Threat Intelligence Database

Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the product. As for the details of the affected products and versions, refer to the vendor's information.

Multiple SEIKO EPSON printers and scanners contain root certificates that have already been revoked. This means these devices retain trust anchors that are no longer valid, potentially undermining the security of certificate validation processes. No specific affected versions or patch information is provided.

CVE-2026-16885 is a critical stack-based buffer overflow vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. This flaw could allow a remote attacker to execute arbitrary code without requiring user interaction or privileges. The vulnerability has a CVSS score of 9.8, indicating a high impact on confidentiality, integrity, and availability. No official patch or remediation information is currently available.

BlackHat Arsenal Lab02 is an open-source, hands-on cybersecurity training lab presented at Black Hat USA 2026. It includes two scenarios focused on cloud security and incident response, using synthetic data and AI-driven tooling to teach skills such as detecting SSRF attacks, credential leaks, IAM enumeration, S3 exfiltration, and cloud configuration auditing. The lab is designed for educational purposes and does not represent an active security threat or vulnerability.

CVE-2026-76800 is a medium severity vulnerability in DeDeCMS 3 involving an unrestricted file upload flaw in the /include/dialog/select_media_post.php component. The vulnerability allows remote attackers to manipulate the uploadfile argument to upload files without restriction. Exploit code has been published, but no official patch or remediation guidance is currently available.

This entry references the ISC Stormcast podcast episode from August 20th, 2026, published by the SANS Internet Storm Center. The content is a security news update without specific details about any particular vulnerability, exploit, or threat. No technical or actionable threat information is provided.

CVE-2026-76799 is a medium severity vulnerability in code-projects Login Registration System version 1.0. It involves a weakness in the SQL Database Backup Handler component, specifically related to the file /loginsystem/database/login_registration_system.sql. This flaw allows remote attackers to access files or directories improperly. The vulnerability has a CVSS 4.0 base score of 6.9 and public exploit code is available. No official patch or remediation guidance has been provided by the vendor as of the publication date.

CVE-2026-76795 is a server-side request forgery (SSRF) vulnerability in AeternaLabsHQ PullMD version 3.2.0. The flaw exists in the REST API endpoint at /api, where manipulation of the 'url' argument allows an attacker to induce the server to make unintended requests. This vulnerability can be exploited remotely without authentication. A public exploit disclosure exists. Upgrading to version 3.3.0 resolves the issue.

CVE-2026-76785 is a medium severity SQL injection vulnerability in amirsanni Mini-Inventory-and-Sales-Management-System version 0.1. The flaw exists in the Transaction::getAll function within application/models/Transaction.php, where manipulation of the orderBy or orderFormat arguments can lead to SQL injection. The vulnerability can be exploited remotely without user interaction. Although the issue was reported early to the project, no response or fix has been provided yet. Public exploit code is available, increasing the risk of exploitation.

Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_path accepts a backslash or tab in the return parameter. oauth2_login reads the return parameter from the initiation request, runs same_origin_path over it, and stores the survivor in the session flow record as the post-login redirect target. That check rejects a value that does not begin with a slash, one with a slash as its second byte, and one containing CR or LF. A backslash and a tab pass. The URL Standard treats a backslash as equivalent to a slash for special schemes, so `/\evil.example` parses with the authority `evil.example`. It also strips ASCII tab before parsing, so a tab between two leading slashes leaves `//evil.example`. A crafted link to the application's own login route lands the victim on the attacker's site after a genuine authentication. The redirect carries no authorization code or access token.