Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 10 A9AC151B-4017-

Exploit for CVE-2026-48908_A9AC151B-4017-55EC-996C-AB5AF8111575

CVE-2026-48908 — SP Page Builder Joomla Unauthenticated RCE Proof-of-concept exploit for CVE-2026-48908, a critical CVSS 4.0 = 10.0 unauthenticated...

N/A N/A GITHUBEXPLOIT
NONE A74D449F-7BD1-

cmc-poc_A74D449F-7BD1-5DF7-8B5B-5031AC3238E1

No description provided...

N/A N/A GITHUBEXPLOIT
MEDIUM 6.3 CVE-2026-54665

Apache NiFi: Missing Validation for Proxy Host Headers_CVE-2026-54665

Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request headers that provide an alternative to the standar...

Apache Software Foundation Apache NiFi 0.0.1 CVE
NONE THN:737989C010C...

Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices_THN:737989C010C5C788BED2FE967F254621

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKdFZ8X3qY44sjGFbQxJtogYdOcHTqy6L8zM5WrFEIcBfNui5A5cDTdrf932hfXB-Ugw_Uluy31ujP1EGMDy...

N/A N/A THN
HIGH 7.5 CVE-2026-44914

Apache NiFi: Missing Authorization of Restricted Permissions when Replacing Flow Contents_CVE-2026-44914

Apache NiFi 1.12.0 through 2.9.0 are missing authorization when replacing Process Groups that include extension components with specific Required P...

Apache Software Foundation Apache NiFi 1.12.0 CVE
MEDIUM 5.2 CVE-2026-44913

Apache NiFi: Improper Escaping of Table Names in CaptureChangeMySQL_CVE-2026-44913

Improper escaping of database table names in the CaptureChangeMySQL Processor included with Apache NiFi 1.2.0 through 2.9.0 allows for injecting SQ...

Apache Software Foundation Apache NiFi 1.2.0 CVE
LOW 2.3 CVE-2026-44911

Apache NiFi: Incorrect Authorization for Configuration Verification Requests_CVE-2026-44911

Authorization handling for component configuration verification requests in Apache NiFi 1.15.0 through 2.9.0 allows clients with read access to sub...

Apache Software Foundation Apache NiFi 1.15.0 CVE
NONE 410A7F1F-5142-

python-SQLiscanner_410A7F1F-5142-5466-94C6-96D489CE0302

No description provided...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.8 BC1EFC7B-C6E0-

Exploit for Authentication Bypass by Spoofing in Zabbix_BC1EFC7B-C6E0-528C-BD5D-A2D2ECE15187

CVE-2022-23131 - Zabbix SAML SSO Authentication Bypass + RCE Overview When SAML SSO is enabled, Zabbix stores session data in a client-side cookie ...

N/A N/A GITHUBEXPLOIT
HIGH 8.1 976F9104-D05C-

Exploit for Use After Free in Google Android_976F9104-D05C-54A5-8EAF-248D039A5569

CVE-2023-20938 — Android binder UAF privilege escalation A local privilege escalation proof-of-concept for CVE-2023-20938, a use-after-free in the ...

N/A N/A GITHUBEXPLOIT