Threats tagged 'exploit'

724 threats

Severity	CVSS	Threat	Source	Published
Not rated	–	Exploiting Random Number Generation 2026-07-15Reddit ExploitDev This content discusses exploiting weaknesses in random number generation as a binary exploitation challenge tutorial aimed at beginners. It highlights that some enterprise environments still use flawed random number generation methods that can be exploited. The tutorial covers concepts such as random number generation in C, XOR operations, and source code analysis without using a debugger. No specific vulnerability or affected software versions are identified. News #exploitdev+pwned+hacking #reddit #exploit	Reddit ExploitDev	2026-07-15
High	–	Nightmare Eclipse could be dropping his big promised exploit today High2026-07-14Reddit Cybersecurity A threat actor known as Nightmare Eclipse has indicated plans to release a significant exploit on July 14th, 2026. A new repository was created on the announced date but currently contains no exploit code, only a license and a placeholder README. The actor previously suggested constraints might have prevented release but the timing suggests a potential imminent drop. No technical details or affected software versions are currently available. The situation is being monitored for further developments. Vulnerability #cybersecurity #reddit #exploit	Reddit Cybersecurity	2026-07-14
Critical	9.8	Critical Gitea Flaw Under Active Exploitation, Researchers Warn Critical9.82026-07-08Reddit Cybersecurity A critical vulnerability (CVE-2026-20896) in Gitea's reverse-proxy authentication mechanism allows attackers to bypass authentication by supplying a single HTTP header with a valid username. This flaw affects Gitea Docker images before version 1.26.3, where default settings permit connections from any source IP instead of enforcing an allowlist. Exploitation enables unauthorized access to repositories and secrets, including private code, API keys, and deploy tokens. The vulnerability is actively exploited in the wild, with attacks detected shortly after public disclosure. A patch is available in Gitea versions 1.26.3 and later, which makes reverse-proxy authentication an opt-in feature. News #cybersecurity #reddit #exploit	Reddit Cybersecurity	2026-07-08
Medium	–	https://www.joomlack.fr/en/joomla-extensions/page-builder-ck · Joomla Page Builder CK 3.5.10 · Arbitrary File Upload Medium2026-07-08Exploit-DB RSS Feed Joomla Page Builder CK 3.5.10 - Arbitrary File Upload Exploit #web #exploit #joomla 4.x / 5.x on linux	Exploit-DB RSS Feed	2026-07-08
Critical	–	https://www.langflow.org/desktop · Langflow 1.9.0 · RCE Critical2026-07-08Exploit-DB RSS Feed Langflow 1.9.0 - RCE Exploit #web #rce #exploit	Exploit-DB RSS Feed	2026-07-08
Medium	–	https://wordpress.org/plugins/atarim · Atarim WordPress Plugin 4.2.2 · Sensitive Information Exposure Medium2026-07-08Exploit-DB RSS Feed Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure Exploit https://atarim.io #web #exploit #ubuntu 22.04 lts, apache 2.4, php 8.2, wordpress 6.7	Exploit-DB RSS Feed	2026-07-08
Critical	–	https://github.com/krayin/laravel-crm · Krayin CRM v2.2.x · Authenticated Remote Code Execution Critical2026-07-08Exploit-DB RSS Feed Krayin CRM v2.2.x - Authenticated Remote Code Execution Exploit https://krayincrm.com #remote #web #exploit	Exploit-DB RSS Feed	2026-07-08
Critical	–	WordPress Bricks Builder Theme · RCE Critical2026-07-07Exploit-DB RSS Feed WordPress Bricks Builder Theme - RCE Exploit #web #rce #wordpress	Exploit-DB RSS Feed	2026-07-07
High	–	https://www.tenable.com/downloads/nessus · Tenable Nessus 10.12.1 · SQL Injection High2026-07-07Exploit-DB RSS Feed Tenable Nessus 10.12.1 - SQL Injection Exploit #web #exploit #nessus 10.12.0	Exploit-DB RSS Feed	2026-07-07
High	–	Discuz! X5.0 · Authentication Bypass High2026-07-07Exploit-DB RSS Feed Discuz! X5.0 - Authentication Bypass Exploit #web #exploit #discuz! x5.0	Exploit-DB RSS Feed	2026-07-07
Medium	–	Hydra · Stack Buffer Overflow Medium2026-07-07Exploit-DB RSS Feed Hydra - Stack Buffer Overflow Exploit #remote #exploit #hydra 9.5	Exploit-DB RSS Feed	2026-07-07
High	–	https://github.com/FlowiseAI/Flowise · Flowise 3.1.3 · arbitrary code execution High2026-07-07Exploit-DB RSS Feed Flowise 3.1.3 - arbitrary code execution Exploit https://flowiseai.com #web #exploit #windows + flowise 3.1.2	Exploit-DB RSS Feed	2026-07-07
Medium	–	ProtonVPN v4.4.1 · Unquoted Service Path Medium2026-07-07Exploit-DB RSS Feed ProtonVPN v4.4.1 - Unquoted Service Path Exploit #local #exploit #windows 10 pro x64	Exploit-DB RSS Feed	2026-07-07
Critical	–	https://github.com/MCPJam · MCPJam Inspector · Remote Code Execution Critical2026-07-07Exploit-DB RSS Feed MCPJam Inspector - Remote Code Execution Exploit https://www.mcpjam.com #remote #web #exploit	Exploit-DB RSS Feed	2026-07-07
Medium	–	https://www.apple.com/ios · iOS Bluetooth PAN Exploit · Ethernet Gateway without Adapter Medium2026-07-07Exploit-DB RSS Feed iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter Exploit #ios #remote #exploit	Exploit-DB RSS Feed	2026-07-07
Medium	–	https://wordpress.org · WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS) Medium2026-07-06Exploit-DB RSS Feed WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS) Exploit https://wpzoom.com #web #xss #exploit	Exploit-DB RSS Feed	2026-07-06
Medium	–	https://downloads.wordpress.org/plugin/keepinmind-dashboard-notes.0.8.4.3.zip · KeepInMind 0.8.4.2 · Stored XSS Medium2026-07-06Exploit-DB RSS Feed KeepInMind 0.8.4.2 - Stored XSS Exploit https://wordpress.org/plugins/keepinmind-dashboard-notes #web #xss #exploit	Exploit-DB RSS Feed	2026-07-06
High	–	https://www.memuplay.com/download.html · MEmu Android Emulator 9.2.7.0 · Local Privilege Escalation High2026-07-06Exploit-DB RSS Feed MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation Exploit #android #local #exploit	Exploit-DB RSS Feed	2026-07-06
Medium	–	Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass Medium2026-07-06Exploit-DB RSS Feed Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass Exploit #web #exploit #macos, linux	Exploit-DB RSS Feed	2026-07-06
Medium	–	Microsoft Windows Defender Antivirus · Windows Defender (MsMpEng.exe) · Race Condition Medium2026-07-06Exploit-DB RSS Feed Windows Defender (MsMpEng.exe) - Race Condition Exploit #windows #local #exploit	Exploit-DB RSS Feed	2026-07-06

Page 5 of 37