🛡️ 🟠 CVE-2025-52365
CVSS 7.8 ████░ HIGH
A command injection vulnerability in the szc script of the ccurtsinger/stabilizer repository allows remote attackers to execute arbitrary system commands via unsanitized user input passed to os.system(). The vulnerability arises from improper input handling where command-line arguments are directly…
#CVE #Vulnerability #CVSS7
🔗 Read More

🛡️ 🟠 CVE-2026-3342
CVSS 7.2 ████░ HIGH
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and inc…
#CVE #Vulnerability #CVSS7
🔗 Read More

🛡️ ⚠️ CVE-2026-3351
Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.
#CVE #Vulnerability #CVSS0
🔗 Read More

🛡️ ⚠️ CVE-2025-57622
An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(request.get_data()) component
#CVE #Vulnerability #CVSS0
🔗 Read More

🛡️ ⚠️ CVE-2025-70821
renren-secuity before v5.5.0 is vulnerable to SQL Injection in the BaseServiceImpl.java component
#CVE #Vulnerability #CVSS0
🔗 Read More

📰 ⚠️ Dust Specter Targets Iraqi Officials with New SPLITDROP and GHOSTFORM Malware
A suspected Iran-nexus threat actor has been attributed to a campaign targeting government officials in Iraq by impersonating the country's Ministry of Foreign Affairs to deliver a set of never-before-seen malware. Zscaler ThreatLabz, which observed the activity in January 2026, is tracking the clu…
#TheHackerNews #CyberNews #Malware
🔗 Read More

📰 ⚠️ Where Multi-Factor Authentication Stops and Credential Abuse Starts
Organizations typically roll out multi-factor authentication (MFA) and assume stolen passwords are no longer enough to access systems. In Windows environments, that assumption is often wrong. Attackers still compromise networks every day using valid credentials. The issue is not MFA itself, but cov…
#TheHackerNews #CyberNews
🔗 Read More

📰 ⚠️ APT28-Linked Campaign Deploys BadPaw Loader and MeowMeow Backdoor in Ukraine
Cybersecurity researchers have disclosed details of a new Russian cyber campaign that has targeted Ukrainian entities with two previously undocumented malware families named BadPaw and MeowMeow. "The attack chain initiates with a phishing email containing a link to a ZIP archive. Once extracted, an…
#TheHackerNews #CyberNews #Malware #Phishing #APT
🔗 Read More

📰 ⚠️ Europol-Led Operation Takes Down Tycoon 2FA Phishing-as-a-Service Linked to 64,000 Attacks
Tycoon 2FA, one of the prominent phishing-as-a-service (PhaaS) toolkits that allowed cybercriminals to stage adversary-in-the-middle (AitM) credential harvesting attacks at scale, was dismantled by a coalition of law enforcement agencies and security companies. The subscription-based phishing kit, …
#TheHackerNews #CyberNews #Phishing
🔗 Read More

📰 ⚠️ FBI and Europol Seize LeakBase Forum Used to Trade Stolen Credentials
A joint law enforcement operation has dismantled LeakBase, one of the world's largest online forums for cybercriminals to buy and sell stolen data and cybercrime tools. The LeakBase forum, per the U.S. Department of Justice (DoJ), had over 142,000 members and more than 215,000 messages between memb…
#TheHackerNews #CyberNews
🔗 Read More

📡 ⚠️ Russian Ransomware Operator Pleads Guilty in US
Evgenii Ptitsyn was extradited to the United States from South Korea in November 2024. The post Russian Ransomware Operator Pleads Guilty in US appeared first on SecurityWeek.
#SecurityWeek #Ransomware
🔗 Read More

📡 ⚠️ Cisco Warns of More Catalyst SD-WAN Flaws Exploited in the Wild
The networking giant has added the recently patched CVE-2026-20128 and CVE-2026-20122 to the list of exploited vulnerabilities. The post Cisco Warns of More Catalyst SD-WAN Flaws Exploited in the Wild appeared first on SecurityWeek.
#SecurityWeek #Exploit
🔗 Read More

📡 ⚠️ Reclaim Security Raises $20 Million to Accelerate Remediation
The company will expand its engineering team, deepen integrations, and accelerate go-to-market initiatives. The post Reclaim Security Raises $20 Million to Accelerate Remediation appeared first on SecurityWeek.
#SecurityWeek
🔗 Read More

📡 ⚠️ LeakBase Cybercrime Forum Shut Down, Suspects Arrested
The stolen credential marketplace had been active since 2021 and in late 2025 it counted 142,000 users. The post LeakBase Cybercrime Forum Shut Down, Suspects Arrested appeared first on SecurityWeek.
#SecurityWeek
🔗 Read More

📡 ⚠️ Cisco Patches Critical Vulnerabilities in Enterprise Networking Products
Cisco has rolled out patches for 48 vulnerabilities in Firewall ASA, Secure FMC, and Secure FTD products. The post Cisco Patches Critical Vulnerabilities in Enterprise Networking Products appeared first on SecurityWeek.
#SecurityWeek #Patch
🔗 Read More

Beatrix #bugbounty #scanner
Provide a powerful CLI framework for bug bounty hunting with scanners, tool integrations, and AI-assisted analysis covering OWASP Top 10 risks.

https://github.com/adam-317/Beatrix

KARNA #bugbounty
overlooked Bug bounty tool

https://github.com/2122Adi/KARNA

CloutVision #osint #web
A cool OSINT tool that uses YOLOv8 and OpenCV on your webcam and also does a lil forensic media analysis

https://github.com/TheCloutySkies/CloutVision

vt-scanner-cli #scanner
🛡️ Scanner VirusTotal CLI en PowerShell - Analysez fichiers, dossiers et URLs via l'API v3. Compatible PS5.1+

https://github.com/valorisa/vt-scanner-cli

ShadowTap #wireless
A python based ethical hacking tool to perform pentesting of WiFi networks via simulating Man In The Middle (MITM) attacks.

https://github.com/Harikalatheeswaran/ShadowTap

Pentesters-ToolKit #pentest
Basic toolkit for pentesting.

https://github.com/leadrelic/Pentesters-ToolKit