CXSECURITY Database RSS Feed - CXSecurity.com

Canvas Breach: Symbiotic Dual-Virus Model & Origin Parity Evidence

Sentinel-Null — Wed, 27 May 2026 18:42:46 +0000

Topic: Canvas Breach: Symbiotic Dual-Virus Model & Origin Parity Evidence Risk: Medium Text:CRITICAL EVIDENCE: I have identified 100% logic parity between the initial Canvas exploit and the official "recovery" vector. ...

Open ISES Tickets < 3.44.2 - Hardcoded MySQL Credentials

Mohammed Idrees Banyamer — Wed, 27 May 2026 18:42:14 +0000

Topic: Open ISES Tickets < 3.44.2 - Hardcoded MySQL Credentials Risk: Medium Text:#!/usr/bin/env python3 # Exploit Title: Open ISES Tickets < 3.44.2 - Hardcoded MySQL Credentials # CVE: CVE-2026-48242 # Dat...

ePati Antikor NGFW 2.0.1301 Authentication Bypass

SADIK ERTÜRK — Wed, 27 May 2026 18:42:02 +0000

Topic: ePati Antikor NGFW 2.0.1301 Authentication Bypass Risk: Medium Text:# Exploit Title: ePati Antikor NGFW 2.0.1301 - Authentication Bypass # Date: 2026-04-13 # Exploit Author: [SADIK ERTÜRK] ...

Windows Shell LNK Spoofing to NTLMv2 Hash Capture

nu11secur1ty — Wed, 27 May 2026 18:41:48 +0000

Topic: Windows Shell LNK Spoofing to NTLMv2 Hash Capture Risk: Medium Text:# Titles: CVE-2026-32202 - Windows Shell LNK Spoofing to NTLMv2 Hash Capture # Author: nu11secur1ty # Date: 2026-05-27 # Ven...

Apache HTTP Server 2.4.66 mod_http2 Double-Free Denial of Service

xeloxa — Wed, 27 May 2026 18:41:25 +0000

Topic: Apache HTTP Server 2.4.66 mod_http2 Double-Free Denial of Service Risk: Medium Text:# Exploit Title: Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service # Google Dork: intext:"Apache/2.4.66" "...

Grav CMS 2.0.0-beta.2 Remote Code Execution

Mustafa Murat Akgül — Wed, 27 May 2026 18:41:01 +0000

Topic: Grav CMS 2.0.0-beta.2 Remote Code Execution Risk: High Text:# Exploit Title: Grav CMS < 2.0.0-beta.2 - Remote Code Execution (RCE) # Date: 2026-05-08 # Exploit Author: Mustafa Murat Ak...

Frigate NVR 0.16.3 Remote Code Execution

jduardo2704 — Sat, 23 May 2026 05:00:22 +0000

Topic: Frigate NVR 0.16.3 Remote Code Execution Risk: High Text:# Exploit Title: Frigate NVR 0.16.3 - Remote Code Execution # Date: 2026-02-05 # Exploit Author: jduardo2704 # Vendor Homep...

Linux nf_tables 6.19.3 Local Privilege Escalation

Aviral Srivastava — Sat, 23 May 2026 05:00:13 +0000

Topic: Linux nf_tables 6.19.3 Local Privilege Escalation Risk: Medium Text: * Exploit Title: Linux Kernel 3.16 – 6.19.3 nf_tables RCU UAF LPE * CVE: CVE-2026-23231 * Date: 20...

ThingsBoard IoT Platform 4.2.0 Server-Side Request Forgery (SSRF)

Tamil Mathi T. — Sat, 23 May 2026 04:59:56 +0000

Topic: ThingsBoard IoT Platform 4.2.0 Server-Side Request Forgery (SSRF) Risk: Low Text:# Exploit Title: ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery (SSRF) # Date: 2026-03-25 # Exploit Author: Ta...

Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500 / CVE-2026-46300)

nu11secur1ty — Sat, 23 May 2026 04:59:49 +0000

Topic: Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500 / CVE-2026-46300) Risk: Medium Text:# Titles:** Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500 / CVE-2026-46300) # Author:** nu11secur1t...

SUSE Manager 4.3.15 Code Execution

Wiktor Maj — Sat, 23 May 2026 04:59:19 +0000

Topic: SUSE Manager 4.3.15 Code Execution Risk: High Text:# Exploit Title: SUSE Manager 4.3.15 - Code Execution # Date: 29.01.2026 # Exploit Author: Wiktor Maj # Vendor Homepage: htt...

Apache HertzBeat 1.8.0 Remote Code Execution

Brett Gervasoni — Tue, 19 May 2026 21:17:49 +0000

Topic: Apache HertzBeat 1.8.0 Remote Code Execution Risk: High Text:# Exploit Title: Apache HertzBeat 1.8.0 - Remote Code Execution # Google Dork: N/A # Date: 2026-03-09 # Exploit Author: Bre...

JuzaWeb CMS 3.4.2 Authenticated Remote Code Execution

Sardor Shoakbarov — Tue, 19 May 2026 21:17:25 +0000

Topic: JuzaWeb CMS 3.4.2 Authenticated Remote Code Execution Risk: High Text:# Exploit Title: JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution # Date: 2026-01-10 # Exploit Author: Sardor Shoakbar...

NiceGUI 3.6.1 Path Traversal

Mohammed Idrees Banyamer — Tue, 19 May 2026 21:16:17 +0000

Topic: NiceGUI 3.6.1 Path Traversal Risk: Medium Text:# Exploit Title: NiceGUI 3.6.1 - Path Traversal # Author: Mohammed Idrees Banyamer # Instagram: @banyamer_security # GitHub...

GUnet OpenEclass E-learning platform < 4.2 Remote Code Execution (RCE)

Ashif Iqubal — Tue, 19 May 2026 21:16:06 +0000

Topic: GUnet OpenEclass E-learning platform < 4.2 Remote Code Execution (RCE) Risk: High Text:# Exploit Title: GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE) # Date: 2026-01-08 # Exploit Autho...

Windows Snipping Tool NTLMv2 Hash Hijack

nu11secur1ty — Tue, 19 May 2026 21:15:57 +0000

Topic: Windows Snipping Tool NTLMv2 Hash Hijack Risk: Medium Text:# Exploit Title: Windows Snipping Tool - NTLMv2 Hash Hijack # Date: 2026-04-22 # Exploit Author: nu11secur1ty # Video Demo...

telnetd 2.7 Buffer Overflow

Jeff Barron — Wed, 13 May 2026 19:41:02 +0000

Topic: telnetd 2.7 Buffer Overflow Risk: High Text:# Exploit Title: telnetd 2.7 - Buffer Overflow # Google Dork: N/A # Date: 2026-04-03 # Exploit Author: Jeff Barron (jeffaf) ...

Kukurigu LPE - Linux Kernel Privilege Escalation (CVE-2026-43284 / CVE-2026-43500)

nu11secur1ty — Wed, 13 May 2026 19:40:49 +0000

Topic: Kukurigu LPE - Linux Kernel Privilege Escalation (CVE-2026-43284 / CVE-2026-43500) Risk: Medium Text:# Titles: Kukurigu LPE - Linux Kernel Privilege Escalation (CVE-2026-43284 / CVE-2026-43500) # Author: nu11secur1ty # Date: 2...

Event Booking Calendar-5.0 Cross-site scripting (reflected)

nu11secur1ty — Wed, 13 May 2026 19:40:38 +0000

Topic: Event Booking Calendar-5.0 Cross-site scripting (reflected) Risk: Low Text:## Titles: Event Booking Calendar-5.0 Cross-site scripting (reflected) ## Author: nu11secur1ty ## Date: 5/13/2026 ## Vendor...

Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500)

nu11secur1ty — Wed, 13 May 2026 19:40:32 +0000

Topic: Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500) Risk: High Text:# Titles:** Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500) # Author:** nu11secur1ty # Date:** 2026...

Ninja Forms Uploads Unauthenticated PHP File Upload

Sélim Lanouar — Wed, 13 May 2026 19:40:20 +0000

Topic: Ninja Forms Uploads Unauthenticated PHP File Upload Risk: High Text:# Exploit Title: Ninja Forms Uploads - Unauthenticated PHP File Upload # Date: 2026-04-09 # Exploit Author: ...

Traccar GPS Tracking System 6.11.1 Cross-Site WebSocket Hijacking (CSWSH)

Hazar Taspinar — Wed, 13 May 2026 19:38:15 +0000

Topic: Traccar GPS Tracking System 6.11.1 Cross-Site WebSocket Hijacking (CSWSH) Risk: Medium Text:# Exploit Title: Traccar GPS Tracking System 6.11.1 - Cross-Site WebSocket Hijacking (CSWSH) # Date: 2026-02-26 # Exploit Aut...

Erugo 0.2.14 Remote Code Execution (RCE)

Abdul Moiz — Mon, 04 May 2026 20:19:59 +0000

Topic: Erugo 0.2.14 Remote Code Execution (RCE) Risk: High Text:# Exploit Title: Erugo < = 0.2.14 - Authenticated Remote Code Execution (RCE) # Date: 2026-02-02 # Exploit Author: Abdul Moiz ...

Linux Kernel Local Privilege Escalation via Memory Handling and Access Control Weakness

RERO — Mon, 04 May 2026 20:19:47 +0000

Topic: Linux Kernel Local Privilege Escalation via Memory Handling and Access Control Weakness Risk: Medium Text:A privilege escalation vulnerability class affecting the Linux kernel has been analyzed under controlled local test environment...

Green Hills INTEGRITY RTOS IPCOMShell TELNET Format String Vulnerability - Realistic Full Chain Attack on F-16 Avionics (Ground

Mohammed Idrees Banyamer — Mon, 04 May 2026 20:19:01 +0000

Topic: Green Hills INTEGRITY RTOS IPCOMShell TELNET Format String Vulnerability - Realistic Full Chain Attack on F-16 Avionics (Ground Risk: Low Text:#!/usr/bin/env python3 # Exploit Title: Green Hills INTEGRITY RTOS IPCOMShell TELNET Format String Full Chain - Realistic F-16...

Linux Kernel proc_readdir_de() 6.18-rc5 Local Privilege Escalation

Aviral Srivastava — Mon, 04 May 2026 20:18:26 +0000

Topic: Linux Kernel proc_readdir_de() 6.18-rc5 Local Privilege Escalation Risk: Medium Text: * Exploit Title: Linux Kernel proc_readdir_de() 6.18-rc5 - Local Privilege Escalation * CVE: CVE-2025-40271 * ...

Insecure Permissions vulnerability in Nagios Network Analyzer v.2024R1.02-64 and before allows a local attacker to escalate pri

Sarang Tumne — Sun, 26 Apr 2026 21:07:36 +0000

Topic: Insecure Permissions vulnerability in Nagios Network Analyzer v.2024R1.02-64 and before allows a local attacker to escalate pri Risk: Medium Text:Insecure Permissions vulnerability in Nagios Network Analyzer v.2024R1.02-64 and before allows a local attacker to escalate pri...

Samsung ONE Integer Overflow in CircleConst Tensor Size Calculation

Mohammed Idrees Banyamer — Sun, 26 Apr 2026 21:07:24 +0000

Topic: Samsung ONE Integer Overflow in CircleConst Tensor Size Calculation Risk: Medium Text:#!/usr/bin/env python3 # Exploit Title: Samsung ONE - Integer Overflow in CircleConst Tensor Size Calculation # CVE: CVE-2026...

solaredge-CSRF-OOB-Injection

nu11secur1ty — Sun, 26 Apr 2026 21:07:15 +0000

Topic: solaredge-CSRF-OOB-Injection Risk: Medium Text:# Titles: solaredge-CSRF-OOB-Injection # Author: nu11secur1tyAI # Date: 2026-04-26 # Vendor: SolarEdge Technologies Ltd. # ...

Trojan-Spy.Win32.Small / Remote Command Execution

malvuln — Wed, 22 Apr 2026 21:54:00 +0000

Topic: Trojan-Spy.Win32.Small / Remote Command Execution Risk: Medium Text:Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2026 Original source: https://malvuln.com/advisory/8c15ec5f0137d097...

OpenClaw < 2026.3.28 Discord Text Approval Authorization Bypass

Mohammed Idrees Banyamer — Wed, 22 Apr 2026 21:53:45 +0000

Topic: OpenClaw < 2026.3.28 Discord Text Approval Authorization Bypass Risk: Medium Text:#!/usr/bin/env python3 # Exploit Title: OpenClaw Discord Text Approval Authorization Bypass # CVE: CVE-2026-41303 # Date: 20...

Throttlestop Kernel Driver Kernel Out-of-Bounds Write Privilege Escalation

Xavi Beltran — Wed, 22 Apr 2026 21:53:21 +0000

Topic: Throttlestop Kernel Driver Kernel Out-of-Bounds Write Privilege Escalation Risk: Medium Text:# Exploit Title: Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation # Exploit Details: https://xavi...

Critical Remote Code Execution Vulnerability in Windows Internet Key Exchange (IKE) Service (CVE-2026-33824)

RERO — Sun, 19 Apr 2026 20:47:26 +0000

Topic: Critical Remote Code Execution Vulnerability in Windows Internet Key Exchange (IKE) Service (CVE-2026-33824) Risk: High Text:CVE-2026-33824 is a critical remote code execution vulnerability affecting the Windows Internet Key Exchange (IKE) service, whi...

WordPress Madara Local File Inclusion

Beatriz Fresno Naumova — Tue, 14 Apr 2026 19:07:10 +0000

Topic: WordPress Madara Local File Inclusion Risk: Medium Text:# Exploit Title: WordPress Madara Local File Inclusion # Date: November 1, 2025 # Exploit Author: Beatriz Fresno Naumova # ...

FortiWeb 8.0.2 Remote Code Execution

Mohammed Idrees Banyamer — Tue, 14 Apr 2026 19:06:52 +0000

Topic: FortiWeb 8.0.2 Remote Code Execution Risk: High Text:# Exploit Title: FortiWeb 8.0.2 - Remote Code Execution # Date: 2025-11-22 # Author: Mohammed Idrees Banyamer # Author Coun...

Easy File Sharing Web Server v7.2 Buffer Overflow

Donwor — Tue, 14 Apr 2026 19:06:29 +0000

Topic: Easy File Sharing Web Server v7.2 Buffer Overflow Risk: High Text:# Exploit title: Easy File Sharing Web Server v7.2 - Buffer Overflow # Date: 16/10/2025 # Exploit Author: Donwor # X: @real_...

NetBT e-Fatura Privilege Escalation

Seccops — Tue, 14 Apr 2026 19:05:59 +0000

Topic: NetBT e-Fatura Privilege Escalation Risk: Medium Text:# Exploit Title: NetBT e-Fatura - Privilege Escalation # Author: Seccops # Discovery Date: 2025-10-03 # Vendor: https://net-...

Docker Desktop 4.44.3 Unauthenticated API Exposure

OilSeller2001 — Thu, 09 Apr 2026 20:53:26 +0000

Topic: Docker Desktop 4.44.3 Unauthenticated API Exposure Risk: High Text:# Exploit Title: Docker Desktop 4.44.3 - Unauthenticated API Exposure # Date: 2025-10-06 # Exploit Author: OilSeller2001 # ...

MaNGOSWebV4 4.0.6 Reflected XSS

CodeSecLab — Thu, 09 Apr 2026 20:52:55 +0000

Topic: MaNGOSWebV4 4.0.6 Reflected XSS Risk: Low Text:# Exploit Title: MaNGOSWebV4 4.0.6 - Reflected XSS # Date: 2024-10-26 # Exploit Author: CodeSecLab # Vendor Homepage: http...

Grafana 11.6.0 SSRF

Beatriz Fresno Naumova — Thu, 09 Apr 2026 20:52:38 +0000

Topic: Grafana 11.6.0 SSRF Risk: Medium Text:# Exploit Title: Grafana 11.6.0 - SSRF # FOFA: app="Grafana" # Date: 2-11-2025 # Exploit Author: Beatriz Fresno Naumova #...