Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.7 CVE-2026-53806

OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation_CVE-2026-53806

OpenClaw before 2026.5.12 contains a shell option parsing vulnerability that allows combined POSIX shell flags to bypass exec revalidation checks. ...

OpenClaw OpenClaw CVE
HIGH 7.7 CVE-2026-50245

Brickcom Cameras Missing Authentication for Critical Function_CVE-2026-50245

Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is required to retrieve still i...

Brickcom Cube 3.2.3.5.6 CVE
HIGH 7.7 CVE-2026-50005

Brickcom Cameras Use of Default Credentials_CVE-2026-50005

Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to silently access camera feeds.

Brickcom Cube 3.2.3.5.6 CVE
CRITICAL 9 CVE-2026-41005

UAA accepts SAML Encrypted Assertions authentication bypass_CVE-2026-41005

Cloud Foundry UAA incorrectly treated XML encryption to the Service Provider (confidentiality) as a substitute for XML signatures from the Identity...

Cloud Foundry UAA 2.0.0 CVE
NONE 9C9F70FF-2585-

dvwa-web-attack-lab_9C9F70FF-2585-522B-AEBD-59CBB8CD56B7

Web Application Penetration Testing Lab Platform: Kali Linux VirtualBox | Target: DVWA Damn Vulnerable Web Application | Tools: Burp Suite Communit...

N/A N/A GITHUBEXPLOIT
NONE TALOSBLOG:E499A...

A tale of two eras_TALOSBLOG:E499ABB864B9A8C19A09AD5A39C7322B

![A tale of two eras](https://storage.ghost.io/c/af/a0/afa04ee3-414f-4481-8d23-7e7c146f192e/content/images/2026/06/threat_source-1.jpg) Welcome to...

N/A N/A TALOSBLOG
NONE WIRED:0B021BDAA...

Grok Is Still Hosting Sexualized Deepfakes of Famous Women_WIRED:0B021BDAAFB71BEEC59FFF8BD19BFEC9

A WIRED investigation found dozens of “nudified” deepfake images and videos on Grok's website, including nonconsensual depictions of celebrities an...

N/A N/A WIRED
CRITICAL 9.8 THN:752B90FA610...

ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities_THN:752B90FA61064ECC5D562EA512CCEC15

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBpNcbfulhruio1VSh8OPKOjdx3gvP-Chg8OjSm7LZeVK2GaVR-osKeoQjO9e1_56Dtedmlisu76lYc70Wv5...

N/A N/A THN
NONE MSF:EXPLOIT-MULTI-

VS Code Extension Persistence_MSF:EXPLOIT-MULTI-PERSISTENCE-VSCODE_EXTENSION-

This module installs a malicious VS Code extension into the target's VS Code extensions directory. The extension executes the payload each time VS ...

N/A N/A METASPLOIT
CRITICAL 10 CVE-2026-49261

MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`_CVE-2026-49261

MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11...

MariaDB server >= 10.6.1, < 10.6.27 CVE