Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.8 TRENDMICROBLOG:...

From Langflow to Monero: Inside CVE-2026-33017 Cryptominer_TRENDMICROBLOG:D6D82F6102E243699FEABC242F869EE4

We tracked a cryptocurrency-mining campaign exploiting CVE-2026-33017, which revealed how threat actors are now scanning exposed AI application inf...

N/A N/A TRENDMICROBLOG
NONE HACKREAD:A41968...

New CryptoBandits Malware Uses USB Drives and Tor to Steal Crypto_HACKREAD:A419683ACF762DB1E281C5DEA5248AF1

Microsoft researchers warn of a new dual-action cryptocurrency clipper (CryptoBandits Malware) spreading through USB devices to alter wallet addres...

N/A N/A HACKREAD
NONE MALWAREBYTES:32...

Meta pauses controversial employee-tracking program after security review_MALWAREBYTES:3217C4695DDE3B50CC9820CDF4D81613

Meta has paused a controversial employee‑tracking program after an internal security review found that highly granular keystroke and screen‑capture...

N/A N/A MALWAREBYTES
NONE AKAMAIBLOG:F7FF...

AI Reconnaissance: The Missing Layer in Chatbot Security_AKAMAIBLOG:F7FF735B9CED18324CEDEF05F2700342

{“lastseen”:”2026-06-23T13:36:50″,”description”:””,”published”:”2026-06-23T15:00:...

N/A N/A AKAMAIBLOG
NONE DBE8424D-F85A-

Web-Attack-Investigator_DBE8424D-F85A-5901-8C17-A6A967AC334B

Web Attack Investigator Ferramenta de investigação de ataques web desenvolvida em Python para análise de logs Apache/Nginx, identificação de indica...

N/A N/A GITHUBEXPLOIT
MEDIUM 5.5 4E361A66-0287-

Exploit for Path Traversal in Microsoft_4E361A66-0287-5D9D-9DA5-91D2EF34D2CB

🛡️ NimbusPWN-CVE-2022-29799-29800 - Test local privilege escalation security flaws 📖 About this tool This software helps security researchers stud...

N/A N/A GITHUBEXPLOIT
NONE B58A6443-007E-

pansyhebephrenic23.github.io_B58A6443-007E-50BF-A5F9-905979836753

No description provided...

N/A N/A GITHUBEXPLOIT
NONE C9AAD52B-CC2A-

pharaohound_C9AAD52B-CC2A-5C4D-BBAD-E9DCAB26CB8B

☥ Pharaohound ☥ The Fast-Triage, Command-Generating Active Directory Analysis Engine Pharaohound is a streaming, concurrent, and highly modular Act...

N/A N/A GITHUBEXPLOIT
MEDIUM 5.4 CVE-2026-8378

Frontend File Manager Plugin <= 23.6 - Subscriber+ Stored Cross-Site Scripting via File Rename_CVE-2026-8378

The Frontend File Manager Plugin WordPress plugin through 23.6 does not sanitise nor escape a filename submitted to the frontend file-rename endpoi...

Unknown Frontend File Manager Plugin CVE
HIGH 7.1 CVE-2026-8172

Simple Basic Contact Form <= 20250114 - Reflected XSS_CVE-2026-8172

The Simple Basic Contact Form WordPress plugin through 20250114 does not escape user-supplied input before reflecting it into the contact form outp...

Unknown Simple Basic Contact Form CVE