Do Son Apache Tomcat RCE alert: CVE-2026-34486 exploit code and details are now public. A "fail-open" flaw enables RCE via Tribes clustering. Update immediately.
Exploit PoC
Full Exploit Disclosed: Public PoC and Technical Details Released for Critical ProFTPD SQL Injection
Full Exploit Disclosed: Public PoC and Technical Details Released for Critical ProFTPD SQL Injection
Critical SQLi in ProFTPD's mod_sql allows unauthenticated admin account injection. Full PoC code is public. Upgrade to v1.3.9a to secure your servers.
Synacktiv unmasks CVE-2025-54068, a critical Livewire hydration flaw, and Livepyre, a tool that achieves RCE even if the APP_KEY is known.
Microsoft patches a high-severity Windows DWM flaw that allows low-level users to seize SYSTEM privileges via a rendering brush error. PoC availabe.