Aggregator

CVE-2024-14040 | Linux Kernel nexthop weight/resvd1 allocation of resources (EUVD-2024-55701 / Nessus ID 330018)

VulDB Recent Entries
6 days 22 hours ago
A vulnerability was found in Linux Kernel and classified as very critical. The impacted element is an unknown function of the component nexthop. Such manipulation of the argument weight/resvd1 leads to allocation of resources. This vulnerability is traded as CVE-2024-14040. The attack may be launched remotely. There is no exploit available. It is advisable to implement a patch to correct this issue.
vuldb.com

CVE-2026-64530 | Linux Kernel up to 7.1.4 cls_api net/sched/cls_api.c tcf_qevent_handle use after free (EUVD-2026-49051 / Nessus ID 330017)

VulDB Recent Entries
6 days 22 hours ago
A vulnerability has been found in Linux Kernel up to 7.1.4 and classified as very critical. The affected element is the function tcf_qevent_handle of the file net/sched/cls_api.c of the component cls_api. This manipulation causes use after free. This vulnerability appears as CVE-2026-64530. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.
vuldb.com

CVE-2026-63720 | koxudaxi datamodel-code-generator up to 0.69.x customBasePath code injection (545a96c5 / EUVD-2026-49050)

VulDB Recent Entries
1 week ago
A vulnerability, which was classified as critical, was found in koxudaxi datamodel-code-generator up to 0.69.x. Impacted is an unknown function. The manipulation of the argument customBasePath results in code injection. This vulnerability is reported as CVE-2026-63720. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.
vuldb.com

PentesterFlow – AI Tool for Penetration Testers and Bug Hunters to Automate Workflows

Cyber Security News
1 week ago

PentesterFlow is a new open-source, human-in-the-loop agentic AI command-line tool built specifically for penetration testers and bug bounty hunters, designed to automate recon-to-reporting workflows without sacrificing analyst oversight. Most agentic AI security tools suffer from hallucinated findings, weak context retention, and poor tool integration, but PentesterFlow tackles these problems head-on with built-in pentest skills, evidence-based […]

The post PentesterFlow – AI Tool for Penetration Testers and Bug Hunters to Automate Workflows appeared first on Cyber Security News.

Guru Baran

CVE-2026-25589

CVE Trends
1 week ago
Currently trending CVE - Hype Score: 10 - RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a ...

CVE-2026-56164

CVE Trends
1 week ago
Currently trending CVE - Hype Score: 4 - Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-15962 | techjewel Fluent Forms Pro Add On Pack Plugin up to 6.2.6 on WordPress deserialization (EUVD-2026-49047)

VulDB Recent Entries
1 week ago
A vulnerability, which was classified as critical, has been found in techjewel Fluent Forms Pro Add On Pack Plugin up to 6.2.6 on WordPress. This issue affects some unknown processing. The manipulation leads to deserialization. This vulnerability is documented as CVE-2026-15962. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

使用AI对天猫精灵IoT模块进行逆向分析（二）

Hcamael
1 week ago

上一篇文章核心内容就是让AI通过UART帮我分析出电机协议，然后指导我设计wifi模块，开发固件，然后替换掉原装板子。然后再帮我逆向原装板子，发现了ALCS协议。
在上一篇文章完成窗帘电机的改装后，我又把目标看向了我家客厅的梦幻帘电机。该电机也是窗帘厂家提供的，说是乐屋梦幻帘电机，也是连接到天猫精灵上。

Iran-Linked Actors Breach Are Targeting US Water and Energy Control Systems

Security Affairs
1 week ago
US agencies warn Iran-linked actors are targeting internet-exposed water and energy control systems, risking disruption. Federal agencies updated their cybersecurity advisory this week: Iran-linked actors are inside American water and energy control systems, and they’re not just looking around. They’re changing things. The updated advisory from CISA, the FBI, NSA, and the Department of Energy […]
Pierluigi Paganini

Managed ad