[webapps] HAX CMS 24.x - Stored Cross-Site Scripting (XSS)
HAX CMS 24.
Vulnerability Disclosure
20 articles
[webapps] Craft CMS 5.6.16 - RCE
Craft CMS 5.6.
[local] GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation
GNU InetUtils 2.
[webapps] GeographicLib v2.5.1 - stack buffer overflow
GeographicLib v2.5.
[local] OpenWrt 23.05 - Authenticated Remote Code Execution (RCE)
OpenWrt 23.
[webapps] GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)
GUnet OpenEclass E-learning platform < 4.
[webapps] JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution
JuzaWeb CMS 3.4.
[webapps] FacturaScripts 2025.43 - XSS
FacturaScripts 2025.
[webapps] Xibo CMS 4.3.0 - RCE via SSTI
Xibo CMS 4.3.
[local] Fedora - Local Privilege Escalation
Fedora - Local Privilege Escalation
[webapps] LangChain Core 1.2.4 - SSTI/RCE
LangChain Core 1.2.
Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote atta...
NSA GRASSMARLIN
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to disclose sensitive information. The following versions of NSA GRAS...
ZDI-26-305: (0Day) OpenAI Codex Sandbox Escape Vulnerability
This vulnerability allows remote attackers to bypass the sandbox on affected installations of OpenAI Codex. User interaction is required to exploit this vuln...
As the NVD scales back CVE enrichment, here’s what Tenable customers need to know
NIST’s shift toward selective CVE enrichment creates significant visibility gaps for teams relying solely on the National Vulnerability Database. As AI accel...
Metasploit Wrap-Up 04/25/2026
Check Method Visibility Metasploit has supported check methods for many years now. It’s not always desirable to jump straight into exploiting a vulnerability...
Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability
A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated...
PhantomRPC: A new privilege escalation technique in Windows RPC
Kaspersky researcher discovered a vulnerability in RPC architecture that enables an attacker to create a fake RPC server and escalate their privileges.
Wordfence Intelligence Weekly WordPress Vulnerability Report (April 13, 2026 to April 19, 2026)
Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPres...
AI is Changing Vulnerability Discovery and your Software Supply Chain Strategy has to Change with it
Wade Woolwine is Senior Director, Product Security at Rapid7. The headlines around Glasswing have focused on how quickly AI can surface vulnerabilities, whic...