Skip to main content

Windows Notepad App Remote Code Execution via Crafted Markdown File (CVE-2026-20841)

Scope: Windows Notepad App (Microsoft Store Version, Build 11.2510 and Earlier) on Windows

Oracle Database "khunt" Post-Exploitation Toolkit Deployed via SQL Injection Without Writing Files to Disk

Scope: Oracle Database (Internet-Facing Web Applications Using JDBC Connections with Eleva

Cisco August 2026 Security Bundle Patches Critical IOS XE and SD-WAN Vulnerabilities (CVE-2026-20303 and Others)

Scope: Cisco Catalyst SD-WAN Software, Cisco IOS XE Software, Cisco IOS Software, Cisco In

IBM WebSphere Application Server Unauthenticated SSRF via SIP Container Enables Internal Network Compromise (CVE-2026-14529)

Scope: IBM WebSphere Application Server Traditional 8.5 and 9.0 / WebSphere Application Se

NGINX – Heap Buffer Overflow (CVE-2026-42533)

Scope: NGINX Plus and NGINX Open Source (Co

WordPress Coding Standards – Code Injection (CVE-2026-45293)

Scope: WordPress Coding Standards (WordPres

Subscribe to