A public proof-of-concept has appeared for CVE-2026-84636, an information-disclosure issue described as “Wi-Fi SSID Info Disclosure.” The PoC, written in Objective-C, demonstrates a case where the identifier of the currently…
>> TAG: #remote exploit
Between 18 October 21:32 UTC and 19 October 07:29 UTC, three WordPress sites I manage — referred to here as xxxx.com, yyyy.com and zzzzz.com — were each implanted with backdoor plugins. No vulnerability was exploited….
KodExplorer 4.49 – CSRF to Arbitrary File Upload
Microsoft Word 16.72.23040900 – Remote Code Execution (RCE)
Bang Resto v1.0 – ‘Multiple’ SQL Injection
Bang Resto v1.0 – Stored Cross-Site Scripting (XSS)
AspEmail v5.6.0.2 – Local Privilege Escalation
Swagger UI 4.1.3 – User Interface (UI) Misrepresentation of Critical Information
Franklin Fueling Systems TS-550 – Default Password
GDidees CMS 3.9.1 – Local File Disclosure