| Patch bulletins | PHP October 2026 security release: two critical RCE flaws — FlawOpen | | | 2026-10 |
| Patch bulletins | Citrix NetScaler CVE-2026-107406 Patch Guide — FlawOpen | | | 2026-10 |
| Patch bulletins | Cisco NX-OS October 2026: six CVEs and fixed versions — FlawOpen | | | 2026-10 |
| Patch bulletins | Cisco Finesse CVE-2026-20362: SSRF Advisory — FlawOpen | | | 2026-10 |
| Patch bulletins | Chrome 155 Security Update: Four Critical CVEs — FlawOpen | | | 2026-10 |
| Patch bulletins | CVE-2026-76471 Cisco NX-API RCE — Nexus Exposure and Fix — FlawOpen | | | 2026-10 |
| Patch bulletins | Amazon SageMaker Unified Studio CVE-2026-104019 — FlawOpen | | | 2026-10 |
| Patch bulletins | F5 BIG-IP APM CVE-2026-94127: Patch Guide — FlawOpen | | | 2026-09 |
| Patch bulletins | Citrix NetScaler CVE-2026-88771 and 88772: Patch Guide — FlawOpen | | | 2026-09 |
| Incidents | CVE-2026-85706: GitLab Upload File Disclosure | CVE-2026-85706 | Critical 10.0 | 2026-09 |
| Incidents | CVE-2026-81963: Windows Update Symlink Flaw | CVE-2026-81963 | High 7.8 | 2026-09 |
| Incidents | BlueMoon: three flaws crossed Chrome and Windows isolation boundaries | CVE-2026-85046 | High | 2026-09 |
| Incidents | RubyGems API key leak: GHSA-9j48-x3c3-mrp2 | CWE-200 / CWE-524 | High 7.3 | 2026-07 |
| Incidents | OpenAI and Hugging Face: AI Sandbox Escape | CWE-693 / CWE-918 | Critical | 2026-07 |
| Incidents | DSEWiki: OpenAI-Claiming Agents and GET Writes | CWE-668 / CWE-650 | High | 2026-07 |
| Incidents | Claude cybersecurity evaluations reached real networks | CWE-693 / CWE-1188 | Critical | 2026-07 |
| Incidents | OpenAI Agent Access to Australia's Medicare | CWE-862 | High | 2026-06 |
| Incidents | OpenAI Artifactory Cross-Sample Messaging | CWE-514 | Medium | 2026-05 |
| Incidents | Gemini’s 2026 Evaluation Reached Real Systems | CWE-693 | High | 2026-05 |
| Incidents | CVE-2025-14174: Chrome ANGLE flaw and Apple CVE overlap | CVE-2025-14174 | High 8.8 | 2025-12 |
| Incidents | Shai-Hulud: the September 2025 npm worm and install-time trust | CWE-506 / CWE-829 | Critical | 2025-09 |
| Incidents | CVE-2025-1094: PostgreSQL psql SQL injection | CVE-2025-1094 | High 8.1 | 2024-12 |
| Incidents | Polyfill.io Supply-Chain Attack (2024) | CWE-829 | High | 2024-06 |
| Patch bulletins | Google Chrome Security Advisory: CVE-2024-4947 V8 Type Confusion | | | 2024-05 |
| Patch bulletins | Apple iOS 16.7.8 & 17.5: CVE-2024-27834 | | | 2024-05 |
| Incidents | XZ Utils supply-chain compromise (CVE-2024-3094) | CVE-2024-3094 | Critical 10.0 | 2024-03 |
| Incidents | Citrix Bleed: session-token leak and MFA bypass | CVE-2023-4966 | Critical 9.4 | 2023-10 |
| Incidents | MOVEit Transfer: SQL injection and mass data theft | CVE-2023-34362 | Critical 9.8 | 2023-05 |
| Incidents | Log4Shell (CVE-2021-44228): Cause and Fix | CVE-2021-44228 | Critical 10.0 | 2021-12 |
| Incidents | CVE-2021-25900: Rust smallvec heap overflow | CVE-2021-25900 | Critical 9.8 | 2021-01 |
| Incidents | SUNBURST: when the build pipeline was the vulnerability | CWE-506 / CWE-829 | Critical | 2019-09 |
| Incidents | Capital One SSRF: AWS IMDSv1 Credential Theft | CWE-918 | Critical | 2019-07 |
| Incidents | Equifax breach: CVE-2017-5638 and nearly 150 million people | CVE-2017-5638 | Critical 9.8 | 2017-07 |
| Vulnerabilities | Swift SSRF: secure Vapor URL fetches | CWE-918 | High | |
| Vulnerabilities | Server-Side Request Forgery (SSRF) in Rust (reqwest, Axum) | CWE-918 | High | |
| Vulnerabilities | Server-Side Request Forgery (SSRF) in PHP (cURL, filter_var) | CWE-918 | High | |
| Vulnerabilities | Server-Side Request Forgery (SSRF) in Java (OkHttp, Spring) | CWE-918 | High | |
| Vulnerabilities | Server-Side Request Forgery (SSRF) in C/C++ (libcurl) | CWE-918 | High | |
| Vulnerabilities | SQL Injection in Swift (SQLite3, GRDB) | CWE-89 | Critical | |
| Vulnerabilities | SQL Injection in Rust (rusqlite, sqlx, Diesel) | CWE-89 | Critical | |
| Vulnerabilities | SQL Injection in Ruby (ActiveRecord, pg, Sequel) | CWE-89 | Critical | |
| Vulnerabilities | SQL Injection in Python (psycopg2, SQLAlchemy, Django) | CWE-89 | Critical | |
| Vulnerabilities | SQL Injection in PHP (PDO, mysqli, Laravel) | CWE-89 | Critical | |
| Vulnerabilities | SQL Injection in Kotlin (Android SQLite, Room, Exposed) | CWE-89 | Critical | |
| Vulnerabilities | SQL Injection in JavaScript (mysql2, pg, Prisma, Knex) | CWE-89 | Critical | |
| Vulnerabilities | SQL Injection in Go (database/sql, pgx, GORM) | CWE-89 | Critical | |
| Vulnerabilities | SQL Injection in C/C++ (SQLite, libpq) | CWE-89 | Critical | |
| Vulnerabilities | SQL Injection in C# (ADO.NET, Dapper, EF Core) | CWE-89 | Critical | |
| Vulnerabilities | Ruby SSRF: secure Net::HTTP and Rails | CWE-918 | High | |
| Vulnerabilities | Python SSRF: secure requests and urllib3 | CWE-918 | High | |
| Vulnerabilities | Python LLM prompt injection: block unsafe tool calls | CWE-1427 | High | |
| Vulnerabilities | Python BOLA/IDOR: Fix FastAPI Cross-Tenant Access | CWE-639 | Critical | |
| Vulnerabilities | Prompt Injection in Node.js LLM Apps (AI SDK 5, zod) | CWE-1427 | High | |
| Vulnerabilities | Path Traversal in Swift (Foundation URL, Vapor) | CWE-22 | High | |
| Vulnerabilities | Path Traversal in Rust (std::path, tar) | CWE-22 | High | |
| Vulnerabilities | Path Traversal in Ruby (Rails, File.realpath) | CWE-22 | High | |
| Vulnerabilities | Path Traversal in Python (pathlib, tarfile) | CWE-22 | High | |
| Vulnerabilities | Path Traversal in PHP (realpath, include) | CWE-22 | High | |
| Vulnerabilities | Path Traversal in Kotlin (java.io.File, Android) | CWE-22 | High | |
| Vulnerabilities | Path Traversal in JavaScript (Node.js path, Express) | CWE-22 / CWE-59 / CWE-400 / CWE-789 | High | |
| Vulnerabilities | Path Traversal in Java (java.nio.file, Spring) | CWE-22 | High | |
| Vulnerabilities | Path Traversal in Go (os.Root, path/filepath) | CWE-22 | High | |
| Vulnerabilities | Path Traversal in C/C++ (openat2, libarchive) | CWE-22 | High | |
| Vulnerabilities | Path Traversal in C# (System.IO, ASP.NET Core) | CWE-22 | High | |
| Vulnerabilities | PHP XSS: Escape Output in Blade, Twig and PHP | CWE-79 | High | |
| Vulnerabilities | OS Command Injection in Swift (Foundation Process) | CWE-78 | Critical | |
| Vulnerabilities | OS Command Injection in Rust (std::process::Command) | CWE-78 | Critical | |
| Vulnerabilities | OS Command Injection in Ruby (Open3) | CWE-78 | Critical | |
| Vulnerabilities | OS Command Injection in Python (subprocess, os.system) | CWE-78 | Critical | |
| Vulnerabilities | OS Command Injection in PHP (proc_open) | CWE-78 | Critical | |
| Vulnerabilities | OS Command Injection in Kotlin (ProcessBuilder) | CWE-78 | Critical | |
| Vulnerabilities | OS Command Injection in JavaScript (child_process, Node.js) | CWE-78 | Critical | |
| Vulnerabilities | OS Command Injection in Java (ProcessBuilder) | CWE-78 | Critical | |
| Vulnerabilities | OS Command Injection in Go (os/exec) | CWE-78 | Critical | |
| Vulnerabilities | OS Command Injection in C/C++ (posix_spawn) | CWE-78 | Critical | |
| Vulnerabilities | OS Command Injection in C# (System.Diagnostics.Process) | CWE-78 | Critical | |
| Vulnerabilities | Node.js SSRF: secure http.request and Axios | CWE-918 | High | |
| Vulnerabilities | Node.js BOLA/IDOR: Secure Express and Prisma Records | CWE-639 / CWE-915 | Medium | |
| Vulnerabilities | Marimo GHSL-2026-226: Test-Release Workflow TOCTOU | CWE-367 / CWE-829 | High | |
| Vulnerabilities | Kotlin SSRF: secure Ktor and OkHttp | CWE-918 | High | |
| Vulnerabilities | JavaScript XSS: Secure DOM, React and Express | CWE-79 | High | |
| Vulnerabilities | Java XSS: Secure Spring MVC and Thymeleaf Output | CWE-79 | High | |
| Vulnerabilities | Java SQL Injection: JDBC, JPA, MyBatis | CWE-89 | Critical | |
| Vulnerabilities | Java BOLA/IDOR: Secure Spring Boot Tenant Records | CWE-639 | Critical | |
| Vulnerabilities | Go XSS: Use html/template and Sanitize Rich Text | CWE-79 | High | |
| Vulnerabilities | Go SSRF: secure net/http with net.Dialer.Control | CWE-918 | High | |
| Vulnerabilities | Cross-Site Scripting (XSS) in Swift (WKWebView, Leaf) | CWE-79 | High | |
| Vulnerabilities | Cross-Site Scripting (XSS) in Rust (axum, Askama, ammonia) | CWE-79 | High | |
| Vulnerabilities | Cross-Site Scripting (XSS) in Ruby (Rails, ERB, Rails::HTML) | CWE-79 | High | |
| Vulnerabilities | Cross-Site Scripting (XSS) in Python (Flask, Jinja2, Django) | CWE-79 | High | |
| Vulnerabilities | Cross-Site Scripting (XSS) in Kotlin (Ktor, kotlinx.html, Android WebView) | CWE-79 | High | |
| Vulnerabilities | Cross-Site Scripting (XSS) in C/C++ (CGI, Crow) | CWE-79 | High | |
| Vulnerabilities | C# XSS: Secure Razor, Blazor and ASP.NET Core | CWE-79 | High | |
| Vulnerabilities | C# SSRF: secure every HttpClient connection | CWE-918 | High | |
| Vulnerabilities | BOLA / IDOR in Go (Gin, GORM) | CWE-639 | Critical | |
| Core topics | XML External Entity (XXE) Injection (CWE-611): How It Works and How to Prevent It | CWE-611 | | |
| Core topics | Timing Attacks: Constant-Time Secret Comparison | CWE-208 | | |
| Core topics | Supabase and Firebase Access Rules (CWE-862): How Missing Row Level Security Exposes Data and How to Fix It | CWE-862 | | |
| Core topics | Session Fixation: Rotate IDs at Login (CWE-384) | CWE-384 | | |
| Core topics | Server-Side Template Injection (SSTI): Causes and Fixes | CWE-1336 | | |
| Core topics | Server-Side Request Forgery (SSRF, CWE-918): How It Works and How to Prevent It in Every Language | CWE-918 | | |
| Core topics | SQL Injection (CWE-89): How It Works and How to Prevent It in Every Language | CWE-89 | | |
| Core topics | Race Conditions and TOCTOU (CWE-362, CWE-367): How Parallel Requests Break Checks and How to Fix Them | CWE-362 / CWE-367 | | |
| Core topics | Python tarfile extractall Path Traversal (CVE-2007-4559): How It Happens and How to Fix It | | | |
| Core topics | Prompt Injection (CWE-1427): How It Works and How to Limit the Damage in LLM Apps | CWE-1427 | | |
| Core topics | Path Traversal (CWE-22): How It Works and How to Prevent It in Every Language | CWE-22 | | |
| Core topics | OS Command Injection (CWE-78): How It Works and How to Prevent It in Every Language | CWE-78 | | |
| Core topics | OAuth 2.0 Redirect URI Attacks: Code Theft, CSRF & PKCE | CWE-601 | | |
| Core topics | Node.js Buffer.allocUnsafe() Memory Disclosure | CWE-908 | | |
| Core topics | JavaScript Prototype Pollution: Causes & Fixes | CWE-1321 | | |
| Core topics | JWT Algorithm Confusion: Key and Policy Validation | CWE-347 | | |
| Core topics | Insecure Password Hashing (CWE-916): Why SHA-256 Is Not Enough and How to Store Passwords | CWE-916 | | |
| Core topics | Insecure Deserialization: Risks and Remediation | CWE-502 | | |
| Core topics | GraphQL Query DoS: Depth, Cost & Batch Limits | CWE-400 | | |
| Core topics | Go Slice Data Races: Safe Concurrent append in Go | | | |
| Core topics | Cross-Site Scripting (XSS, CWE-79): How It Works and How to Prevent It in Every Language | CWE-79 | | |
| Core topics | Cross-Site Request Forgery (CSRF, CWE-352): How It Works and How to Prevent It | CWE-352 | | |
| Core topics | CORS Misconfiguration (CWE-942): How Origin Reflection Leaks Data and How to Fix It | CWE-942 | | |
| Core topics | Broken Object Level Authorization (BOLA / IDOR, CWE-639): How It Works and How to Prevent It | CWE-639 | | |
| Reference | exec() vs execFile() in Node.js: What's the Difference? | | | |
| Reference | Why String Formatting Risks Numeric ID Queries | | | |
| Reference | What is server-side template injection? | | | |
| Reference | What is ReDoS (catastrophic backtracking)? | | | |
| Reference | What Is a Zip Slip Vulnerability? | | | |
| Reference | What Is a Parameterized Query? | | | |
| Reference | Vue v-html XSS Risk and Safe Rendering | | | |
| Reference | Serverless State Bleed: Keep User Data Request-Scoped | | | |
| Reference | SSRF and Cloud Metadata: Credential Risks and Defenses | | | |
| Reference | Reflected vs. Stored vs. DOM-Based XSS | | | |
| Reference | Python pickle.load() Security: Untrusted Data Risks | | | |
| Reference | Python os.path.join() Path Traversal Fix | | | |
| Reference | Python XML XXE Security: ElementTree, Expat, and lxml | | | |
| Reference | PHP unserialize() and Untrusted Input | | | |
| Reference | PHP include() and User-Controlled Paths | | | |
| Reference | PHP == and Magic Hash Comparisons | | | |
| Reference | Object.assign() and Prototype Pollution: What Is Safe? | | | |
| Reference | Node.js path.join() Does Not Prevent Traversal | | | |
| Reference | Node.js fetch() SSRF: Safe URL Fetching | | | |
| Reference | Node.js child_process.exec() Command Injection Risk | | | |
| Reference | Node.js ReDoS: Regex Risks and CVE-2026-83606 | | | |
| Reference | Next.js Server Actions CSRF: Origin and Proxy Safety | | | |
| Reference | Newtonsoft.Json TypeNameHandling: Safe Configuration? | | | |
| Reference | MySQLi vs PDO: Secure Prepared Statements | | | |
| Reference | MyBatis ${} vs #{}: Prevent SQL Injection | | | |
| Reference | MongoDB NoSQL Injection: Safe Query Filters | | | |
| Reference | Mass Assignment: Risks and Safe Field Allowlists | | | |
| Reference | MCP Security: Tool Boundaries & Data Exposure | FlawOpen | | | |
| Reference | Java XXE: Is DocumentBuilderFactory Secure by Default? | | | |
| Reference | Java Runtime.exec() and Command Injection: What Changes? | | | |
| Reference | Java ObjectInputStream Security: Safer Deserialization | | | |
| Reference | JWT in localStorage vs. HttpOnly Cookies: Which Is Safer? | | | |
| Reference | Is strncpy() safer than strcpy()? | | | |
| Reference | Is lodash.merge() safe from prototype pollution? | | | |
| Reference | Is WKWebView loadHTMLString Safe for Untrusted Content? | | | |
| Reference | Is Using an ORM Enough to Prevent SQL Injection? | | | |
| Reference | Is TypeORM QueryBuilder Safe from SQL Injection? | | | |
| Reference | Is Svelte Safe from XSS by Default? | | | |
| Reference | Is Sequelize query() Safe from SQL Injection? | | | |
| Reference | Is SVG Upload an XSS Risk? | | | |
| Reference | Is SQLAlchemy text() Safe from SQL Injection? | | | |
| Reference | Is Rust's unsafe block still memory safe? | | | |
| Reference | Is Ruby YAML.load Safe? Psych Versions & Safe Loading | | | |
| Reference | Is React's dangerouslySetInnerHTML Safe? | | | |
| Reference | Is Rails where() String Interpolation Safe? | | | |
| Reference | Is Prisma $queryRaw Safe from SQL Injection? | | | |
| Reference | Is NHibernate Safe from SQL Injection? | | | |
| Reference | Is Markdown Rendering Safe from XSS? | | | |
| Reference | Is Knex.js Safe from SQL Injection? | | | |
| Reference | Is Jinja2's render_template_string() safe? | | | |
| Reference | Is JSON.parse() safer than eval()? | | | |
| Reference | Is Escaping Quotes Enough to Prevent SQL Injection? | | | |
| Reference | Is DOMPurify Enough for Safe innerHTML? | | | |
| Reference | Is .NET XmlReader safe from XXE? | | | |
| Reference | GitHub Actions Script Injection: Safe Workflow Inputs | | | |
| Reference | GORM Raw SQL: Prevent SQL Injection in Go | | | |
| Reference | FreeMarker & Velocity SSTI: User Template Safety | | | |
| Reference | FastAPI SQL Injection: What Pydantic Does and Doesn’t Stop | | | |
| Reference | EF Core FromSqlRaw: Safe Parameterized SQL | | | |
| Reference | Does sqlx's Compile-Time Checking Prevent SQL Injection? | | | |
| Reference | Does SameSite=Strict Replace CSRF Tokens? | | | |
| Reference | Does JSON.parse() cause prototype pollution? | | | |
| Reference | Doctrine ORM SQL Injection: Safe Queries and Pitfalls | | | |
| Reference | Docker Socket Exposure: Risks and Defenses | | | |
| Reference | Django ORM SQL Injection: Safe Patterns and Pitfalls | | | |
| Reference | Dependency Confusion: Risks and Defenses | | | |
| Reference | Cosign GHSA-fx35-mq7g-6g98: Bundle Verification Bypass | | | |
| Reference | Content-Type Sniffing XSS: MIME Types and nosniff | | | |
| Reference | Claude Code MemoryTrap: AI Memory Poisoning | | | |
| Reference | CWE vs. CVE: What's the Difference? | | | |
| Reference | CSRF Tokens for GET Requests: When Are They Needed? | | | |
| Reference | CSP vs. Output Escaping: Do You Need Both? | | | |
| Reference | Are Stored Procedures Immune to SQL Injection? | | | |
| Reference | Angular XSS Protection: Safe Defaults and Bypass APIs | | | |
| Reference | Android addJavascriptInterface Security Risks | | | |
| Reference | AI PR Bots: Prevent Prompt Injection SSRF | | | |
| Reference | AI Agent Tool Security: Least Privilege and Isolation | | | |
| Reference | AI Agent Tool Scoping: Least Privilege & Auth | | | |
| Reference | AI Agent Sandboxing: Containers, gVisor & MicroVMs | | | |
| Reference | .NET BinaryFormatter Security: Risks and Migration | | | |
| Teardowns | Linux CVE-2026-53266: ebtables ARP Writeability | CVE-2026-53266 | High 8.8 | |
| Teardowns | Linux CVE-2025-39682: kTLS Zero-Length Record Bug | CVE-2025-39682 | Critical 9.8 | |
| Teardowns | Langflow CVE-2026-5027: Multipart File-Write Path Traversal | CVE-2026-5027 | High 8.8 | |
| Teardowns | LangGraph CVE-2026-71433: Namespace Leak | CVE-2026-71433 | Medium 5.3 | |
| Teardowns | LangGraph CVE-2026-104873: Auth Bypass | CVE-2026-104873 | High 7.6 | |
| Teardowns | Kubernetes Windows log permissions: CVE-2024-5321 | CVE-2024-5321 | Medium 6.1 | |
| Teardowns | Chrome Gemini CVE-2026-0628 Extension Flaw | CVE-2026-0628 | High 8.8 | |
| Teardowns | CVE-2026-97662: AWS Security Agent MCP Git Argument Injection | CVE-2026-97662 | Medium 6.9 | |
| Teardowns | CVE-2026-90970: GitLab AI Gateway prompt sandbox escape | CVE-2026-90970 | Critical 9.9 | |
| Teardowns | CVE-2026-88779: Citrix NetScaler SAML Memory Overflow | CVE-2026-88779 | High 8.7 | |
| Teardowns | CVE-2026-87913: AWS MCP S3 Data Exposure | CVE-2026-87913 | Medium 5.1 | |
| Teardowns | CVE-2026-87902: WordPress Page-Template Path Traversal | CVE-2026-87902 | Critical 9.2 | |
| Teardowns | CVE-2026-84973: JupyterLab Snapshot Workflow TOCTOU | CVE-2026-84973 | High | |
| Teardowns | CVE-2026-77244: mcp-atlassian Unauthenticated HTTP Tool Access | CVE-2026-77244 | Critical 10.0 | |
| Teardowns | CVE-2026-76504: Cisco SD-WAN Manager Authentication Bypass | CVE-2026-76504 | Critical 9.8 | |
| Teardowns | CVE-2026-76485: Cisco Nexus NGOAM Remote Code Execution | CVE-2026-76485 | Critical 9.8 | |
| Teardowns | CVE-2026-73570: How Zimbra's SNMP notification path became command injection | CVE-2026-73570 | High 8.9 | |
| Teardowns | CVE-2026-71416: Headroom WebSocket Origin Hijack | CVE-2026-71416 | High 8.8 | |
| Teardowns | CVE-2026-66384: JFrog Artifactory Docker Cache Path Traversal | CVE-2026-66384 | Medium | |
| Teardowns | CVE-2026-65995: OsmAnd AIDL Authorization Bypass | CVE-2026-65995 | High | |
| Teardowns | CVE-2026-63277: LibreOffice Calc spreadsheet RCE | CVE-2026-63277 | High 8.5 | |
| Teardowns | CVE-2026-61500: Rejetto HFS Predictable Session Signing Key | CVE-2026-61500 | Critical 9.3 | |
| Teardowns | CVE-2026-55269: Android Bluetooth SnoopLogger Heap Write | CVE-2026-55269 | High 7.8 | |
| Teardowns | CVE-2026-49878: Android Wi-Fi wpa_supplicant Heap Out-of-Bounds Write | CVE-2026-49878 | High 7.2 | |
| Teardowns | CVE-2026-31431: Linux Copy Fail Kernel Flaw | CVE-2026-31431 | High 7.8 | |
| Teardowns | CVE-2026-27826: MCP Atlassian Header SSRF | CVE-2026-27826 | High 8.2 | |
| Teardowns | CVE-2026-25592: Semantic Kernel Agent File Write | CVE-2026-25592 | Critical 9.9 | |
| Teardowns | CVE-2026-21589: Atlassian Data Center File Access | CVE-2026-21589 | Critical 9.3 | |
| Teardowns | CVE-2026-1731: BeyondTrust Command Injection | CVE-2026-1731 | Critical 9.9 | |
| Teardowns | CVE-2026-14540: Google MCP Toolbox SSRF | CVE-2026-14540 | High 8.0 | |
| Teardowns | CVE-2026-107722: fast-jwt RSA-to-HS256 Algorithm Confusion | CVE-2026-107722 | Critical 9.8 | |
| Teardowns | CVE-2026-106119: LangChain MongoDB Session Query Injection | CVE-2026-106119 | Medium 6.0 | |
| Teardowns | CVE-2026-106032: AgentCore Importer OpenAPI SSRF | CVE-2026-106032 | Medium 5.7 | |
| Teardowns | CVE-2026-105812: AgentCore import code injection | CVE-2026-105812 | High 8.8 | |
| Teardowns | CVE-2026-105752: vLLM cache-salt omission | CVE-2026-105752 | Low 3.1 | |
| Teardowns | CVE-2026-105751: Docling ODF File Disclosure | CVE-2026-105751 | Medium 6.9 | |
| Teardowns | CVE-2026-105750: Docling HTML Render Local File Disclosure | CVE-2026-105750 | Medium 5.9 | |
| Teardowns | CVE-2026-105699: Langflow MCP File Disclosure | CVE-2026-105699 | High 7.1 | |
| Teardowns | CVE-2026-105697: Langflow MCP Command Injection | CVE-2026-105697 | Critical 9.9 | |
| Teardowns | CVE-2026-104286: FortiMail IBE Path Traversal | CVE-2026-104286 | Critical 9.8 | |
| Teardowns | CVE-2026-102437: Reasonix diff-view Git injection | CVE-2026-102437 | High 7.8 | |
| Teardowns | CVE-2026-102422: shell-quote comment-token injection | CVE-2026-102422 | High 8.1 | |
| Teardowns | CVE-2026-102255: SonicWall SMA1000 WorkPlace SSRF | CVE-2026-102255 | Critical 10.0 | |
| Teardowns | CVE-2026-10032: A2UI Agent-Generated Button XSS | CVE-2026-10032 | Critical 9.3 | |
| Teardowns | CVE-2025-55182: React2Shell RSC RCE | CVE-2025-55182 | Critical 10.0 | |
| Teardowns | CVE-2024-7646: Ingress-NGINX Validation Bypass | CVE-2024-7646 | High 8.8 | |
| Teardowns | CVE-2024-4947: Chrome V8 Maglev Type Confusion | CVE-2024-4947 | Critical 9.6 | |
| Teardowns | CVE-2024-33066: Qualcomm WLAN log redirection flaw | CVE-2024-33066 | Critical 9.8 | |
| Teardowns | CVE-2024-32896: Android Factory Reset Could Be Interrupted Before Keys Were Destroyed | CVE-2024-32896 | High 7.8 | |
| Teardowns | CVE-2024-32002: Git Submodule Symlink RCE | CVE-2024-32002 | Critical 9.0 | |
| Teardowns | CVE-2024-3177: Kubernetes ServiceAccount `envFrom` Bypass | CVE-2024-3177 | Low 2.7 | |
| Teardowns | CVE-2024-3094: XZ Utils backdoor | CVE-2024-3094 | Critical 10.0 | |
| Teardowns | CVE-2024-30051: Windows DWM Heap Overflow | CVE-2024-30051 | High 7.8 | |
| Teardowns | CVE-2024-27980: Node.js Windows Command Injection | CVE-2024-27980 | High 8.1 | |
| Teardowns | CVE-2024-26642: Linux nf_tables Anonymous Set with Timeout Flag | CVE-2024-26642 | High 7.8 | |
| Teardowns | CVE-2024-26585: Linux TLS Close Race | CVE-2024-26585 | Medium 4.7 | |
| Teardowns | CVE-2024-23712: Android AppOps Attribution Tag Resource Exhaustion | CVE-2024-23712 | Medium 5.5 | |
| Teardowns | CVE-2024-23222: WebKit DFG Property Race | CVE-2024-23222 | High 8.8 | |
| Teardowns | CVE-2024-21626: How runc fixed the Leaky Vessels escape | CVE-2024-21626 | High 8.6 | |
| Teardowns | CVE-2024-1086: Linux nf_tables Use-After-Free | CVE-2024-1086 | High 7.8 | |
| Teardowns | CVE-2024-0582: Linux io_uring Mapped Buffer Ring Use-After-Free | CVE-2024-0582 | High 7.8 | |
| Teardowns | CVE-2023-6246: glibc syslog Heap Overflow | CVE-2023-6246 | High 7.8 | |
| Teardowns | CVE-2023-4211: Mali use-after-free | CVE-2023-4211 | Medium 5.5 | |
| Teardowns | CVE-2023-32558: Node.js Permission Bypass | CVE-2023-32558 | High 7.5 | |
| Teardowns | CVE-2023-2640: Ubuntu OverlayFS LPE | CVE-2023-2640 | High 7.8 | |
| Teardowns | CVE-2022-31150: Undici CRLF Injection | CVE-2022-31150 | Medium 5.3 | |
| Teardowns | CVE-2022-22965: Spring4Shell RCE in Spring | CVE-2022-22965 | Critical 9.8 | |
| Teardowns | CVE-2021-3156: Sudo Baron Samedit Heap Overflow | CVE-2021-3156 | High 7.8 | |
| Teardowns | CVE-2021-22960: llhttp Request Smuggling | CVE-2021-22960 | Medium 6.5 | |
| Teardowns | CVE-2020-0022: Android Bluetooth overflow | CVE-2020-0022 | High 8.8 | |
| Teardowns | CVE-2015-3824: Stagefright tx3g integer overflow | CVE-2015-3824 | Critical 10.0 | |
| Teardowns | CVE-2015-3306: ProFTPD mod_copy unauthenticated file copying | CVE-2015-3306 | Critical 10.0 | |
| Teardowns | CVE-2014-0160: OpenSSL Heartbleed memory leak | CVE-2014-0160 | High 7.5 | |
| Incidents | WordPress Stored XSS Campaign: Two Plugins, One Persistence Chain | CVE-2026-93836 | High 7.2 | |
| Incidents | Tensorlake npm 0.5.144: malicious install hook | CWE-506 | Critical | |
| Incidents | PixelLeak: AI Agents Put Screenshots on GitHub | CWE-200 / CWE-668 | High | |
| Incidents | PaperCut Patch Bypass: Scan2Fax to Pre-Auth RCE | CVE-2026-82077 | High 7.3 | |
| Incidents | OpenAI Forum-to-SSO Chain: CVE-2026-32882 | CVE-2026-32882 | High 7.1 | |
| Incidents | Deadbugz: MCP Tool Metadata Changed After Approval | CWE-829 (editorial mapping; no CVE assigned) | Medium | |
| Incidents | DIVD Zammad Breach: CVE-2026-102489 and 102490 | CVE-2026-102489 | Critical 9.4 | |
| Incidents | Cisco FMC Attacks: Auth Bypass, Sandworm, and Qilin | CVE-2026-20079 | Critical 10.0 | |
| Incidents | Bricksforge CVE-2026-85097: Pro Forms Upload Flaw | CVE-2026-85097 | Critical 9.8 | |
| Incidents | AutoJack: AutoGen Studio RCE Research Chain | CWE-1385 / CWE-306 / CWE-78 | High | |
| Incidents | AhsayCBS: Authentication Bypass Chained to Command Injection | CVE-2026-105133 | Critical 10.0 | |
| Incidents | AI Retail Skimming Campaign: Gambit’s 2026 Report | CWE-89 (one documented chain only) | Critical | |
| Simulators | Interactive OpenSSL Heartbleed Buffer Overread Visualizer | | | |
| Simulators | Interactive Heap Use-After-Free (UAF) Visualizer | | | |
| Simulators | Interactive HTTP Request Smuggling Visualizer (CL.TE & TE.CL) | | | |
| AI security | Wazuh MCP SSRF in blueteam_check_webshell (GHSA-pw2j-pj4h-f5vg) | CWE-918 | High | |
| AI security | Semantic Kernel CVE-2026-26030: Filter Code Injection | CVE-2026-26030 | Critical 9.9 | |
| AI security | Plugin4Shell: AI-Agent Plugin SHA Bypass | CWE-345 | High | |
| AI security | Manus AI Agent Email Prompt Injection: Code Ran Before the Warning | CWE-94 | High | |
| AI security | MCP TypeScript SDK Bearer Tokens Lacked Audience Validation | CWE-863 | Medium 6.8 | |
| AI security | MCP Tool Parameter Validation: A Defensive Command-Injection Guide | CWE-78 | Info | |
| AI security | MCP Python SDK OAuth Issuer-Validation Flaw | CWE-345 / CWE-522 | High 7.5 | |
| AI security | LiteLLM Salt-Key Privilege Escalation: GHSA-7hp6-4w63-5g45 | CWE-345 | Critical 9.9 | |
| AI security | LiteLLM MCP Command Injection: CVE-2026-42271 | CVE-2026-42271 | High 8.7 | |
| AI security | Langroid CVE-2026-55615: Prompt-to-Cypher Injection | CVE-2026-55615 | Critical 9.2 | |
| AI security | LangGraph.js GHSA-wp87-994x-j95x: JSON Input as a Command | CWE-20 | High 7.6 | |
| AI security | LangGraph JS Auth: Cross-User Store Access | CWE-639 / CWE-863 | High 8.6 | |
| AI security | Hermes Agent native sign-in redirect parsing flaw | CWE-601 | High 8.6 | |
| AI security | GhostJacking: Poisoned Logs and AI Agents | CWE-1427 | Medium | |
| AI security | EchoLeak: Copilot Injection CVE-2025-32711 | CVE-2025-32711 | Critical 9.3 | |
| AI security | CoSnitch: Microsoft Copilot CVE-2026-24301 | CVE-2026-24301 | High 8.8 | |
| AI security | CVE-2026-97228: GraphQL Injection in Rapid7 MCP | CVE-2026-97228 | Low 2.7 | |
| AI security | CVE-2026-91140: Command Injection in Progress ARCGenAI-Generator | CVE-2026-91140 | Critical 9.6 | |
| AI security | CVE-2026-64849: MLflow Webhook SSRF | CVE-2026-64849 | High 8.6 | |
| AI security | CVE-2026-107322: AWS Agent Plugin psql Command Injection | CVE-2026-107322 | High 7.8 | |
| AI security | CVE-2026-105192: LMCache unauthenticated pickle deserialization in multiprocess mode | CVE-2026-105192 | Critical 9.8 | |
| AI security | CVE-2026-103956: AWS Loom Authentication Bypass | CVE-2026-103956 | Critical 10.0 | |
| AI security | CVE-2023-32786: LangChain SSRF | CVE-2023-32786 | High 7.5 | |
| AI security | AgentCorruption: AgentCore Metadata and IAM Risk | CWE-918 | Medium | |