Integer Underflow

High-Severity strongSwan Flaw Enables Remote VPN Gateway Crashes libstrongswan double-free exploit strongSwan CVE-2026-47895 CVE-2023-41913 strongSwan Vulnerability VPN Denial of Service

libstrongswan double-free exploit strongSwan CVE-2026-47895 CVE-2023-41913 strongSwan Vulnerability VPN Denial of Service

High-Severity strongSwan Flaw Enables Remote VPN Gateway Crashes

Do Son March 26, 2026

A high-severity security vulnerability has been uncovered in strongSwan, the widely used open-source IPsec-based VPN solution. The...

HAProxy Patches High-Severity QUIC Flaws That Can Kill the Load Balancer

HAProxy Patches High-Severity QUIC Flaws That Can Kill the Load Balancer

Do Son February 16, 2026

Maintainers of the widely-used load balancer HAProxy have issued urgent security updates to address two high-severity vulnerabilities...

High-Severity Duc Disk Tool Flaw (CVE-2025-13654) Risks DoS and Information Leak via Integer Underflow Duc Buffer Overflow, Linux Disk Tool Flaw

Duc Buffer Overflow, Linux Disk Tool Flaw

High-Severity Duc Disk Tool Flaw (CVE-2025-13654) Risks DoS and Information Leak via Integer Underflow

Do Son December 8, 2025

A stack-based buffer overflow vulnerability has been discovered in Duc, a popular open-source tool used for indexing...

Critical strongSwan Heap Overflow in EAP-MSCHAPv2 Plugin Allows Remote Code Execution CVE-2025-62291 strongSwan Heap Overflow

CVE-2025-62291 strongSwan Heap Overflow

Critical strongSwan Heap Overflow in EAP-MSCHAPv2 Plugin Allows Remote Code Execution

Do Son October 29, 2025

The strongSwan Team has disclosed a critical heap-based buffer overflow vulnerability (CVE-2025-62291) in the EAP-MSCHAPv2 plugin used...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-14894CVSS 9.8
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload...
Admin intel📅 Updated: Sep 4, 2026
CVE-2026-85046CVSS 8.8
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code...
Admin intelCISA KEV📅 Added to KEV: Sep 4, 2026📅 Updated: Sep 3, 2026
CVE-2026-32475CVSS 9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue...
Admin intel📅 Updated: Sep 2, 2026
CVE-2026-48710CVSS 6.5
Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated...
CISA KEV📅 Added to KEV: Sep 2, 2026
CVE-2026-49869CVSS 10.0
Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath().endsWith("/configs")...
CISA KEV📅 Added to KEV: Sep 2, 2026
CVE-2026-59822
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to...
CISA KEV📅 Added to KEV: Sep 2, 2026
CVE-2026-83549CVSS 7.8
Post-authentication Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability has been identified...
Admin intelCISA KEV📅 Added to KEV: Sep 2, 2026📅 Updated: Sep 1, 2026
CVE-2026-83548CVSS 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
Admin intelCISA KEV📅 Added to KEV: Sep 2, 2026📅 Updated: Sep 1, 2026