🔴 TrueConf Client, Improper #Update Verification, #CVE-unknown (HIGH)

🔗 https://dailycve.com/trueconf-client-improper-update-verification-cve-unknown-high/

@Daily_CVE

🔴 Directus, Path Traversal & Broken Access Control, Critical (#CVE not specified in )

🔗 https://dailycve.com/directus-path-traversal-broken-access-control-critical-cve-not-specified-in/

@Daily_CVE

🟠 Directus, Information Disclosure, #CVE-2025-64748 (Medium)

🔗 https://dailycve.com/directus-information-disclosure-cve-2025-64748-medium/

@Daily_CVE

🔴 Rendezvous Server, Unbounded Memory Growth (Critical)

🔗 https://dailycve.com/rendezvous-server-unbounded-memory-growth-critical/

@Daily_CVE

🔴 LightRAG, Hardcoded JWT Default Secret, #CVE-2024-XXXXX (Critical)

🔗 https://dailycve.com/lightrag-hardcoded-jwt-default-secret-cve-2024-xxxxx-critical/

@Daily_CVE

🟠 AVideo, Missing Authentication Vulnerability, #CVE-2025-XXXXX (Medium)

🔗 https://dailycve.com/avideo-missing-authentication-vulnerability-cve-2025-xxxxx-medium/

@Daily_CVE

🟠 Directus, SSRF Protection Bypass, #CVE-2023-26431 (Moderate)

🔗 https://dailycve.com/directus-ssrf-protection-bypass-cve-2023-26431-moderate/

@Daily_CVE

🔴 OpenClaw, PKCE Verifier Exposure, #CVE-2026-34511 (high)

🔗 https://dailycve.com/openclaw-pkce-verifier-exposure-cve-2026-34511-high/

@Daily_CVE

🔵 (AVideo) Unauthenticated Payment Data Disclosure via BlockonomicsYPT checkphp, #CVE-2026-35448 (Low)

🔗 https://dailycve.com/avideo-unauthenticated-payment-data-disclosure-via-blockonomicsypt-checkphp-cve-2026-35448-low/

@Daily_CVE

🟠 coder/code-marketplace, Path Traversal, #CVE-2025-XXXXX (Medium)

🔗 https://dailycve.com/coder-code-marketplace-path-traversal-cve-2025-xxxxx-medium/

@Daily_CVE

🟠 Directus, GraphQL Field Duplication Denial of Service (DoS), #CVE-2024-39895 (Medium)

🔗 https://dailycve.com/directus-graphql-field-duplication-denial-of-service-dos-cve-2024-39895-medium/

@Daily_CVE

🟠 Directus, Cross-Origin-Opener-Policy Missing, #CVE-NotAssigned (Medium)

🔗 https://dailycve.com/directus-cross-origin-opener-policy-missing-cve-notassigned-medium/

@Daily_CVE

🔵 AVideo, Information Disclosure, No #CVE (Low)

🔗 https://dailycve.com/avideo-information-disclosure-no-cve-low/

@Daily_CVE

🔴 pyload, SSRF Bypass via Automatic Redirect Following, #CVE-2026-33992 (High)

🔗 https://dailycve.com/pyload-ssrf-bypass-via-automatic-redirect-following-cve-2026-33992-high/

@Daily_CVE

🔴 libp2p-rendezvous, Unbounded Memory Growth, #CVE-2026-35405 (Critical)

🔗 https://dailycve.com/libp2p-rendezvous-unbounded-memory-growth-cve-2026-35405-critical/

@Daily_CVE

🚨 BusyBOF: Unleashing 64 Post-Exploitation BOFs for Stripped #Linux Containers – Red Team’s New Swiss Army Knife + Video

🔗 https://undercodetesting.com/busybof-unleashing-64-post-exploitation-bofs-for-stripped-linux-containers-red-teams-new-swiss-army-knife-video/

@Undercode_Testing

🚨 Global Cybersecurity Escalation: Supply Chain Breaches, Zero-Day Exploits, and State-Backed Attacks Dominate Weekly Threat Landscape + Video

-Fact Checker: ✅: 2 ❌: 1 || 2/3

🔗 http://undercodenews.com/global-cybersecurity-escalation-supply-chain-breaches-zero-day-exploits-and-state-backed-attacks-dominate-weekly-threat-landscape-video/

@Undercode_News

The -bash API Leak That Shook My University—How One JS File Exposed It All

🔗 https://undercodetesting.com/the-bash-api-leak-that-shook-my-university-how-one-js-file-exposed-it-all/

@Undercode_Testing

🛒 How a Shopping Center 'Panicked Stranger' Almost Fooled a Pentester: Dissecting the Irish Scam with Social Engineering Tactics + Video

🔗 https://undercodetesting.com/how-a-shopping-center-panicked-stranger-almost-fooled-a-pentester-dissecting-the-irish-scam-with-social-engineering-tactics-video/

@Undercode_Testing

🛡️ Resurrection of Your #Digital Defenses: Why Easter Teaches the Ultimate Zero-Trust Resilience + Video

🔗 https://undercodetesting.com/resurrection-of-your-digital-defenses-why-easter-teaches-the-ultimate-zero-trust-resilience-video/

@Undercode_Testing