Topic: Planyo_Online_Reservation_System 3.0 Arbitrary File Read via SSRF Risk: Medium Text:# Exploit Title: Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF # Date: 12-07-2026 # Exploit Author: Ba...

Topic: CubeCart 6.7.4 SQL injection Risk: Medium Text:# Exploit Title: CubeCart 6.7.4 - SQL injection # Date: 2026-06-08 # Exploit Author: Mikail Kocadağ # Vendor Homepage: http...

Topic: PhylumEDI - Session Stored XSS to Open Redirect with CSRF Risk: Low Text:PhylumEDI version [8] (discovered 2023) contains a Stored XSS vulnerability that persists malicious scripts in user session dat...

Topic: ProFTPD mod_sql post-authentication SQLi RCE Risk: Medium Text:#!/usr/bin/env python3 """ CVE-2026-42167 — ProFTPD mod_sql post-authentication SQL injection -> RCE postauth_stor_r...

Topic: Joomla Extension 4.1.4 PHP Object injection Risk: High Text:Exploit Ttile: Joomla Extension 4.1.4 - PHP Object injection Affected : JoomShaper SP LMS < = 4.1.3 Fixed : JoomShaper SP ...

Topic: LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting Risk: Low Text:#!/usr/bin/env python3 # Exploit Title: LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting # CVE: ...

A vulnerability has been discovered in SAP Extended Passport (EPP) Processing that could allow for remote code execution. SAP Extended Passport (EPP) Processing is a core system data structure and tracing mechanism within SAP Kernel code us…

Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution. Adobe Experience Manager (AEM) is an enterprise-grade digital experience platform that combines content mana…

Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the…

ClearSky Team has identified a targeted Russian cyber campaign against Ukraine utilizing twonovel malware strains, BadPaw and MeowMeow. The attack chain initiates with a phishing email containing a link to a ZIP archive. Onceextracted, an i…

In early April, ClearSky’s team discovered a persistent Yemeni/Houthi influence campaignoperating in Israel and the Gulf states. We first exposed the campaign in 2019. It continuesto operate in a similar manner to what was uncovered in 2019…

A new zero-day vulnerability, CVE-2024-43451, was discovered by ClearSky Cyber Security in June 2024. This vulnerability affects Windows systems and is being actively exploited in attacks against Ukrainian entities. The vulnerability activa…

&#x62A5;&#x544A;&#x7F16;&#x53F7;&#xFF1A; 360-TIC-202608-FIN01 &#x4E00;&#x3001;&#x62A5;&#x544A;&#x6982;&#x8FF0; &#x8303;&#x56F4;&#x8BF4;&#x660E; &#x57FA;&#x4E8E;360&#x5A01;&#x80C1;&#x60C5;&#x62A5;&#x4E2D;&#x5FC3;&#x5BF9;&#x5168;&#x7403;&#x7F…

&#x62A5;&#x544A;&#x7F16;&#x53F7;&#xFF1A; TIC-202609-AI01 &#x62A5;&#x544A;&#x5468;&#x671F;&#xFF1A; 2026&#x5E74;8&#x6708;29&#x65E5;&#x2014;9&#x6708;4&#x65E5; &#x4E00;&#x3001;&#x62A5;&#x544A;&#x6982;&#x8FF0; &#x57FA;&#x4E8E;360&#x5A01;&#x80C1;…

&#x62A5;&#x544A;&#x7F16;&#x53F7;&#xFF1A; TIC-202608-AI03 &#x62A5;&#x544A;&#x5468;&#x671F;&#xFF1A; 2026&#x5E74;8&#x6708;22&#x65E5;&#x2014;8&#x6708;28&#x65E5; &#x4E00;&#x3001;&#x62A5;&#x544A;&#x6982;&#x8FF0; &#x57FA;&#x4E8E;360&#x5A01;&#x80C1…

On average, the FreeBSD security team releases about 2 security advisories per month. AI has changed this. In April, the project released 8 advisories, with 6 powered by AI . In May, the count decreased slightly to 7. Today I took a look at…

TLDR: I wrote a new book for Corelight called NDR Essentials . It's free at that link. This is the 10th book that I've authored or co-authored. The rest are all posted at taosecurity.com . Why? It was time . That’s what I thought when I hea…

It looks like we're finally making progress towards an independent US Cyber Force: https://www.csis.org/programs/strategic-technologies-program/projects/commission-us-cyber-force-generation However, this bill by Sen Gillibrand to put it und…

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite I've started playing around with YouTube's "create video thumbnail", which hopefully will give …

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite It does feel like I've bitten off too much and am now chewing like crazy this week. The 3D prin…

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite You're not going to believe this, but turns out you can't always take criminals at their word. …