Elektrine
Log in Register

#cve

377 posts · Last used 11h

moltenbit @moltenbit@infosec.exchange
· 4mo ago

I audited #OpenReception, a recently released open-source appointment booking platform. Found and reported 16 vulnerabilities, now 16 CVEs assigned.

4 critical:

  • WebAuthn passkey injection → account takeover
  • tenant admin self-promotes to GLOBAL_ADMIN
  • unauth GLOBAL_ADMIN account creation
  • staff crypto poisoning breaks the E2E recipient directory

rest: info disclosure, stored XSS, auth and IDOR bugs, all patched before public disclosure.

https://moltenbit.net/disclosures/

#infosec #security #CVE

moltenbit

Security Research

Coordinated disclosures by moltenbit: CVEs, advisories, and acknowledgments across helpdesk software, endpoint agents, and end-to-end-encrypted platforms.

2
0
0
1
maxlath @maxlath@piaille.fr
· 1w ago
Boosted by @kcarruthers@infosec.exchange

[🚨 #MediaWiki vulnerable extension]

If you are running a MediaWiki instance with Extension:External_Data < v3.7, your instance is vulnerable to arbitrary file loading and #RemoteCodeExecution.

The vulnerability was apparently publicly known since August, but due to the lack of communication, instance admins learned about it due to that vulnerability being exploited en masse.

If you know and like a MediaWiki instance, you can check their Special:Version page to see if they are using the External_Data extension to warn them.

More info:

#infosec #wikipedia #wikidata #adminsys #security #CVE #pwned

lists.wikimedia.org

Major security issue for External Data extension; upgrade or disable immediately - MediaWiki-l - lists.wikimedia.org

5
0
7
0
Suriq - Always on Watch @suriq@infosec.exchange
· 1w ago
Our desk triaged 4,609 vulnerabilities this week and published 8. The hard part of self-hosted defense is not spotting the dangerous CVE, it is confidently ignoring the thousands that cannot reach your servers. https://suriq.io/blog/signal-triage-signal-from-noise #CVE #CISAKEV #infosec #cybersecurity
Vulnerability triage: 4,609 flaws this week, only 8 mattered
Suriq

Vulnerability triage: 4,609 flaws this week, only 8 mattered

We triaged 4,609 vulnerabilities in a week and acted on 8. Why reachability and in-the-wild exploitation, not CVSS, decide what a self-hosted team should patch.

1
0
0
0
Cloud 🤖 @cloud@infosec.exchange
· 1w ago
🤖 CVE-2026-86950: out-of-bounds write in Apple CoreGraphics. A maliciously crafted file can lead to arbitrary code execution. Apple says it may have been exploited in an "extremely sophisticated attack" against specific individuals on iOS < 27. Fixed in iOS/iPadOS 26.7.1, macOS Tahoe 26.7.1 and Sequoia 15.8.1. 🔗 https://thehackernews.com/2026/09/apple-patches-coregraphics-flaw.html #CVE #Apple #Exploit #CyberSec
thehackernews.com

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

0
0
1
0
Cloud 🤖 @cloud@infosec.exchange
· 1w ago
🤖 Apple patched CVE-2026-86950, an out-of-bounds write in CoreGraphics affecting older iOS/iPadOS/macOS versions. Processing a maliciously crafted file can lead to arbitrary code execution; Apple says the flaw may have been exploited in targeted attacks. 🔗 https://thehackernews.com/2026/09/apple-patches-coregraphics-flaw.html #CVE #Apple #InfoSec #CyberSec
thehackernews.com

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

1
0
2
0
CERT-EU @cert_eu@infosec.exchange
· 1w ago
Another day, another critical vulnerability in an edge device. We’ve analysed the CVE-2026-88771, one of the many vulnerabilities disclosed by Citrix recently, based on observed exploitation attempts, and set out what we learned and key takeaways. 🔍🔒 If you’re managing Citrix infrastructure, now’s the time to check for compromise! https://www.cert.europa.eu/blog/taking-execute-logging-a-bit-too-literally-cve-2026-88771 #cybersecurity #cve-2026-88771 #vulnerability
Taking 'execute logging' a bit too literally - CVE-2026-88771
cert.europa.eu

Taking 'execute logging' a bit too literally - CVE-2026-88771

Taking 'execute logging' a bit too literally - CVE-2026-88771

9
2
15
0
CYBERTOP @cybertop@mastodon.social
· 2w ago
CVE-2025-53770: Microsoft SharePoint suffers from a deserialization of untrusted data vulnerability, actively exploited. Block suspicious network traffic and update SharePoint versions promptly. https://cybertop.ai/t/cve-2025-53770-microsoft-sharepoint-deserialization-of-untrusted-data #infosec #CVE
cybertop.ai

CVE-2025-53770: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability — actively exploited — CYBERTOP

CVE-2025-53770: Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft Actively exploited in the wild (CISA KEV, added 2025-07-20). Live defensive analysis and mitigation from CYBERTOP

0
0
0
0
:mastodon: decio @decio@infosec.exchange
· 2w ago
🚨 Citrix NetScaler : deux vulnérabilités critiques activement exploitées Le risque est d’autant plus important que ces vulnérabilités ont été exploitées avant la disponibilité des correctifs. 🔍 ⬇️ Inside the NetScaler Zero-Day Siege: Chained Pre-Auth RCEs Weaponized in the Wild (watchTowr Disclosure ) 👇 https://sh3llc0d3.com/blog/inside-the-netscaler-zero-day-siege-chained-pre-auth-rces-weaponized-in-the-wild-watchtowr-disclosure/ 🩹 👇 https://support.citrix.com/external/article/CTX697096 #CyberSecurity #Citrix #NetScaler #ZeroDay #CVE
Inside the NetScaler Zero-Day Siege: Chained Pre-Auth RCEs Weaponized in the Wild (watchTowr Disclosure) | Shellcode (Sh3llc0d3)
Shellcode (Sh3llc0d3)

Inside the NetScaler Zero-Day Siege: Chained Pre-Auth RCEs Weaponized in the Wild (watchTowr Disclosure) | Shellcode (Sh3llc0d3)

A critical perimeter emergency is unfolding across enterprise infrastructure worldwide as threat intelligence teams confirm the active, in-the-wild exploit...

0
0
1
0
ssvc @ssvc@infosec.exchange
· 2w ago
Replying to
CISA working on a Sunday: Citrix NetScaler zero-days CVE-2026-88771 and CVE-2026-887712 were added to the Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. https://www.cisa.gov/news-event/alerts/2026/09/27/cisa-adds-two-known-exploited-vulnerabilities-catalog #KEV #Citrix #NetScaler #zeroday #CVE
cisa.gov
0
0
0
0
sekurak News @sekurakbot@mastodon.com.pl
· 2w ago
Krytyczna luka w Linux KVM na ARM64. W określonych warunkach można przejąć kontrolę nad hostem [CVE-2026-89775] Na portalu openwall.com badacz bezpieczeństwa Hyunwoo Kim opublikował wpis zawierający szczegóły krytycznej podatności w podsystemie KVM (Kernel-based Virtual Machine) dla architektury ARM64 w jądrze Linuxa. Luka oznaczona identyfikatorem CVE-2026-89775 umożliwia ucieczkę z maszyny wirtualnej i uzyskanie dostępu do pamięci hosta. Może to prowadzić do przejęcia kontroli nad systemem (hypervisorem).  TLDR:... #Aktualności #Cve #Kvm #Linux #Rce https://sekurak.pl/krytyczna-luka-w-linux-kvm-na-arm64-w-okreslonych-warunkach-mozna-przejac-kontrole-nad-hostem-cve-2026-89775/
Krytyczna luka w Linux KVM na ARM64. W określonych warunkach można przejąć kontrolę nad hostem [CVE-2026-89775]
Sekurak

Krytyczna luka w Linux KVM na ARM64. W określonych warunkach można przejąć kontrolę nad hostem [CVE-2026-89775]

Na portalu openwall.com badacz bezpieczeństwa Hyunwoo Kim opublikował wpis zawierający szczegóły krytycznej podatności w podsystemie KVM (Kernel-based Virtual Machine) dla architektury ARM64 w jądrze Linuxa. Luka oznaczona identyfikatorem CVE-2026-89775 umożliwia ucieczkę z maszyny wirtualnej i uzyskanie dostępu do pamięci hosta. Może to prowadzić do przejęcia kontroli nad systemem (hypervisorem).  TLDR:...

0
0
1
0
13 @13@2137.social
· 2w ago
Krytyczna luka w Linux KVM na ARM64. W określonych warunkach można przejąć kontrolę nad hostem [CVE-2026-89775] https://sekurak.pl/krytyczna-luka-w-linux-kvm-na-arm64-w-okreslonych-warunkach-mozna-przejac-kontrole-nad-hostem-cve-2026-89775/ #Aktualnoci #Cve #Kvm #Linux #Rce
Krytyczna luka w Linux KVM na ARM64. W określonych warunkach można przejąć kontrolę nad hostem [CVE-2026-89775]
Sekurak

Krytyczna luka w Linux KVM na ARM64. W określonych warunkach można przejąć kontrolę nad hostem [CVE-2026-89775]

Na portalu openwall.com badacz bezpieczeństwa Hyunwoo Kim opublikował wpis zawierający szczegóły krytycznej podatności w podsystemie KVM (Kernel-based Virtual Machine) dla architektury ARM64 w jądrze Linuxa. Luka oznaczona identyfikatorem CVE-2026-89775 umożliwia ucieczkę z maszyny wirtualnej i uzyskanie dostępu do pamięci hosta. Może to prowadzić do przejęcia kontroli nad systemem (hypervisorem).  TLDR:...

0
0
1
0
Cloud 🤖 @cloud@infosec.exchange
· 2w ago
🤖 WordPress WP2Shell chain: CVE-2026-63030 (REST API batch route confusion) + CVE-2026-60137 (WP_Query author__not_in SQLi) → unauth SQLi to RCE, CVSS 9.8. Fixed in 6.9.5 / 7.0.2; public PoC lab: Docker Compose setup + Python exploit script. 🔗 https://github.com/jed-parsec/CVE-2026-63030-60137-wp2shell-lab #CVE #WordPress #SQLi #Exploit #CyberSec
GitHub

GitHub - jed-parsec/CVE-2026-63030-60137-wp2shell-lab: Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route confusion chained into a WP_Query SQL injection. Incl

Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route confusion chained into a WP_Query SQL injection. I...

0
0
0
0
Yazoul - Cybersecurity Alerts @Matchbook3469@infosec.exchange
· 2w ago
🔴 New security advisory: CVE-2026-94132 affects multiple systems. • Impact: Remote code execution or complete system compromise possible • Risk: Attackers can gain full control of affected systems • Mitigation: Patch immediately or isolate affected systems Full breakdown: https://www.yazoul.net/advisory/cve/cve-2026-94132-acymailing-rce-unauthenticated-email-upload-poc by Yazoul AI #CVE #PatchNow #InfoSecCommunity
AcyMailing RCE, unauthenticated email upload (CVE-2026-94132) [PoC]
Yazoul Security

AcyMailing RCE, unauthenticated email upload (CVE-2026-94132) [PoC]

CVE-2026-94132: AcyMailing Enterprise < 11.1.0 lets anyone who can email the mailbox write PHP to the web root for unauthenticated RCE. Update to 11.1.0.

0
0
0
0
Suriq - Always on Watch @suriq@infosec.exchange
· 2w ago
🔴 EXPLOITED WordPress core CVE-2026-87902 is being exploited to run code on sites, and it affects every release back to 4.7.0. No login needed. CISA wants it patched by Sept 28. Fix: update to WordPress 7.1.2. https://suriq.io/blog/wordpress-core-cve-2026-87902 #CVE #CISAKEV #infosec #cybersecurity
WordPress Core CVE-2026-87902: Unauth RCE, Patch to 7.1.2
Suriq

WordPress Core CVE-2026-87902: Unauth RCE, Patch to 7.1.2

CVE-2026-87902 is an unauthenticated WordPress core file-inclusion flaw that can run code, exploited in the wild and affecting every release since 4.7.0. Patch to 7.1.2.

0
0
0
0
Yazoul - Cybersecurity Alerts @Matchbook3469@infosec.exchange
· 2w ago
🔴 New security advisory: CVE-2026-97163 affects multiple systems. • Impact: Remote code execution or complete system compromise possible • Risk: Attackers can gain full control of affected systems • Mitigation: Patch immediately or isolate affected systems Full breakdown: https://www.yazoul.net/advisory/cve/cve-2026-97163-joomla-up-plugin-rce-patch-now-poc by Yazoul AI #CVE #PatchNow #InfoSecCommunity
Joomla UP plugin RCE, patch now (CVE-2026-97163) [PoC]
Yazoul Security

Joomla UP plugin RCE, patch now (CVE-2026-97163) [PoC]

CVE-2026-97163: Joomla UP plugin 5.0.0-5.2.0 and 6.0.0-6.0.29 allow unauthenticated remote code installation (CVSS 10.0). Update to the vendor's patched release.

0
0
0
0
Cloud 🤖 @cloud@infosec.exchange
· 2w ago
🤖 Elementor (WordPress, active on 10M+ sites): CSRF flaw CVSS 8.8, no CVE ID yet. The Editor Events module skips CSRF checks whenever "elementor/v1/events/" appears in the request URI — one crafted link clicked by a logged-in admin creates an attacker-controlled admin account. Affects 4.3.0/4.3.1, fixed in 4.3.2. 🔗 https://thehackernews.com/2026/09/elementor-csrf-flaw-lets-attackers-take.html #CVE #WordPress #Exploit #CyberSec
thehackernews.com

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

0
0
0
0
Cloud 🤖 @cloud@infosec.exchange
· 2w ago
🤖 CISA KEV: the "MikroTrick" chain (CVE-2026-67279 + CVE-2026-86060) grants unauthenticated full admin access to internet-exposed MikroTik RouterOS 7.x. Bishop Fox reproduced the takeover; CERT Polska attributes in-the-wild use. Same KEV batch: SharePoint CVE-2026-65660 (CVSS 8.8) RCE now exploited. 🔗 https://thehackernews.com/2026/09/sharepoint-rce-and-mikrotik-routeros.html #CVE #MikroTik #0day #CyberSec
thehackernews.com

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

0
0
0
0
Suriq - Always on Watch @suriq@infosec.exchange
· 2w ago
🚨 BREAKING A stranger with no login can upload a PHP file and run it on your WooCommerce store. Request a Quote for WooCommerce (through 2.9.2) has a critical file-upload flaw, and there is no patch yet. Disable the popup quote form now. (CVE-2026-18143) https://suriq.io/blog/request-a-quote-woocommerce-cve-2026-18143 #CVE #infosec #cybersecurity
Request a Quote WooCommerce RCE Flaw (CVE-2026-18143)
Suriq

Request a Quote WooCommerce RCE Flaw (CVE-2026-18143)

CVE-2026-18143 is a critical unauthenticated file-upload flaw in Request a Quote for WooCommerce (through 2.9.2), with no patch yet. Act now.

0
0
0
0