analysis Webinar | Discover Hidden Vulnerabilities in Embedded Firmware ↗ (opens in a new tab)

  Resources RSS Feed | ONEKEY · Published 2026-06-15 · First collected 2026-10-24

• Microsoft patchetirsdag juni ↗ (opens in a new tab)

  NSM NCSC news · Published 2026-06-09 · First collected 2026-10-24

• Docker Internal (2) ↗ (opens in a new tab)

  u1f383 · Published 2026-06-02 · First collected 2026-10-24

• Microsoft’s stance on zero day exploits is a dumpster fire of their own making ↗ (opens in a new tab)

  DoublePulsar - Medium · Published 2026-05-28 · First collected 2026-10-24

• Visual Studio Extensions Revisited ↗ (opens in a new tab)

  MDSec · Published 2026-05-28 · First collected 2026-10-24

• RandoriSec obtains PASSI qualification ↗ (opens in a new tab)

  RandoriSec · Published 2026-05-26 · First collected 2026-10-24

• TSUBAME Report Overflow (Oct-Dec 2025) ↗ (opens in a new tab)

  JPCERT advisories · Published 2026-05-14 · First collected 2026-10-24

• Inside the DarkSword Kernel Escalation: From GPU Process to Kernel R/W (CVE-2025-43510 & CVE-2025-43520) ↗ (opens in a new tab)

  8kSec Blog · Published 2026-05-03 · First collected 2026-10-24

• Inspektor Gadget Security Audit ↗ (opens in a new tab)

  Blog on Shielder · Published 2026-04-30 · First collected 2026-10-24

• faulty-road - TRX CTF Quals 2026 ↗ (opens in a new tab)

  kqx · Published 2026-04-29 · First collected 2026-10-24

• OpenSSL, Certpinning and Memory patching. Sounds fun right? ↗ (opens in a new tab)

  :: Orange Cyberdefense :: on Orange Cyberdefense · Published 2026-04-01 · First collected 2026-10-24

• VulHunt in Depth: Inside the Binary Vulnerability Analysis Framework ↗ (opens in a new tab)

  Binarly Research · Published 2026-03-02 · First collected 2026-10-24

• Hacking Better-Hub ↗ (opens in a new tab)

  devansh · Published 2026-03-01 · First collected 2026-10-24

• Active Ivanti Exploitation Traced to Single Bulletproof IP—Published IOC Lists Point Elsewhere ↗ (opens in a new tab)

  The GreyNoise Blog · Published 2026-02-10 · First collected 2026-10-24

• GCP Cloud Workstations Privilege Escalation ↗ (opens in a new tab)

  Hacking The Cloud · Published 2026-02-09 · First collected 2026-10-24

• Roundcube Webmail <1.5.13 / <1.6.13 allows attackers to force remote image loads via SVG feImage ↗ (opens in a new tab)

  NULL CATHEDRAL · Published 2026-02-08 · First collected 2026-10-24

• Ticket Tricking OpenSSL.org with Google Groups ↗ (opens in a new tab)

  Spaceraccoon's Blog · Published 2026-02-02 · First collected 2026-10-24

• Announcing Xint Code ↗ (opens in a new tab)

  Theori BLOG · Published 2025-12-16 · First collected 2026-10-24

• Unpacking VStarcam firmware for fun and profit ↗ (opens in a new tab)

  Almost Secure · Published 2025-12-15 · First collected 2026-10-24

• Inside PostHog: How SSRF, a ClickHouse SQL Escaping 0day, and Default PostgreSQL Credentials Formed an RCE Chain (ZDI-25-099, ZDI-25-097, ZDI-25-096) ↗ (opens in a new tab)

  Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter · Published 2025-12-15 · First collected 2026-10-24

• Practical macOS Security Researcher Notes and Guide (OSMR) ↗ (opens in a new tab)

  Zeyad Azima · Published 2025-12-02 · First collected 2026-10-24

• Extending Kernel Race Windows Using '/dev/shm' ↗ (opens in a new tab)

  faith2dxy · Published 2025-11-28 · First collected 2026-10-24

• Write Path Traversal to a RCE Art Department ↗ (opens in a new tab)

  Critical Thinking - Bug Bounty Podcast · Published 2025-11-28 · First collected 2026-10-24

• libreswan: CVSS (Max): 7.5 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-26 · First collected 2026-10-26

• HashenUdara edoc-doctor-appointment-system add-new.php sql injectionA vulnera... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-26