Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.6 THN:A837AA526C5...

ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories_THN:A837AA526C50A8C5953FC687D92743AC

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOsPH2SzhBWTxhXi2KCJw0YY29azn2hLkDQwQhyrjmwaRIXQfCAPNIjej3_TBd6VJm1JqWSs2EoI2jiWyVHE...

N/A N/A THN
NONE BE09124A-AA08-

llmbias-tse_BE09124A-AA08-51FE-B695-2FA3ACE6110D

llmbias-tse Prova de conceito POC do projeto InternetLab × LabDados: coleta automatizada de respostas de ferramentas de IA generativa sobre temas e...

N/A N/A GITHUBEXPLOIT
NONE 64551B6D-640A-

test_64551B6D-640A-592C-9A7A-98AE4B1631C5

No description provided...

N/A N/A GITHUBEXPLOIT
CRITICAL 10 34F15F9E-3DE3-

Exploit for CVE-2026-34234_34F15F9E-3DE3-5F98-9A00-51E6DAA3B16B

CVE-2026-34234 - CtrlPanel Installer RCE Lab Local Docker lab for demonstrating CVE-2026-34234 in CtrlPanel. This repository compares: - vuln: Ctrl...

N/A N/A GITHUBEXPLOIT
MEDIUM 6.5 CVE-2026-27145

Inefficient candidate hostname parsing in crypto/x509_CVE-2026-27145

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused stri...

Go standard library crypto/x509 CVE
MEDIUM 5.3 CVE-2026-49077

WordPress WP eMember plugin <= v10.2.2 - Sensitive Data Exposure vulnerability_CVE-2026-49077

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded ...

Tips and Tricks HQ WP eMember n/a CVE
LOW 2 CVE-2026-10801

modelscope ms-swift PIL Image Cache Key base.py Template._save_pil_image weak hash_CVE-2026-10801

A security vulnerability has been detected in modelscope ms-swift up to 4.2.0. This affects the function Template._save_pil_image of the file swift...

modelscope ms-swift 4.0 CVE
CRITICAL 9.8 CVE-2026-4104

SQLi in Akmer Informatics’ TeknoPass_CVE-2026-4104

Authorization bypass through User-Controlled SQL primary key vulnerability in Akmer Informatics Automation Industry and Trade Ltd. Co. TeknoPass al...

Akmer Informatics Automation Industry and Trade Ltd. Co. TeknoPass 20210501 CVE
HIGH 8.7 CVE-2026-45432

Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models_CVE-2026-45432

This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface...

GX INDIA GX Earth 2022 version E2022 - 3.1.2A CVE
HIGH 8.7 CVE-2026-45431

Command Injection Vulnerability in GX Earth ONT Models_CVE-2026-45431

This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web manage...

GX INDIA GX Earth 2022 version E2022 - 3.1.2A CVE