Exploits
WPSplinter: a 16-year-old flaw in Broadcom’s Wi-Fi SDK lets anyone in range run code on your router
WPSplinter exposes a 16-year-old Broadcom Wi-Fi flaw that lets attackers execute code on vulnerable routers without a Wi-Fi password
The 37-Year Old Bug: How a Legacy OpenBSD Code Enabled a Root Exploit on OpenBSD 7.9 Despite KARL, SMAP and SMEP
OpenBSD 7.9 Big Fish exploit explained: how a 37-year-old kernel bug bypasses KARL, SMAP and SMEP to achieve local root, plus patches
Critical Nextcloud Collabora Flaw Enables Unauthenticated Command Execution Through Built-in CODE Server
CVE-2026-110447 is a critical Nextcloud Collabora RCE flaw exploited in the wild. Learn affected versions, attack details, web shell indicators, and fixes
GitLab CVE-2026-97229: The CVSS 10.0 RCE Vulnerability Exposing 26,000+ CI/CD Pipelines to Attack
GitLab CVE-2026-97229 is a critical CVSS 10.0 RCE flaw in CI/CD regex compilation. Learn affected versions, exploit details, patches and detection
PwnEscape (CVE-2026-99999): The Critical Linux Kernel Flaw That Breaks VM Isolation
PwnEscape (CVE-2026-99999) is a critical Linux kernel flaw that can expose host memory and enable VM escape. Learn the impact, affected systems and patch
Next.js emergency patch: two critical RCE flaws allow unauthenticated remote code execution
Next.js fixes two critical RCE vulnerabilities and a high-severity DoS flaw. Learn about CVE-2026-96889, affected versions, exploit risks and security patches
Lime Bike-Share Feed May Let Observers Reconstruct Rider Trips
Lime's public GBFS data may allow observers to reconstruct bike and scooter trips if vehicle IDs are not rotated, raising serious location privacy concerns
Critical Telegram Desktop Vulnerability (CVE-2026-107181): A Technical Analysis of One-Click Account Takeover via IPC Injection
Telegram Desktop CVE-2026-107181 enables one-click account takeover through IPC injection and local session file theft. Learn how it works and how to protect your account
AnyDesk Linux Flaw “AnyPwn” Grants Pre-Auth Root Code Execution: Full Technical Breakdown of the Heap Overflow Exploit
AnyPwn exposes a pre-auth root RCE flaw in AnyDesk Linux 8.0.2. Learn how the heap overflow exploit works, affected versions, and mitigation steps
Citrix Patches Critical NetScaler Memory Overflow Flaw (CVSS 9.5) That Enables Remote Code Execution in SAML Deployments
Citrix patches CVE-2026-107406, a critical NetScaler memory overflow flaw rated CVSS 9.5 that can enable remote code execution or denial of service
