@froge seeing this in my feed https://mehmetince.net/part-3-6-how-i-ended-up-turning-a-22-year-old-postgresql-type-confusion-primitive-into-rce-cve-2026-6460/ I also could say the network timings don't matter just find an RCE and run the attack locally

22-Year-Old PostgreSQL Bug Turned into Remote Code Execution

Link: https://mehmetince.net/part-3-6-how-i-ended-up-turning-a-22-year-old-postgresql-type-confusion-primitive-into-rce-cve-2026-6460/
Discussion: https://news.ycombinator.com/item?id=50471761

22-Year-Old PostgreSQL Bug Turned into Remote Code Execution

보안 연구자 Mehmet Ince가 PostgreSQL 코어의 22년 된 type confusion 프리미티브를 원격 코드 실행(RCE)으로 연결한 과정을 CVE-2026-6460으로 공개했다. 복합 타입 안의 값을 만든 뒤 필드 타입을 바꾸고 다시 읽게 하면, Datum이 타입 정보를 갖지 않는다는 점 때문에 메모리 손상이 일어난다고 설명한다. 그는 pg_clickhouse 익스플로잇 작업에서 Datum과 OID를 접하고, AI 에이전트(Op...

https://mehmetince.net/part-3-6-how-i-ended-up-turning-a-22-year-old-postgresql-type-confusion-primitive-into-rce-cve-2026-6460/

22-Year-Old PostgreSQL Bug Turned into Remote Code Execution

Link: https://mehmetince.net/part-3-6-how-i-ended-up-turning-a-22-year-old-postgresql-type-confusion-primitive-into-rce-cve-2026-6460/
Discussion: https://news.ycombinator.com/item?id=50471761

22-Year-Old PostgreSQL Bug Turned into Remote Code Execution - https://mehmetince.net/part-3-6-how-i-ended-up-turning-a-22-year-old-postgresql-type-confusion-primitive-into-rce-cve-2026-6460/

#hackernews

22-Year-Old PostgreSQL Bug Turned into Remote Code Execution

https://mehmetince.net/part-3-6-how-i-ended-up-turning-a-22-year-old-postgresql-type-confusion-primitive-into-rce-cve-2026-6460/

Comments: https://news.ycombinator.com/item?id=50471761

#HackerNews

22-Year-Old PostgreSQL Bug Turned into Remote Code Execution

https://mehmetince.net/part-3-6-how-i-ended-up-turning-a-22-year-old-postgresql-type-confusion-primitive-into-rce-cve-2026-6460/

#postgresql

@froge seeing this in my feed https://mehmetince.net/part-3-6-how-i-ended-up-turning-a-22-year-old-postgresql-type-confusion-primitive-into-rce-cve-2026-6460/ I also could say the network timings don't matter just find an RCE and run the attack locally

22-Year-Old PostgreSQL Bug Turned into Remote Code Execution

Link: https://mehmetince.net/part-3-6-how-i-ended-up-turning-a-22-year-old-postgresql-type-confusion-primitive-into-rce-cve-2026-6460/
Discussion: https://news.ycombinator.com/item?id=50471761

22-Year-Old PostgreSQL Bug Turned into Remote Code Execution

Link: https://mehmetince.net/part-3-6-how-i-ended-up-turning-a-22-year-old-postgresql-type-confusion-primitive-into-rce-cve-2026-6460/
Discussion: https://news.ycombinator.com/item?id=50471761

22-Year-Old PostgreSQL Bug Turned into Remote Code Execution

https://mehmetince.net/part-3-6-how-i-ended-up-turning-a-22-year-old-postgresql-type-confusion-primitive-into-rce-cve-2026-6460/

Comments: https://news.ycombinator.com/item?id=50471761

#HackerNews

22-Year-Old PostgreSQL Bug Turned into Remote Code Execution

https://mehmetince.net/part-3-6-how-i-ended-up-turning-a-22-year-old-postgresql-type-confusion-primitive-into-rce-cve-2026-6460/

#postgresql

While not explicitly mentioned by CVE ID, huntback found #4everable2shell (CVE-2026-125883) is being exploited to install XMRig Monero Miners

https://huntback.io/blog/ncentral-4everable2shell-miners-on-live-servers

#eitw #nable #ncentral

While not explicitly mentioned by CVE ID, huntback found #4everable2shell (CVE-2026-125883) is being exploited to install XMRig Monero Miners

https://huntback.io/blog/ncentral-4everable2shell-miners-on-live-servers

#eitw #nable #ncentral

🚨 Critical Apache HTTP Server flaw discovered by Anthropic and Google could allow hackers to execute code without authentication; CVE-2026-119618

The Apache Software Foundation has released an urgent security update addressing a critical remote code execution vulnerability in Apache HTTP Server's HTTP/2 module.

The flaw, tracked as CVE-2026-119618, involves a race condition that could allow unauthenticated attackers to corrupt server memory and potentially execute malicious code on vulnerable systems.

The vulnerability was independently discovered by Anthropic's AI-powered OSS Scanner and researchers at Google Cloud.

Apache HTTP Server versions 2.4.55 through 2.4.70 are affected, with version 2.4.71 released to address the issue.

Source: https://httpd.apache.org/security/vulnerabilities_24

No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

Apache HTTP Server Patches Flaw Exploited for Remote Code Execution

A critical flaw in Apache HTTP Server's HTTP/2 module, known as CVE-2026-119618, can be exploited by unauthenticated attackers to execute remote code on vulnerable hosts. This race-condition bug can corrupt heap memory, allowing malicious actors to gain control of affected systems.

https://osintsights.com/apache-http-server-patches-flaw-exploited-for-remote-code-execution?utm_source=mastodon&utm_medium=social

#ApacheHttpServer #RemoteCodeExecution #Cve2026119618 #Http2 #RaceconditionBug

Karen IT Security Response Center (@ksrc) Advisory

Advisory ID: KSRC-2026-11121

A #critical race-condition #vulnerability has been identified in the #mod_http2 module of the #Apache HTTP Server. Tracked as CVE-2026-119618, the flaw allows an unauthenticated #remote attacker to trigger heap corruption and achieve remote code execution on servers that have HTTP/2 enabled.

The vulnerability has been assigned a CVSS v3.1 score of 9.8 (Critical). Apache HTTP Server versions 2.4.55 through 2.4.70 are affected. The issue was fixed in version 2.4.71, released on 11 November 2026. Public proof-of-concept material is available.

https://ksrc.karenit.net/blog/security-alert/critical-remote-code-execution-in-apache-http-server-mod-http2

#cve #cyberSecurity #staysafe #StayInformed #StayProtected

Too tired to hunt for the config detail that decides if #Apache CVE-2026-119618 needs emergency patching? Our new free scanner checks both conditions that make the RCE risk real:

→ the server runs Apache 2.4.55–2.4.70
→ and HTTP/2 is on

The scan gives you evidence for both: h2c request, server reply, version, port. No crash trigger, no login, no email required.

Check your Apache server: https://pentest-tools.com/network-vulnerability-scanning/cve-2026-119618-scanner-apache-http2-rce

Share it with a fellow sysadmin who needs way too much coffee to get through the day.

#infosec #offensivesecurity

🚨 Critical Apache HTTP Server flaw discovered by Anthropic and Google could allow hackers to execute code without authentication; CVE-2026-119618

The Apache Software Foundation has released an urgent security update addressing a critical remote code execution vulnerability in Apache HTTP Server's HTTP/2 module.

The flaw, tracked as CVE-2026-119618, involves a race condition that could allow unauthenticated attackers to corrupt server memory and potentially execute malicious code on vulnerable systems.

The vulnerability was independently discovered by Anthropic's AI-powered OSS Scanner and researchers at Google Cloud.

Apache HTTP Server versions 2.4.55 through 2.4.70 are affected, with version 2.4.71 released to address the issue.

Source: https://httpd.apache.org/security/vulnerabilities_24

No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

Karen IT Security Response Center (@ksrc) Advisory

Advisory ID: KSRC-2026-11121

A #critical race-condition #vulnerability has been identified in the #mod_http2 module of the #Apache HTTP Server. Tracked as CVE-2026-119618, the flaw allows an unauthenticated #remote attacker to trigger heap corruption and achieve remote code execution on servers that have HTTP/2 enabled.

The vulnerability has been assigned a CVSS v3.1 score of 9.8 (Critical). Apache HTTP Server versions 2.4.55 through 2.4.70 are affected. The issue was fixed in version 2.4.71, released on 11 November 2026. Public proof-of-concept material is available.

https://ksrc.karenit.net/blog/security-alert/critical-remote-code-execution-in-apache-http-server-mod-http2

#cve #cyberSecurity #staysafe #StayInformed #StayProtected

Too tired to hunt for the config detail that decides if #Apache CVE-2026-119618 needs emergency patching? Our new free scanner checks both conditions that make the RCE risk real:

→ the server runs Apache 2.4.55–2.4.70
→ and HTTP/2 is on

The scan gives you evidence for both: h2c request, server reply, version, port. No crash trigger, no login, no email required.

Check your Apache server: https://pentest-tools.com/network-vulnerability-scanning/cve-2026-119618-scanner-apache-http2-rce

Share it with a fellow sysadmin who needs way too much coffee to get through the day.

#infosec #offensivesecurity

safemode

https://nvd.nist.gov/vuln/detail/cve-2026-107360

A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template renderer without Jail mediation, including destructive operations such as host deletion and disclosure of non-allow-listed object state.

safemode

https://nvd.nist.gov/vuln/detail/cve-2026-107360

A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template renderer without Jail mediation, including destructive operations such as host deletion and disclosure of non-allow-listed object state.

⛔ New security advisory:

CVE-2026-126170 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-126170-fortianalyzer-unauth-rce-in-fortimanager-too-poc/?utm_source=mastodon&utm_medium=social

by Yazoul AI

#CVE #PatchNow #InfoSecCommunity

https://fritz.com/nl-nl/pages/current-security-topics-4

Fritz!Box / Fritz!OS:
«
Vulnerability in the handling of incoming IPv4 TCP connections in the Linux kernel (CVE-2026-98432): Updates in preparation

… We are not currently aware of any successful exploitation of the vulnerability, either in the context of our products or on other Linux-based systems. As a precaution, we are preparing updates for affected devices, which we will release as usual once they are ready.»

Via @angrynerdspodcast

CW: hosszabb elemzés

2026-ban a CVE-k száma robbanásszerűen nőtt: nov.7-ig ~92 482 regisztrált CVE; Google: 2026 jan–aug között 141 aktívan kihasznált (≈0,23%), a kernelhez kötődő CVE-k ~5000. Okok: AI-alapú kódanalízis, több CNA, és változó jelentési gyakorlat. Példa: CVE-2026-98432 (CVSS 9,8) — súlyosság ≠ automatikus kockázat. Részletek: https://linuxmint.hu/hir/2026/11/a-cve-robbanas-2026-ban-valoban-egyre-serulekenyebb-a-szoftvervilag-vagy-csak-egyre-tobb

#CVE #Linux #infosec #OpenSource

🚨 Hackers breach 21 N-able servers using new zero-day, including 19 running the latest security patch

Exploit: https://github.com/fixedbyreboot/CVE-2026-90436-POC

Hackers are actively exploiting a newly disclosed N-able N-central vulnerability dubbed 4EverAble2Shell, allowing unauthenticated attackers to gain root access and deploy cryptocurrency miners.

Security researchers at Huntback confirmed at least 21 compromised production servers across multiple countries, including 19 running N-able's latest security update released on November 10.

The attacks began just hours after a public proof-of-concept was released. The exploit requires the Legacy API to be enabled and chains CVE-2026-90436 with a privilege escalation flaw.

N-able is implementing additional protections and urging administrators to disable Legacy API access while further fixes are developed.

Source: https://www.bleepingcomputer.com/news/security/new-n-able-4everable2shell-zero-day-exploited-hours-after-poc-released/

No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

🚨 Hackers breach 21 N-able servers using new zero-day, including 19 running the latest security patch

Exploit: https://github.com/fixedbyreboot/CVE-2026-90436-POC

Hackers are actively exploiting a newly disclosed N-able N-central vulnerability dubbed 4EverAble2Shell, allowing unauthenticated attackers to gain root access and deploy cryptocurrency miners.

Security researchers at Huntback confirmed at least 21 compromised production servers across multiple countries, including 19 running N-able's latest security update released on November 10.

The attacks began just hours after a public proof-of-concept was released. The exploit requires the Legacy API to be enabled and chains CVE-2026-90436 with a privilege escalation flaw.

N-able is implementing additional protections and urging administrators to disable Legacy API access while further fixes are developed.

Source: https://www.bleepingcomputer.com/news/security/new-n-able-4everable2shell-zero-day-exploited-hours-after-poc-released/

No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

Check Point exploited zero-day: CVE-2026-123039 (7.8 high) local privilege escalation to root

Check Point observed an active exploit of this vulnerability against a couple of dozen customers.

https://support.checkpoint.com/results/sk/sk1000362

#CheckPoint #cve #zeroday

Check Point exploited zero-day: CVE-2026-123039 (7.8 high) local privilege escalation to root

Check Point observed an active exploit of this vulnerability against a couple of dozen customers.

https://support.checkpoint.com/results/sk/sk1000362

#CheckPoint #cve #zeroday

thats a funny one.. imagine using products built by security companies

🔐 CVE-2026-120869

📊 CVSS: 9.3 · Critical
📅 11/12/2026, 03:17 PM
📦 Affected: Citrix NetScaler Console (< 14.1-74.34)
📚 https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697320 https://nvd.nist.gov/vuln/detail/CVE-2026-120869

🔗 https://hecate.pw/vulnerability/CVE-2026-120869

#cve #vulnerability #hecate

thats a funny one.. imagine using products built by security companies

🔐 CVE-2026-120869

📊 CVSS: 9.3 · Critical
📅 11/12/2026, 03:17 PM
📦 Affected: Citrix NetScaler Console (< 14.1-74.34)
📚 https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697320 https://nvd.nist.gov/vuln/detail/CVE-2026-120869

🔗 https://hecate.pw/vulnerability/CVE-2026-120869

#cve #vulnerability #hecate

🔵 THREAT INTELLIGENCE

CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws

Vulnerability | CRITICAL
CVEs: CVE-2026-123218

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added four security flaws impacting GPUStack, SignalWire FreeSwitch...

Full analysis:
https://www.yazoul.net/news/article/cisa-warns-of-active-exploitation-of-openssh-gpustack-freeswitch-and-ibm-flaws/?utm_source=mastodon&utm_medium=social

by Yazoul AI

#ThreatIntel #SecurityNews #IncidentResponse

🚨 Public exploit released for critical Cisco Expressway flaw allowing attackers to gain root access without authentication; CVE-2026-76466

https://github.com/dinosn/cve-2026-76466

A public proof-of-concept (PoC) exploit has been released for a critical Cisco Expressway vulnerability that could allow unauthenticated attackers to execute commands with root privileges on affected systems.

Tracked as CVE-2026-76466 (CVSS 9.8), the flaw involves hard-coded authentication credentials and insufficient certificate validation in clustered Expressway deployments. Researchers have demonstrated successful exploitation, potentially giving attackers complete control of vulnerable servers.

Cisco has released security updates, with Expressway versions X15.5.3 and earlier requiring an upgrade to X15.5.20. No active exploitation has been confirmed.

Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vcs-static-cred-hr7EWZ8t

💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

🚨 Public exploit released for critical Cisco Expressway flaw allowing attackers to gain root access without authentication; CVE-2026-76466

https://github.com/dinosn/cve-2026-76466

A public proof-of-concept (PoC) exploit has been released for a critical Cisco Expressway vulnerability that could allow unauthenticated attackers to execute commands with root privileges on affected systems.

Tracked as CVE-2026-76466 (CVSS 9.8), the flaw involves hard-coded authentication credentials and insufficient certificate validation in clustered Expressway deployments. Researchers have demonstrated successful exploitation, potentially giving attackers complete control of vulnerable servers.

Cisco has released security updates, with Expressway versions X15.5.3 and earlier requiring an upgrade to X15.5.20. No active exploitation has been confirmed.

Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vcs-static-cred-hr7EWZ8t

💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

🚨 EUVD-2026-124670

📊 Score: 7.7/10 (CVSS v3.1)
📅 Updated: 2026-11-12

📝 A flaw was found in Foreman. An authenticated user with view_hosts privileges can retrieve rendered provisioning template content for a host via the hosts template API endpoint, disclosing sensitive data such as the host root password. This is an incomplete fix of CVE-2026-96659, which harden...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-124670

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-124670

📊 Score: 7.7/10 (CVSS v3.1)
📅 Updated: 2026-11-12

📝 A flaw was found in Foreman. An authenticated user with view_hosts privileges can retrieve rendered provisioning template content for a host via the hosts template API endpoint, disclosing sensitive data such as the host root password. This is an incomplete fix of CVE-2026-96659, which harden...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-124670

#cybersecurity #infosec #euvd #cve #vulnerability

ForgePtr: Unprivileged kernel write in Nvidia Linux GPU driver (CVE-2026-47501)

보안 업체 Stealthium이 NVIDIA 리눅스 GPU 드라이버의 로컬 권한 상승 취약점 ForgePtr(CVE-2026-47501)를 공개했다. 이벤트 버퍼 설정 경로에서 핸들 변환 성공 여부를 검사하지 않아, 비특권 사용자가 커널 메모리의 임의 주소에 값을 쓸 수 있다. 이를 이용해 core_pattern을 덮어써 루트 셸을 얻고, 컨테이너에서 호스트로 탈출하며, ASLR·커널 lockdown·모듈 서명 검증을 끌 수 있다고 밝혔다. 영향 범위는 오픈소스 드라이버 515.43.04(2022-05)부터 610.57.04(2026-08)까지이며, 615.71.09(202...

https://stealthium.io/blog/forgeptr

CVE-2026-77386 Kyoo <5.1.0: unauthenticated OIDC open redirect leaks login tokens. CVSS 6.5. Patch in review, pin access until 5.1.0 lands. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-77386/

CVE-2026-77616: reflected XSS in Semantic MediaWiki 7.0.0-7.1.0 via unsigned cursors in Special:Ask. CVSS 6.1. Patch under review, so limit exposure until it ships. #CVE #infosec #MediaWiki https://www.valtersit.com/cve/CVE-2026-77616/

🚨 EUVD-2026-124525

📊 Score: 7.1/10 (CVSS v3.1)
📅 Updated: 2026-11-12

📝 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate of CVE-2026-82873.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-124525

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-124525

📊 Score: 7.1/10 (CVSS v3.1)
📅 Updated: 2026-11-12

📝 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate of CVE-2026-82873.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-124525

#cybersecurity #infosec #euvd #cve #vulnerability