newsThe portal itself — self-promo until real sponsors land
Subscribe, build a custom feed, or pitch a sponsorship at hello@acadenix.com
Latest intel// live feed
25 results//sorted by published//last sync 2026-07-06 11:27Z
Subscribe to news →
CVE-2026-24882 — Gnupg Gnupg: In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys. CVSSv3.1 8.4 (HIGH)
8.4
CVSS v3.1
92
Edit Score
CVE-2026-24881 — Gnupg Gnupg: In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped
In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can easily be leveraged for denial of service; however, there is also memory corruption that could lead to remote code execution. CVSSv3.1 8.1 (HIGH)
8.1
CVSS v3.1
91
Edit Score
CVE-2026-24869 — Mozilla Firefox: Use-after-free in the Layout: Scrolling and Overflow component.
Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 147.0.2. CVSSv3.1 8.8 (HIGH)
8.8
CVSS v3.1
94
Edit Score
CVE-2025-15467 — Openssl Openssl: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verif CVSSv3.1 8.8 (HIGH) · EPSS 76th percentile
8.8
CVSS v3.1
94
Edit Score
kernel-security-learning — Anything about kernel security. CTF kernel pwn, kernel exploit, kernel fuzz and kernel defense paper, kernel debugging
GitHub · kernel exploits·github.comGITHUB POCCVE-2016-9793CVE-2017-5123CVE-2017-7184CVE-2017-6074CVE-2017-7308CVE-2017-8890CVE-2017-11176CVE-2017-16995CVE-2017-1000112CVE-2018-5333CVE-2019-8956CVE-2019-9213CVE-2019-15666CVE-2020-8835CVE-2020-27194CVE-2021-3156CVE-2021-26708CVE-2021-31440CVE-2021-3490CVE-2021-22555CVE-2021-41073
A comprehensive curated repository documenting Linux kernel security research, exploitation techniques, and defense mechanisms. Covers CTF kernel pwn challenges, kernel exploit writeups, fuzzing methodologies, and academic papers spanning 2011–2025 on kernel vulnerability detection, exploitation primitives, and hardening defenses.
72
Edit Score
CVE-2026-21721 — Grafana Grafana: This is an organization‑internal privilege escalation.
The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation. CVSSv3.1 8.1 (HIGH)
8.1
CVSS v3.1
91
Edit Score
CVE-2026-24486 — Fastapiexpert Python-multipart: Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options
Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options `UPLOAD_DIR` and `UPLOAD_KEEP_FILENAME=True`. An attacker can write uploaded files to arbitrary locations on the filesystem by crafting a malicious filename. Users should upgrade to version 0.0.22 to receive a patch or, as a workaround, avoid using `UPLOAD_KEEP_FILENAME=True` in project configurations. CVSSv3.1 8.6 (HIGH)
8.6
CVSS v3.1
93
Edit Score
CVE-2025-14459 — KubeVirt: This vulnerability allows a user to clone PersistentVolumeClaims (PVCs) from unauthorized namespaces, resulting in
A flaw was found in KubeVirt Containerized Data Importer (CDI). This vulnerability allows a user to clone PersistentVolumeClaims (PVCs) from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism. CVSSv3.1 8.5 (HIGH)
8.5
CVSS v3.1
93
Edit Score
CVE-2026-21509 — Microsoft 365_apps: Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized
Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally. CVSSv3.1 7.8 (HIGH) · EPSS 99th percentile
7.8
CVSS v3.1
100
Edit Score
awesome-edr-bypass — Awesome EDR Bypass Resources For Ethical Hacking
GitHub · EDR bypass / evasion·github.comGITHUB POC
A curated GitHub repository aggregating EDR bypass techniques, tools, and research including syscall hooking evasion (Hell's Gate, SysWhispers), kernel callback removal, WFP-based telemetry blocking, and BYOVD/retrosigned driver abuse. The collection spans PoCs, frameworks, workshops, and conference presentations documenting methods to evade modern endpoint detection systems.
72
Edit Score
Nuclei Templates v10.3.8 – Release Notes
Nuclei templates·github.comCVE-2026-23760CVE-2026-23550CVE-2026-22200CVE-2026-21859CVE-2026-21858CVE-2025-66516CVE-2025-66472CVE-2025-56520CVE-2025-56132CVE-2025-55303CVE-2025-52694CVE-2025-46550CVE-2025-46549CVE-2025-46349CVE-2025-36845CVE-2025-27817CVE-2025-25570CVE-2025-13418CVE-2025-11580CVE-2025-8110CVE-2025-4210CVE-2025-3472CVE-2024-56159CVE-2024-29137CVE-2024-23055CVE-2023-52163CVE-2023-33960CVE-2022-41697CVE-2022-4223CVE-2022-0188CVE-2021-37598CVE-2021-22881CVE-2021-21246CVE-2020-26935CVE-2020-19363CVE-2020-16248CVE-2020-15081CVE-2020-9314CVE-2020-9039CVE-2020-5722CVE-2019-14206CVE-2019-12935CVE-2018-7765
Nuclei Templates v10.3.8 adds 457 new detection templates covering 43 CVEs, including critical RCE vulnerabilities in n8n webhooks, SmarterMail admin reset, and pgAdmin unauthenticated access. The release includes significant bug fixes reducing false positives in regex-based detections and correcting path issues in existing templates.
6.4
CVSS v3.1
72
Edit Score
Bypassing Windows Administrator Protection
Project Zero·googleprojectzero.blogspot.com
Google Project Zero researcher disclosed nine separate vulnerabilities in Windows 11's new Administrator Protection feature (25H2), a replacement for UAC designed to create a secure boundary for privilege elevation. The most critical bypass exploits logon session handling in DOS device object directories, allowing a limited user to hijack administrator process file access through token manipulation and symbolic link injection. All nine issues were patched either before official release (KB5067036) or in subsequent security bulletins.
82
Edit Score
Pwn2Own: Researchers Earn $1 Million for 76 Zero-Days
Trend Micro Research·trendmicro.com0day
Pwn2Own Automotive 2026 in Tokyo disclosed 76 zero-day vulnerabilities across connected vehicles, EV chargers, and automotive infotainment systems, with researchers earning $1.047M in prizes. Notable exploits included NFC-based attacks on EV chargers, USB-based Tesla infotainment compromise, and signal manipulation attacks on charging infrastructure. TrendAI ZDI claims to protect customers from disclosed zero-days an average of 71 days ahead of industry disclosure.
72
Edit Score
PeckBirdy: A Versatile Script Framework for LOLBins Exploitation Used by China-aligned Threat Groups
Trend Micro disclosed PeckBirdy, a JScript-based C&C framework deployed by China-aligned APT groups since 2023 targeting gambling industries and Asian government entities. The framework executes across multiple environments (browsers, MSHTA, WScript, ASP, Node.js, .NET) via LOLBins, delivering modular backdoors HOLODONUT and MKDOOR. Two campaigns—SHADOW-VOID-044 and SHADOW-EARTH-045—demonstrate coordinated activity using stolen code-signing certificates, Cobalt Strike payloads, and CVE-2020-16040 exploitation.
82
Edit Score
eureka_panther-adreno-gpu-exploit-1 — Our first exploit: a memory corruption vulnerability in the Adreno GPU driver for Eureka/Panther (3/3s) devices, enablin
FreeXR released a full exploit chain for Meta Quest 3/3s devices (eureka/panther) targeting a memory corruption vulnerability in the Adreno GPU driver (/dev/kgsl-3d0). The exploit achieves arbitrary kernel memory read/write, SELinux disablement, and root privilege escalation. The vulnerability has existed since the device's public release and was disclosed responsibly to Meta after they failed to act.
82
Edit Score
CVE-2026-22586 — Salesforce Marketing_cloud_engagement: Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend
Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules) allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026. CVSSv3.1 9.8 (CRITICAL) · EPSS 6th percentile
9.8
CVSS v3.1
99
Edit Score
CVE-2025-52025 — Aptsys Gemscms_backend: An SQL Injection vulnerability exists in the GetServiceByRestaurantID endpoint of the Aptsys gemscms POS
An SQL Injection vulnerability exists in the GetServiceByRestaurantID endpoint of the Aptsys gemscms POS Platform backend thru 2025-05-28. The vulnerability arises because user input is directly inserted into a dynamic SQL query syntax without proper sanitization or parameterization. This allows an attacker to inject and execute arbitrary SQL code by submitting crafted input in the id parameter, leading to unauthorized data access or modification. CVSSv3.1 9.4 (CRITICAL) · EPSS 25th percentile
9.4
CVSS v3.1
97
Edit Score
CVE-2025-52024 — Aptsys Gemscms_backend: A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which
A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes internal API testing tools to unauthenticated users. By accessing specific URLs, an attacker is presented with a directory-style index listing all available backend services and POS web services, each with an HTML form for submitting test input. These panels are intended for developer use, but are accessible in production environments with no authentication or session validati CVSSv3.1 9.4 (CRITICAL) · EPSS 33th percentile
9.4
CVSS v3.1
97
Edit Score
Hacking Humans: Social Engineering and the Psychology
SpecterOps·specterops.io
SpecterOps consultant John Wotton details social engineering methodology for physical access, emphasizing OSINT collection, environmental pattern recognition, and exploitation of human cognitive biases (automation bias, routine, authority, avoidance). The article maps psychological vulnerabilities—including the Swiss Cheese Model—that defenders can exploit to improve security posture through training rather than technology alone.
72
Edit Score
CVE-2026-22984 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds
In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in handle_auth_done() Perform an explicit bounds check on payload_len to avoid a possible out-of-bounds access in the callout. [ idryomov: changelog ] CVSSv3.1 9.8 (CRITICAL) · EPSS 1th percentile
9.8
CVSS v3.1
99
Edit Score
CVE-2026-24572 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio Content nelio-content allows Blind SQL Injection.This issue affects Nelio Content: from n/a through <= 4.2.0. CVSSv3.1 8.5 (HIGH)
8.5
CVSS v3.1
93
Edit Score
CVE-2025-4320 — Authentication: Bypass by Primary Weakness, Weak Password Recovery Mechanism for Forgotten Password vulnerability in
Authentication Bypass by Primary Weakness, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Authentication Bypass, Password Recovery Exploitation. This issue affects Sufirmam: through 23012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 10.0 (CRITICAL) · EPSS 11th percentile
10.0
CVSS v3.1
100
Edit Score
CVE-2025-4319 — Restriction: Improper Restriction of Excessive Authentication Attempts, Weak Password Recovery Mechanism for Forgotten Password vulnerability
Improper Restriction of Excessive Authentication Attempts, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Brute Force, Password Recovery Exploitation. This issue affects Sufirmam: through 23012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 9.4 (CRITICAL) · EPSS 10th percentile
9.4
CVSS v3.1
97
Edit Score
Nuclei Templates v10.3.7 – Release Notes
Nuclei templates·github.comCVE-2025-69200CVE-2025-68926CVE-2025-68645CVE-2025-62522CVE-2025-60188CVE-2025-52691CVE-2025-34291CVE-2025-14847CVE-2025-8848CVE-2024-43971CVE-2024-30194CVE-2024-29931CVE-2024-29792CVE-2024-29138CVE-2024-28986CVE-2024-24882CVE-2024-6753CVE-2024-5057CVE-2024-4455CVE-2024-3469CVE-2023-33193CVE-2023-27351CVE-2022-27924CVE-2022-4940CVE-2021-36754CVE-2021-28799CVE-2021-24213CVE-2021-4448CVE-2020-13125CVE-2019-15823CVE-2019-11253CVE-2019-14206CVE-2019-9082CVE-2018-10245CVE-2018-9206CVE-2018-8011CVE-2018-6961CVE-2017-20192CVE-2017-11107CVE-2016-15043CVE-2016-15041CVE-2012-10018CVE-2011-3600CVE-2006-3392CVE-2025-34299CVE-2025-13486CVE-2021-23394
Nuclei Templates v10.3.7 release adds 102 new detection templates covering 42 CVEs, including critical RCE and authentication bypass vulnerabilities across SmarterMail, Langflow AI, RustFS, SolarWinds Web Help Desk, and legacy systems. The release includes templates for recent 2025 vulnerabilities alongside historical CVEs with public exploits, enabling rapid vulnerability scanning across enterprise infrastructure.
7.3
CVSS v3.1
62
Edit Score
CVE-2026-0603 — Hibernate: A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by
A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service. CVSSv3.1 8.3 (HIGH)
8.3
CVSS v3.1
92
Edit Score