Threats Tagged 'exploit'

A critical vulnerability (CVE-2026-20253) in Splunk Enterprise allows unauthenticated attackers to create or truncate arbitrary files via a PostgreSQL sidecar service endpoint lacking authentication controls. The flaw affects Splunk Enterprise versions 10.2 before 10.2.4 and 10.0 before 10.0.7. Exploitation was confirmed shortly after public disclosure, with proof-of-concept code published. CISA has added this vulnerability to its Known Exploited Vulnerabilities catalog and mandated rapid patching for federal agencies. Splunk has released patches to remediate the issue and strongly recommends upgrading to fixed versions.

CVE-2026-23111 is a use-after-free (UAF) vulnerability in the Linux kernel's nftables subsystem, introduced by a security fix for a previous vulnerability (CVE-2023-4244). This flaw affects nf_tables and is reachable from an unprivileged user namespace. The vulnerability enables advanced exploitation techniques including kernel address space layout randomization (KASLR) leaks, arbitrary reads, kernel structure traversal, and privilege escalation to root (uid=0) without hardcoded addresses. The exploit and detection methods have been publicly disclosed, emphasizing detection strategies beyond payload identification. No specific affected versions or vendor patches are detailed in the provided information.

Microsoft - NTLMv2 Hash Capture

WordPress OrderConvo 14 - Path Traversal

Drupal Core 10.5.5 - Error-Based SQL Injection

cPanel - CRLF Injection

Wordpress Temporary Login Plugin 1.0.0 - 'temp-login-token' Authentication Bypass to Account Takeover

Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service

Grav CMS 2.0.0-beta.2 - Remote Code Execution

Realtek rtl819x - Local Privilege