{"vulnerability": "cve-2026-2900", "sightings": [{"uuid": "7829a3bb-a783-49b0-aa06-ed06e998c4ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://gist.github.com/darlaterry/685edb8b82bf0a2d5ad5c5bf7a3c35ba", "content": "", "creation_timestamp": "2026-03-09T17:48:01.000000Z"}, {"uuid": "635989b1-cc12-4099-b7dc-049838e5599b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mgebbklafa2p", "content": "", "creation_timestamp": "2026-03-06T02:28:31.028124Z"}, {"uuid": "6e5f41a1-cba5-4660-bc78-91d509d4ac73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgbcrw7c2u2s", "content": "", "creation_timestamp": "2026-03-04T22:17:34.573597Z"}, {"uuid": "677abfe1-ea98-49b3-b172-b1944bc1b511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116176475255566057", "content": "", "creation_timestamp": "2026-03-05T12:05:30.671142Z"}, {"uuid": "3a20be8f-191b-4eb7-8559-739b7dfe8f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mgcr3i65lc2x", "content": "", "creation_timestamp": "2026-03-05T12:06:08.406743Z"}, {"uuid": "32e25996-bff1-459d-ba03-489c77ccd234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3mgcwhwd4cd2a", "content": "", "creation_timestamp": "2026-03-05T13:42:33.455683Z"}, {"uuid": "299df86f-0df3-4d0d-992d-47e681847b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgbkx4u4ue2v", "content": "", "creation_timestamp": "2026-03-05T00:43:38.948415Z"}, {"uuid": "2f10f685-242c-4274-9ff3-289454ca200f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://threatintel.cc/2026/03/05/070536.html", "content": "", "creation_timestamp": "2026-03-05T11:05:36.000000Z"}, {"uuid": "05524ed5-1a3b-4d12-a3e0-32f0e6c6bb2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-29000", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgcyl5rjtt2u", "content": "", "creation_timestamp": "2026-03-05T14:20:09.218599Z"}, {"uuid": "47512dd3-ef0e-4c3d-8b13-b8134d8bda93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-29000", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116174332145454244", "content": "", "creation_timestamp": "2026-03-05T03:00:29.735507Z"}, {"uuid": "e7e86ccd-7964-4449-a6ea-efee51094e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-29000", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mgbslugtn62n", "content": "", "creation_timestamp": "2026-03-05T03:00:31.253904Z"}, {"uuid": "acdeb76a-1034-425f-b5e0-e36200c57344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mgfuzgb5uc2y", "content": "", "creation_timestamp": "2026-03-06T17:54:32.292528Z"}, {"uuid": "75ca76ed-d586-45c0-856b-1e517bbe9748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-29000", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mgd66pzmof24", "content": "", "creation_timestamp": "2026-03-05T16:00:35.193984Z"}, {"uuid": "b2d171ba-8be5-4fbf-9c4c-2c9c63a33acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mgdiaofoie2q", "content": "", "creation_timestamp": "2026-03-05T19:00:37.781636Z"}, {"uuid": "9f3b08b1-df76-4cbf-b904-95c952d83710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://www.acn.gov.it/portale/w/pac4j-poc-pubblico-per-lo-sfruttamento-della-cve-2026-29000", "content": "", "creation_timestamp": "2026-03-16T11:37:42.000000Z"}, {"uuid": "cd9be0c6-2752-4d1e-a2e3-516404cc5e0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mgveglujn223", "content": "", "creation_timestamp": "2026-03-12T21:40:16.455364Z"}, {"uuid": "0460ccb7-01ba-4ceb-9d0a-4e1f54f9aa63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://bsky.app/profile/0xdf.bsky.social/post/3mibd6ypyn52i", "content": "", "creation_timestamp": "2026-03-30T09:15:16.803695Z"}, {"uuid": "e7c9187a-1682-4a78-beb3-39bba2a31819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/pac4j-jwt-security-restriction-bypass-vulnerability_20260309", "content": "", "creation_timestamp": "2026-03-09T01:00:00.000000Z"}, {"uuid": "cff3caa8-69eb-44d3-bef1-d947f03b25c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://www.cert.hr/upozorenje-kriticna-ranjivost-jwtauthenticatora-u-pac4j-modulu-cve-2026-29000/?utm_source=rss&utm_medium=rss&utm_campaign=upozorenje-kriticna-ranjivost-jwtauthenticatora-u-pac4j-modulu-cve-2026-29000", "content": "", "creation_timestamp": "2026-03-06T09:22:41.000000Z"}, {"uuid": "700cf558-5ebc-4508-9894-9c7e7d239dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3miv6kcnksc2s", "content": "", "creation_timestamp": "2026-04-07T06:45:22.876417Z"}, {"uuid": "468d3962-84fe-4fc3-b2da-452065307c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29002", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mj5y2yfb3e2j", "content": "", "creation_timestamp": "2026-04-10T18:43:23.787917Z"}, {"uuid": "a9f948ac-5b71-4284-939f-689c1949488e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/80626", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-29000\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cipher1x1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-17 00:53:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept for CVE-2026-29000, a vulnerability in pac4j-jwt\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-17T01:00:05.000000Z"}, {"uuid": "04a35220-8129-4605-9277-ae30b464bda2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29002", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjo7fibrnn2j", "content": "", "creation_timestamp": "2026-04-17T05:37:07.477516Z"}, {"uuid": "0bb61b88-f083-4cc7-9c87-d9079fa1817b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/GithubRedTeam/79710", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-29000\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Gajraj238\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-10 07:52:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-10T08:00:04.000000Z"}, {"uuid": "0c00f0fd-de1f-4a53-83fc-b0cdc4f131a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "Telegram/LZnB2uRGjvSMX1a86_gYteJhuOo14W3NiFk2b0mfWdXAigg", "content": "", "creation_timestamp": "2026-04-17T09:00:04.000000Z"}, {"uuid": "e69e4982-7993-469a-8cfe-f29a0a7d16fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "Telegram/Pyh-GbtJu7_1LmcMt7_mCq-bIeXL9bqVSVqFWym_Jb3KXyI", "content": "", "creation_timestamp": "2026-04-17T03:00:09.000000Z"}, {"uuid": "93224182-77ba-48c1-ac7b-0151dd4bad0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "Telegram/4UpY9ng-1B7fl4pW8rF9tQFphK5boVLlHwZbJ8KZ6vXJanY", "content": "", "creation_timestamp": "2026-04-10T07:00:15.000000Z"}, {"uuid": "b7a00bfc-989e-4c8f-a0df-7e1fe51b369d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29002", "type": "published-proof-of-concept", "source": "Telegram/VrQ9Ov0z_xRZi9WqN3kvWB9KwPzyBbBtKpr0H2dFm10X_hQ", "content": "", "creation_timestamp": "2026-04-10T17:21:41.000000Z"}, {"uuid": "47de3523-f126-4cec-b71e-192b6de7cf61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "Telegram/5gGUCq2a2r6N3naKjg-kd_f_1LJnx_R-sPBwOcI7-NaFPmI", "content": "", "creation_timestamp": "2026-03-31T11:00:10.000000Z"}, {"uuid": "e724d016-97ea-4f8a-8cba-1eb38788c080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "Telegram/Us8JkcdKV6mNpmC49CCSXRO4qTVWF6cCKabwDZ5lsVeRzZU", "content": "", "creation_timestamp": "2026-03-31T15:00:07.000000Z"}, {"uuid": "fad885f9-a9ad-464e-9082-b61cbf91701c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "Telegram/iJe41NTkZQJK4wFVG9OP9y2V0JVLEcjlDCmGEFn1YNc-zvI", "content": "", "creation_timestamp": "2026-04-03T09:00:05.000000Z"}, {"uuid": "2be69f0f-4051-4f10-baaf-9b6ab2f286ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/78130", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-29000\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xW1LD\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Rust\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-31 10:58:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nJust a simple Rust automation for CVE-2026-29000, design to work against *ippsec's* Principal box on HackTheBox\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-31T11:00:04.000000Z"}, {"uuid": "a0c5c802-5be5-48d1-a57e-7ec9cc42fc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/78150", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-29000\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ClayOfGilgamesh\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-31 14:55:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-29000\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-31T15:00:04.000000Z"}, {"uuid": "15fca20d-fb14-4411-a352-05c8a9bb77f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/76970", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-29000-pac4j-jwt-auth-bypass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a PtechAmanja\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-24 09:40:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof-of-Concept (PoC) for an authentication bypass vulnerability affecting applications using pac4j-jwt with JWE (JSON Web Encryption).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-24T10:00:04.000000Z"}, {"uuid": "07ae8498-57f2-4a49-840f-3d7d9064da45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96541", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e #\u590d\u73b0\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a pac4j-check\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xiaoqiMikko\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 03:40:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOffline scanner for CVE-2026-29000 (CVSS 10.0) in pac4j-jwt \u2014 also finds the 4 packages the official advisory does not list. Single 25KB jar, zero dependencies, Java 8+.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T06:00:05.282395Z"}, {"uuid": "69e2cf1c-3ef8-4dfd-9777-6e6832b155e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "Telegram/iP-qEXB9iad-lNwMzqFYpue_k2JuNeKGDXLVFMqcoj3AsHA", "content": "", "creation_timestamp": "2026-05-03T11:00:13.000000Z"}, {"uuid": "6224e11b-f642-42bd-ba98-3ec575a83c90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "Telegram/T6MjwEy1GXd0xTLgBckUymGQqfeNIMlbkOpXvJPPSDtMl2M", "content": "", "creation_timestamp": "2026-05-03T15:00:06.000000Z"}, {"uuid": "9578d94b-ef95-4b7d-8b94-e3e78101ee82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "Telegram/r4YAq9sqiCZdls8-ldA7XAIZMKynCRrGuzy5h6EQSIOA624", "content": "", "creation_timestamp": "2026-08-04T10:00:05.416251Z"}, {"uuid": "a1d31555-afd6-40c6-8ee3-4a4c7760bb16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/GithubRedTeam/82228", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-29000\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jake-young-dev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-30 17:58:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAn educational deep-dive into CVE-2026-29000\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-30T18:00:04.000000Z"}, {"uuid": "7fd51121-42ee-4af9-bbde-74181fbfb986", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29004", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2cflgtyh2n", "content": "\ud83d\udfe0 CVE-2026-29004 - High (8.1)\n\nBusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-29004/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:28:01.444374Z"}, {"uuid": "24acf81b-6dac-498e-9485-3c6a13540975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29004", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2cgiszak2l", "content": "\ud83d\udfe0 CVE-2026-29004 - High (8.1)\n\nBusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-29004/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:28:31.612578Z"}, {"uuid": "d4c65382-45db-4690-9bdc-49d9a13fb9f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29004", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2etetguo2q", "content": "CVE-2026-29004 - BusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS\nCVE ID : CVE-2026-29004\n \n Published : May 4, 2026, 6:05 p.m. | 15\u00a0minutes ago\n \n Description : BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6...", "creation_timestamp": "2026-05-04T19:11:30.615439Z"}, {"uuid": "f5cda30e-9089-453b-b535-027ebae21cba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/true_secator/8183", "content": "\u0421\u043e\u043b\u0430\u0440\u044b \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u0441 \u043e\u0431\u0437\u043e\u0440\u043e\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043d\u0430 \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0435 \u0443\u0433\u0440\u043e\u0437 \u044d\u0442\u043e\u0433\u043e \u0442\u0438\u043f\u0430.\n\n\u041e\u0442\u043c\u0435\u0442\u0438\u043c \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044b:\n\n- \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u044b\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u043c 2025 \u0433\u043e\u0434\u0430 \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u043d\u0430 7% - \u0441 397 \u0434\u043e 426. \u0412 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0440\u043e\u0441\u0442 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d \u0442\u0435\u043c \u0444\u0430\u043a\u0442\u043e\u043c, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0432 2026 \u0433\u043e\u0434\u0443, \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0435\u0449\u0435 \u0432 2025 \u0433\u043e\u0434\u0443.\n\n- \u0421\u0435\u0442\u0435\u0432\u043e\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0438\u043c\u0435\u043b\u0438 83,84% \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u044d\u0442\u043e\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b 81%.\n\n- \u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b 8,1 \u0431\u0430\u043b\u043b\u0430. \u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 - 7,8, \u0430 \u0433\u043e\u0434\u043e\u043c \u0440\u0430\u043d\u0435\u0435, \u043f\u043e \u0438\u0442\u043e\u0433\u0430\u043c \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 2025 \u0433\u043e\u0434\u0430, - 7,3.\n\n- 91,62% \u0432\u0441\u0435\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 HTTP. \u0411\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0439 \u00ab\u043f\u0440\u0435\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00bb - TCP (3,07%).\n\n- \u041d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0440\u043e\u0432\u043d\u044f Critical \u0438 High \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c 72,06% - \u044d\u0442\u043e \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0432\u044b\u0448\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 2025 \u0433\u043e\u0434\u0430 (69,3%), \u043d\u043e \u043b\u0438\u0448\u044c \u043d\u0435 \u043d\u0430\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0448\u0435, \u0447\u0435\u043c \u0431\u044b\u043b\u043e \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 (71,5%).\n\n-  \u0421\u0430\u043c\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u043c \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u0432 \u043f\u043e\u0434\u0440\u044f\u0434 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f WordPress \u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0434\u043b\u044f \u043d\u0435\u0433\u043e (18,13%).\n\n\u0414\u043e\u043b\u044f \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u0431\u0449\u0435\u043c \u043e\u0431\u044a\u0435\u043c\u0435 \u0432\u044b\u0440\u043e\u0441\u043b\u0430 \u043d\u0430 4,7 \u043f\u0440\u043e\u0446\u0435\u043d\u0442\u043d\u044b\u0445 \u043f\u0443\u043d\u043a\u0442\u0430 \u0432 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u0441 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u044b\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u043c. \u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u0441 \u043f\u0435\u0440\u0432\u044b\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u043d\u0430 WordPress \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c 22,4% \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u043d\u0430 \u0443\u043f\u0430\u043b\u0430.\n\n- \u041f\u043e\u0441\u043b\u0435 \u0441\u043f\u0430\u0434\u0430 \u0432 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u0432\u043d\u043e\u0432\u044c \u0432\u0435\u0440\u043d\u0443\u043b\u0430\u0441\u044c \u043a \u0440\u043e\u0441\u0442\u0443 \u0434\u043e\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0418\u0418-\u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445.\n\n\u041d\u0430 \u043d\u0438\u0445 \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c 4,83%. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 - 9,2 \u0431\u0430\u043b\u043b\u0430. \u042d\u0442\u043e \u0441\u0430\u043c\u044b\u0439 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432-\u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u043f\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0418\u0445 \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u0441\u0440\u0430\u0432\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u0434\u043a\u043e, \u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u0442\u0430\u043a\u0438\u0445 \u0431\u0440\u0435\u0448\u0435\u0439 \u0438\u043c\u0435\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0431\u0449\u0438\u043c \u0442\u0440\u0435\u043d\u0434\u043e\u043c \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043a\u0430\u043d\u0435\u0440\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0418\u0418-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432. \u0422\u0430\u043a, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043d\u0438\u0445, \u043d\u0430 \u043c\u0430\u0440\u0442 2026 \u0433. \u0432 AI-\u0430\u0433\u0435\u043d\u0442\u0435 OpenClaw \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 522 CVE, \u0438 \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442\u0441\u044f, \u0447\u0442\u043e \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \u043e \u043a\u0440\u0438\u0437\u0438\u0441\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 OpenClaw. ClawJacked - \u044d\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 AI-\u0430\u0433\u0435\u043d\u0442.\n\n\u0412 1-\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433. \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u0445\u043e\u0434\u044f \u0438\u0437 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: CVE-2025-2304 (Camaleon CMS), CVE-2026-23744 (MCPJam Inspector), CVE-2026-21858 (n8n), CVE-2026-29000 (pac4j-jwt) \u0438 CVE-2026-21962 (Oracle Fusion Middleware).\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2026-05-07T16:20:06.000000Z"}, {"uuid": "f22fda82-d18f-4cf1-8345-1c4e062f643e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "Telegram/5E-LfOR-CghOQ7wwwqusuVHmxD5JHdCUSO3jdho0bohEIT0", "content": "", "creation_timestamp": "2026-08-29T23:00:06.927018Z"}, {"uuid": "c1b0ee8c-1d9b-46fc-908b-163e7faceec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "Telegram/ejAET7Wd0n1V5uqKctP5d-vJmqb8O4j5F4lTKyPXLyKbJrU", "content": "", "creation_timestamp": "2026-05-06T03:00:05.000000Z"}, {"uuid": "5761a392-c263-4d21-a45a-98535c36f2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "Telegram/aBugb9DLfhMTrXyi4b2xT7cGPOAgIxqnwQndP3gR-7yBisc", "content": "", "creation_timestamp": "2026-05-05T19:00:12.000000Z"}, {"uuid": "1ac3cc16-2835-40ec-a383-a0381f75f769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "Telegram/yfj8_Wf1r81ZM9XH5mmBYiYd4G1zdIl6xbgawa_XXGScCdQ", "content": "", "creation_timestamp": "2026-05-05T21:00:04.000000Z"}, {"uuid": "2797e3d1-2246-4d81-8876-507bc898fb13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "Telegram/5E-LfOR-CghOQ7wwwqusuVHmxD5JHdCUSO3jdho0bohEIT0", "content": "", "creation_timestamp": "2026-08-30T00:00:10.915432Z"}, {"uuid": "c8f69211-64f3-4f7e-9274-db6274368af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "Telegram/gmqsYJuL8AU1ZXxnDjjWQKLCPTC0oBwWP4DJHqZuZarsDHs", "content": "", "creation_timestamp": "2026-05-12T21:00:04.000000Z"}, {"uuid": "e31b87a1-78ab-4ce4-bf4f-dfbac8d59fc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "Telegram/uli2GhURI2CJbk1kAeqzAiHzDld1f3ZduT020MgDdyP-5f4", "content": "", "creation_timestamp": "2026-05-12T19:00:12.000000Z"}, {"uuid": "80a8ed11-6c86-4593-aff6-719cd53ecdb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2900", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "11c1e8a7-476a-47c3-b94c-0e51959a84c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96541", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e #\u590d\u73b0\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a pac4j-check\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xiaoqiMikko\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 03:40:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOffline scanner for CVE-2026-29000 (CVSS 10.0) in pac4j-jwt \u2014 also finds the 4 packages the official advisory does not list. Single 25KB jar, zero dependencies, Java 8+.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:53.872912Z"}, {"uuid": "d319a3a0-ce5b-44cf-b1e5-ec3f9a0e7794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29004", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmtwezgekk23", "content": " Vulnerabilidade cr\u00edtica no BusyBox (CVE-2026-29004) exige a\u00e7\u00e3o imediata em servidores SUSE. O problema \u00e9 um heap buffer overflow no cliente DHCPv6 que pode ser explorado remotamente para execu\u00e7\u00e3o de c\u00f3digo. Read more ->     tinyurl.com/2s4kftbc #SuSE", "creation_timestamp": "2026-05-27T16:27:26.736281Z"}, {"uuid": "208bc45b-c436-4c79-bf7d-b9f64f0890ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29004", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmtwf362rs23", "content": " Vulnerabilidade cr\u00edtica no BusyBox (CVE-2026-29004) exige a\u00e7\u00e3o imediata em servidores SUSE. O problema \u00e9 um heap buffer overflow no cliente DHCPv6 que pode ser explorado remotamente para execu\u00e7\u00e3o de c\u00f3digo. Read more ->     tinyurl.com/2s4kftbc #SuSE", "creation_timestamp": "2026-05-27T16:27:27.275673Z"}, {"uuid": "94f380b6-0b17-415e-95b9-9c58b91767f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29004", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmtwrxbsls2o", "content": "Vulnerabilidade cr\u00edtica no BusyBox (CVE-2026-29004) exige a\u00e7\u00e3o imediata em servidores SUSE. O problema \u00e9 um heap buffer overflow no cliente DHCPv6 que pode ser explorado remotamente para execu\u00e7\u00e3o de c\u00f3digo.   Saiba amis ->   tinyurl.com/2s4kftbc #SUSE", "creation_timestamp": "2026-05-27T16:34:40.826134Z"}, {"uuid": "bdf332f2-a6a6-40b5-95cd-d7272928e6f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29004", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmtwryu5wc2o", "content": "Vulnerabilidade cr\u00edtica no BusyBox (CVE-2026-29004) exige a\u00e7\u00e3o imediata em servidores SUSE. O problema \u00e9 um heap buffer overflow no cliente DHCPv6 que pode ser explorado remotamente para execu\u00e7\u00e3o de c\u00f3digo.   Saiba amis ->   tinyurl.com/2s4kftbc #SUSE", "creation_timestamp": "2026-05-27T16:34:41.342646Z"}, {"uuid": "6556055d-edb3-4da3-8a2f-3285d9b75d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29004", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmtwvxe53c2o", "content": "Vulnerabilidade cr\u00edtica no BusyBox (CVE-2026-29004) exige a\u00e7\u00e3o imediata em servidores SUSE. O problema \u00e9 um heap buffer overflow no cliente DHCPv6 que pode ser explorado remotamente para execu\u00e7\u00e3o de c\u00f3digo.   Saiba mais ->   tinyurl.com/2s4kftbc #SUSE", "creation_timestamp": "2026-05-27T16:37:29.330829Z"}, {"uuid": "e746f63e-7440-443b-9505-6c2a6c513e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29004", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmtwvyomhc2o", "content": "Vulnerabilidade cr\u00edtica no BusyBox (CVE-2026-29004) exige a\u00e7\u00e3o imediata em servidores SUSE. O problema \u00e9 um heap buffer overflow no cliente DHCPv6 que pode ser explorado remotamente para execu\u00e7\u00e3o de c\u00f3digo.   Saiba mais ->   tinyurl.com/2s4kftbc #SUSE", "creation_timestamp": "2026-05-27T16:37:29.963547Z"}, {"uuid": "a9e40686-0dd1-421e-83a4-9f580c899fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "Telegram/r4YAq9sqiCZdls8-ldA7XAIZMKynCRrGuzy5h6EQSIOA624", "content": "", "creation_timestamp": "2026-08-05T00:00:47.528701Z"}, {"uuid": "39d04547-757c-4f4a-9266-d93fcdb7cc0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/GithubRedTeam/86508", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-29000\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a c0gnit00\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-30 07:34:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython POC, Exploit for CVE-2026-29000\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-30T08:00:04.000000Z"}, {"uuid": "9e8fa661-2603-4a3a-8b47-b7dbb9aea686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "Telegram/FkB34ywrWDmw8g1wHOMMuvVeLRjsePHrjrUnztKF3eB1_CA", "content": "", "creation_timestamp": "2026-06-01T11:00:09.000000Z"}, {"uuid": "f9a1360a-3180-49a8-8712-5e431d9caf9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "Telegram/J8DlVyKG2Ha8_8-DPAHAkyXqdyfexf_y2s10iFJfB3MNT4g", "content": "", "creation_timestamp": "2026-05-30T15:00:07.000000Z"}, {"uuid": "09d8ddca-0e58-44d8-8a38-6f54b7ac57bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "Telegram/yYHRBxvUjQ02015bx83J8tkOO2fwWdsxD6Ne1eYIS9oW1lo", "content": "", "creation_timestamp": "2026-05-30T11:00:11.000000Z"}, {"uuid": "69d2c888-3671-407b-84dc-1364a354a5bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5n5jdpza2x", "content": "CVE-2026-29009 - U-Boot 2026.04-rc3 Buffer Overflow in nfs_readlink_reply() via NFS READLINK\nCVE ID : CVE-2026-29009\n \n Published : July 8, 2026, 4:16 p.m. | 58\u00a0minutes ago\n \n Description : U-Boot through 2026.04-rc3 contains a buffer overflow vulnerability in nfs_readlink_rep...", "creation_timestamp": "2026-07-08T17:24:18.041123Z"}, {"uuid": "b075d3fa-aa97-4bb4-9898-e52183f76de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29008", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5o36xfaw2x", "content": "CVE-2026-29008 - U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine()\nCVE ID : CVE-2026-29008\n \n Published : July 8, 2026, 4:14 p.m. | 1\u00a0hour ago\n \n Description : U-Boot through 2026.04-rc3 contains an integer underflow vulnerability in the tcp_rx_state_machine(...", "creation_timestamp": "2026-07-08T17:40:53.915860Z"}, {"uuid": "460e449e-1274-4deb-b4b2-b079c2d50c39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29008", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mq6desj6rx2c", "content": "New HIGH CVE for U-Boot: CVE-2026-29008\n\nU-Boot through 2026.04-rc3 contains an integer underflow vulnerability in the tcp_rx_state_machine() function (net/tcp.c) that allows a network-adjacent attacker to crash the bootloader by sending a ma\u2026\n\nMore: nvd.nist.gov/vuln/detail/CVE-2026-29008", "creation_timestamp": "2026-07-09T00:02:04.916323Z"}, {"uuid": "2f5c2d6b-52da-409e-896d-dc4fdaff4bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/brutsecurity/2564", "content": "CVE-2026-29000: Critical Auth Bypass in pac4j-jwt: Full PoC Using Only a Public Key\n\nhttps://www.codeant.ai/security-research/pac4j-jwt-authentication-bypass-public-key", "creation_timestamp": "2026-07-09T03:00:05.609804Z"}, {"uuid": "f86dd474-78d8-4700-be8d-7d0867205dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29009", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mq6qsygvcf2s", "content": "U-Boot: CVE-2026-29009 [HIGH]\n\nU-Boot through 2026.04-rc3 contains a buffer overflow vulnerability in nfs_readlink_reply() (net/nfs-common.c) when CONFIG_CMD_NFS is enabled, allowing a malicious or compromised NFS server to overflow the 2048-byte n\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-29009", "creation_timestamp": "2026-07-09T04:02:39.802374Z"}, {"uuid": "2d2dd34b-3bc3-4776-a9c8-427b102914c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/brutsecurity/2564", "content": "CVE-2026-29000: Critical Auth Bypass in pac4j-jwt: Full PoC Using Only a Public Key\n\nhttps://www.codeant.ai/security-research/pac4j-jwt-authentication-bypass-public-key", "creation_timestamp": "2026-07-10T00:00:12.924240Z"}, {"uuid": "736665ee-7179-4c46-9f93-f8b0383a2a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2564", "content": "CVE-2026-29000: Critical Auth Bypass in pac4j-jwt: Full PoC Using Only a Public Key\n\nhttps://www.codeant.ai/security-research/pac4j-jwt-authentication-bypass-public-key", "creation_timestamp": "2026-07-11T10:00:05.493378Z"}, {"uuid": "b57fd56e-e0ca-496f-9c4d-550128982f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29007", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mqemjtarja2n", "content": "CVE-2026-29007 [MEDIUM] U-Boot\n\nU-Boot through 2026.04-rc3 contains an out-of-bounds read vulnerability in tcp_rx_state_machine() (net/tcp.c) when CONFIG_PROT_TCP is enabled, allowing remote attackers to read beyond TCP segment boundaries by crafti\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-29007", "creation_timestamp": "2026-07-11T12:01:55.592082Z"}, {"uuid": "3da30b7f-f6be-4c54-9de6-75e39976c5c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2564", "content": "CVE-2026-29000: Critical Auth Bypass in pac4j-jwt: Full PoC Using Only a Public Key\n\nhttps://www.codeant.ai/security-research/pac4j-jwt-authentication-bypass-public-key", "creation_timestamp": "2026-07-12T00:00:52.069827Z"}, {"uuid": "5fded6b7-caf6-494d-ab84-5e4f5cc5de05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87565", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-29000-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 12:57:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-29000 \u2013 pac4j-jwt Authentication Bypass (\ud83d\udd25 CVSS 10.0). One-click admin forge via public key JWE wrapping. Leaks configs, users, secrets. Keep-alive, proxy, custom JWKS.\u2699\ufe0f Educational PoC Exploit tool.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T13:00:03.667760Z"}, {"uuid": "7adcf01f-b340-42cf-8a8f-e6aaadb030fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87565", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-29000-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 12:57:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-29000 \u2013 pac4j-jwt Authentication Bypass (\ud83d\udd25 CVSS 10.0). One-click admin forge via public key JWE wrapping. Leaks configs, users, secrets. Keep-alive, proxy, custom JWKS.\u2699\ufe0f Educational PoC Exploit tool.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:43.726294Z"}, {"uuid": "ae1a9228-47e6-4d69-aee3-ff12705c1532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/GithubRedTeam/92981", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-29000-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dua2z3rr\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 13:59:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-29000 - pac4j-jwt (< 4.5.9 / < 5.7.9 / < 6.3.3) JwtAuthenticator authentication bypass PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:04.499835Z"}, {"uuid": "a70e6fde-8e4c-40d4-9a89-4c9d5e8f5831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92981", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-29000-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dua2z3rr\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 13:59:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-29000 - pac4j-jwt (< 4.5.9 / < 5.7.9 / < 6.3.3) JwtAuthenticator authentication bypass PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:08.395309Z"}, {"uuid": "6019ac24-ac05-4b81-a087-73d510a6be4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17066", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE PoC repositories actively updated or recently surfaced on GitHub, selected to avoid duplicates and outdated entries.\n\n1\ufe0f\u20e3 CVE-2026-20841\n\ud83c\udfaf Windows Notepad \u2013 Potential RCE (PoC)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/BTtea/CVE-2026-20841-PoC\n\n\ud83e\udde0 Overview\nA Proof-of-Concept targeting Windows Notepad (< 11.2510) demonstrates a possible remote code execution scenario through crafted input handling.\n\n\u2699\ufe0f Impact\n\u2022 Potential RCE vector\n\u2022 Local exploitation scenario\n\u2022 Early-stage PoC (research-focused)\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-28292\n\ud83c\udfaf simple-git (Node.js) \u2013 Remote Code Execution\n\n\ud83e\udde0 Overview\nA critical vulnerability in the widely used simple-git library allows attackers to achieve remote code execution due to improper case-sensitive validation in security logic.\nA single missing regex flag allows bypass of previous security patches.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Patch bypass\n\u2022 Affects millions of installations\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-29000\n\ud83c\udfaf pac4j-jwt \u2013 Authentication Bypass (CVSS 10)\n\n\ud83e\udde0 Overview\nA critical flaw in pac4j-jwt allows attackers to forge authentication tokens using only a public key, enabling full account takeover.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Admin account takeover\n\u2022 CVSS 10.0 Critical\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21858\n\ud83c\udfaf n8n Workflow \u2013 Critical Vulnerability Detection / Exploit Path\n\n\ud83d\udd17 GitHub Topic\nhttps://github.com/topics/cve-2026-21858\n\n\ud83e\udde0 Overview\nA critical vulnerability affecting n8n workflow automation platforms, with tools and PoC-related detection scripts available on GitHub.\n\n\u2699\ufe0f Impact\n\u2022 Workflow compromise\n\u2022 Automation abuse\n\u2022 CVSS 10.0\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-XXXX (Fresh Aggregated PoC Stream)\n\ud83c\udfaf Live GitHub PoC Feed (Auto-Collected CVEs)\n\n\ud83d\udd17 Repository\nhttps://github.com/nomi-sec/PoC-in-GitHub\n\n\ud83e\udde0 Overview\nThis repository continuously collects newly published CVE PoCs across GitHub, making it one of the most reliable sources for real-time vulnerability tracking.\n\n\u2699\ufe0f Impact\n\u2022 Continuous PoC discovery\n\u2022 Daily vulnerability tracking\n\u2022 Research automation source\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese entries are useful for:\n\u2022 Tracking real PoC release timing\n\u2022 Studying patch bypass techniques\n\u2022 Monitoring emerging exploit trends\n\u2022 Building automated CVE intelligence pipelines\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:08.789649Z"}, {"uuid": "098a2c0e-cd31-4e1d-9aaa-146bc42100e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "Telegram/JZce1k3F7Nb0tM63EWv0Z1Rv7rG2qawkrkl2TccfYKUt5Pg", "content": "", "creation_timestamp": "2026-07-16T19:00:11.527407Z"}, {"uuid": "ba9a2f09-7ec8-4361-88c7-98952c556e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "Telegram/JZce1k3F7Nb0tM63EWv0Z1Rv7rG2qawkrkl2TccfYKUt5Pg", "content": "", "creation_timestamp": "2026-07-17T00:00:27.084438Z"}, {"uuid": "b69f0379-16df-47c6-a6e4-52b4c43991c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "Telegram/JZce1k3F7Nb0tM63EWv0Z1Rv7rG2qawkrkl2TccfYKUt5Pg", "content": "", "creation_timestamp": "2026-07-18T00:00:45.144075Z"}, {"uuid": "a78b4d0d-bb09-4a1a-ba4e-c6fc339923c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/cve0day/287", "content": "CVE-2026-29000\n\npac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public key can create a JWE-wrapped PlainJWT with arbitrary subject and role claims, bypassing signature verification to authenticate as any user including administrators.\n\nGitHub Link:\nhttps://github.com/RootX111/cve-2026-29000", "creation_timestamp": "2026-08-28T00:00:41.179733Z"}, {"uuid": "3bc92843-5412-41df-a627-c63550b941f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/cve0day/267", "content": "CVE-2026-29000: Critical Auth Bypass in pac4j-jwt: Full PoC Using Only a Public Key\n\nhttps://www.codeant.ai/security-research/pac4j-jwt-authentication-bypass-public-key", "creation_timestamp": "2026-08-28T00:00:41.585216Z"}, {"uuid": "2a467ce9-194a-4d92-aa92-a3b3d8047687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "exploited", "source": "Telegram/5E-LfOR-CghOQ7wwwqusuVHmxD5JHdCUSO3jdho0bohEIT0", "content": "", "creation_timestamp": "2026-08-31T00:00:49.650472Z"}, {"uuid": "bd878a30-a229-431b-b482-b7591a3cf9c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/proxy_bar/3189", "content": "CVE-2026-29000\n*\npac4j-jwt authentication bypass public-key\n\nCVSS: 10 \n*\nThe Full Proof of Concept", "creation_timestamp": "2026-07-20T19:00:07.693742Z"}, {"uuid": "ebfacb9b-803f-45e3-affb-fa25c122353a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/proxy_bar/3189", "content": "CVE-2026-29000\n*\npac4j-jwt authentication bypass public-key\n\nCVSS: 10 \n*\nThe Full Proof of Concept", "creation_timestamp": "2026-07-21T00:00:24.682787Z"}, {"uuid": "62859657-d201-4da6-a91d-fa2f4c900ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/cve0day/267", "content": "CVE-2026-29000: Critical Auth Bypass in pac4j-jwt: Full PoC Using Only a Public Key\n\nhttps://www.codeant.ai/security-research/pac4j-jwt-authentication-bypass-public-key", "creation_timestamp": "2026-08-27T15:00:12.443598Z"}, {"uuid": "71a42872-2595-47e1-a125-4a46e14328bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/cve0day/287", "content": "CVE-2026-29000\n\npac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public key can create a JWE-wrapped PlainJWT with arbitrary subject and role claims, bypassing signature verification to authenticate as any user including administrators.\n\nGitHub Link:\nhttps://github.com/RootX111/cve-2026-29000", "creation_timestamp": "2026-08-27T15:00:11.936024Z"}, {"uuid": "54bf0c0b-ad03-488c-9e12-b5d9ed53e497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3189", "content": "CVE-2026-29000\n*\npac4j-jwt authentication bypass public-key\n\nCVSS: 10 \n*\nThe Full Proof of Concept", "creation_timestamp": "2026-07-22T00:00:27.997034Z"}, {"uuid": "3180e09e-78a9-4b10-a482-880f690b6f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/ZerodayAlert/633", "content": "\u0414\u044b\u0440\u0430 \u0432 pac4j-jwt. \u0422\u0435\u043f\u0435\u0440\u044c \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u043a\u0430\u0436\u0434\u044b\u0439 \u2014 \u00abadmin\u00bb\n\n\u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 pac4j-jwt \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-29000 (10,0). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u041f\u0430\u0440\u043e\u043b\u0438 \u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u043d\u0435 \u043d\u0443\u0436\u043d\u044b.\n\n\u0424\u043e\u043a\u0443\u0441 \u0432 \u0442\u043e\u043c, \u043a\u0430\u043a \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 JWT. \u0415\u0441\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0442\u043e\u043a\u0435\u043d \u0431\u0435\u0437 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 (PlainJWT) \u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c RSA-\u043a\u043b\u044e\u0447\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043a\u043e\u0434 \u00ab\u0442\u0435\u0440\u044f\u0435\u0442\u00bb \u043f\u0440\u0438\u0437\u043d\u0430\u043a \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438 \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0435\u0451 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443. \u0421\u0435\u0440\u0432\u0435\u0440 \u0447\u0438\u0442\u0430\u0435\u0442 \u0440\u043e\u043b\u044c \u0438\u0437 \u0442\u043e\u043a\u0435\u043d\u0430 \u0438 \u0432\u0435\u0440\u0438\u0442 \u0435\u0439.\n\n\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e \u043e\u0434\u0438\u043d \u043f\u0430\u043a\u0435\u0442. \u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0447\u0430\u0441\u0442\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0442 \u043a\u0430\u043a \u00ab\u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0435\u00bb, \u043d\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435 \u0434\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a. \u0415\u0441\u043b\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0442 \u043d\u0435 \u0432 \u0441\u0430\u043c\u043e\u043c \u043d\u0430\u0447\u0430\u043b\u0435, \u043b\u044e\u0431\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u0432\u043e \u0432\u0445\u043e\u0434 \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0434\u0435\u0441\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u0445\u043e\u0434\u043d\u0443\u044e \u0434\u0432\u0435\u0440\u044c.\n\n#jwt #java #auth #\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f", "creation_timestamp": "2026-07-25T15:00:08.823176Z"}, {"uuid": "de062510-9a5f-4044-a3dd-0d2b75ef0cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/ZerodayAlert/633", "content": "\u0414\u044b\u0440\u0430 \u0432 pac4j-jwt. \u0422\u0435\u043f\u0435\u0440\u044c \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u043a\u0430\u0436\u0434\u044b\u0439 \u2014 \u00abadmin\u00bb\n\n\u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 pac4j-jwt \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-29000 (10,0). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u041f\u0430\u0440\u043e\u043b\u0438 \u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u043d\u0435 \u043d\u0443\u0436\u043d\u044b.\n\n\u0424\u043e\u043a\u0443\u0441 \u0432 \u0442\u043e\u043c, \u043a\u0430\u043a \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 JWT. \u0415\u0441\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0442\u043e\u043a\u0435\u043d \u0431\u0435\u0437 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 (PlainJWT) \u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c RSA-\u043a\u043b\u044e\u0447\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043a\u043e\u0434 \u00ab\u0442\u0435\u0440\u044f\u0435\u0442\u00bb \u043f\u0440\u0438\u0437\u043d\u0430\u043a \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438 \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0435\u0451 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443. \u0421\u0435\u0440\u0432\u0435\u0440 \u0447\u0438\u0442\u0430\u0435\u0442 \u0440\u043e\u043b\u044c \u0438\u0437 \u0442\u043e\u043a\u0435\u043d\u0430 \u0438 \u0432\u0435\u0440\u0438\u0442 \u0435\u0439.\n\n\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e \u043e\u0434\u0438\u043d \u043f\u0430\u043a\u0435\u0442. \u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0447\u0430\u0441\u0442\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0442 \u043a\u0430\u043a \u00ab\u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0435\u00bb, \u043d\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435 \u0434\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a. \u0415\u0441\u043b\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0442 \u043d\u0435 \u0432 \u0441\u0430\u043c\u043e\u043c \u043d\u0430\u0447\u0430\u043b\u0435, \u043b\u044e\u0431\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u0432\u043e \u0432\u0445\u043e\u0434 \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0434\u0435\u0441\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u0445\u043e\u0434\u043d\u0443\u044e \u0434\u0432\u0435\u0440\u044c.\n\n#jwt #java #auth #\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f", "creation_timestamp": "2026-07-26T00:00:35.179057Z"}, {"uuid": "b61c38e5-1c85-45c5-8c6e-20a3a95d7e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17045", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with publicly available PoC repositories useful for security research and vulnerability analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Remote Authentication Bypass\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication.\nBy sending a crafted USER environment variable (-f root) through the NEW_ENVIRON telnet option, attackers can obtain a root shell without credentials.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns Heap Out-of-Bounds Read (DoS)\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns DNS server version 1.3 can trigger a crash and denial-of-service condition.\nThe flaw occurs during DNS request processing and may lead to memory access violations.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety issue\n\n3\ufe0f\u20e3 CVE-2026-22444\n\ud83c\udfaf Apache Solr RCE / NTLM Hash Disclosure\n\n\ud83d\udd17 PoC\nhttps://github.com/dptsec/CVE-2026-22444\n\n\ud83e\udde0 Overview\nA vulnerability in Apache Solr (8.6 \u2013 9.10.0) allows attackers to trigger remote command execution or expose NTLM hashes in certain Windows standalone deployments.\nPublic PoC scripts demonstrate exploitation scenarios.\n\n\u2699\ufe0f Impact\n\u2022 Remote Code Execution\n\u2022 NTLM hash leakage\n\u2022 Server compromise\n\n4\ufe0f\u20e3 CVE-2026-21509\n\ud83c\udfaf Microsoft Office Security Feature Bypass\n\n\ud83d\udd17 PoC\nhttps://github.com/gavz/CVE-2026-21509-PoC\n\n\ud83e\udde0 Overview\nA research PoC demonstrates how specially crafted DOCX files with embedded OLE artifacts can bypass certain security protections in Microsoft Office environments.\nThe PoC is designed primarily for EDR / AV detection testing in isolated labs.\n\n\u2699\ufe0f Impact\n\u2022 Security feature bypass\n\u2022 Potential malware delivery vector\n\n5\ufe0f\u20e3 CVE-2026-29000\n\ud83c\udfaf pac4j-jwt Authentication Bypass (CVSS 10)\n\n\ud83e\udde0 Overview\nA critical vulnerability in the pac4j-jwt authentication library allows attackers to forge JWT tokens using only the public key.\nThis enables attackers to authenticate as any user, including administrators, without knowing a secret.\n\n\u2699\ufe0f Impact\n\u2022 Complete authentication bypass\n\u2022 Account takeover\n\u2022 CVSS 10.0 Critical\n\n\ud83d\udcda Research Value\nThese PoC repositories can be used for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Secure coding research\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:10.125205Z"}, {"uuid": "2e92388c-e0ec-45bd-aa67-7f3578e151bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17066", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE PoC repositories actively updated or recently surfaced on GitHub, selected to avoid duplicates and outdated entries.\n\n1\ufe0f\u20e3 CVE-2026-20841\n\ud83c\udfaf Windows Notepad \u2013 Potential RCE (PoC)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/BTtea/CVE-2026-20841-PoC\n\n\ud83e\udde0 Overview\nA Proof-of-Concept targeting Windows Notepad (< 11.2510) demonstrates a possible remote code execution scenario through crafted input handling.\n\n\u2699\ufe0f Impact\n\u2022 Potential RCE vector\n\u2022 Local exploitation scenario\n\u2022 Early-stage PoC (research-focused)\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-28292\n\ud83c\udfaf simple-git (Node.js) \u2013 Remote Code Execution\n\n\ud83e\udde0 Overview\nA critical vulnerability in the widely used simple-git library allows attackers to achieve remote code execution due to improper case-sensitive validation in security logic.\nA single missing regex flag allows bypass of previous security patches.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Patch bypass\n\u2022 Affects millions of installations\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-29000\n\ud83c\udfaf pac4j-jwt \u2013 Authentication Bypass (CVSS 10)\n\n\ud83e\udde0 Overview\nA critical flaw in pac4j-jwt allows attackers to forge authentication tokens using only a public key, enabling full account takeover.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Admin account takeover\n\u2022 CVSS 10.0 Critical\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21858\n\ud83c\udfaf n8n Workflow \u2013 Critical Vulnerability Detection / Exploit Path\n\n\ud83d\udd17 GitHub Topic\nhttps://github.com/topics/cve-2026-21858\n\n\ud83e\udde0 Overview\nA critical vulnerability affecting n8n workflow automation platforms, with tools and PoC-related detection scripts available on GitHub.\n\n\u2699\ufe0f Impact\n\u2022 Workflow compromise\n\u2022 Automation abuse\n\u2022 CVSS 10.0\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-XXXX (Fresh Aggregated PoC Stream)\n\ud83c\udfaf Live GitHub PoC Feed (Auto-Collected CVEs)\n\n\ud83d\udd17 Repository\nhttps://github.com/nomi-sec/PoC-in-GitHub\n\n\ud83e\udde0 Overview\nThis repository continuously collects newly published CVE PoCs across GitHub, making it one of the most reliable sources for real-time vulnerability tracking.\n\n\u2699\ufe0f Impact\n\u2022 Continuous PoC discovery\n\u2022 Daily vulnerability tracking\n\u2022 Research automation source\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese entries are useful for:\n\u2022 Tracking real PoC release timing\n\u2022 Studying patch bypass techniques\n\u2022 Monitoring emerging exploit trends\n\u2022 Building automated CVE intelligence pipelines\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:07.563112Z"}, {"uuid": "3e841174-6afd-4809-bb74-35b21ac522e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/267", "content": "CVE-2026-29000: Critical Auth Bypass in pac4j-jwt: Full PoC Using Only a Public Key\n\nhttps://www.codeant.ai/security-research/pac4j-jwt-authentication-bypass-public-key", "creation_timestamp": "2026-08-29T00:00:30.320188Z"}, {"uuid": "6902e5ea-efd4-410a-9a34-819fab3b77b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/287", "content": "CVE-2026-29000\n\npac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public key can create a JWE-wrapped PlainJWT with arbitrary subject and role claims, bypassing signature verification to authenticate as any user including administrators.\n\nGitHub Link:\nhttps://github.com/RootX111/cve-2026-29000", "creation_timestamp": "2026-08-29T00:00:30.593877Z"}, {"uuid": "4cf462d2-5c58-456b-ac60-9b24404bba1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17045", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with publicly available PoC repositories useful for security research and vulnerability analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Remote Authentication Bypass\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication.\nBy sending a crafted USER environment variable (-f root) through the NEW_ENVIRON telnet option, attackers can obtain a root shell without credentials.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns Heap Out-of-Bounds Read (DoS)\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns DNS server version 1.3 can trigger a crash and denial-of-service condition.\nThe flaw occurs during DNS request processing and may lead to memory access violations.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety issue\n\n3\ufe0f\u20e3 CVE-2026-22444\n\ud83c\udfaf Apache Solr RCE / NTLM Hash Disclosure\n\n\ud83d\udd17 PoC\nhttps://github.com/dptsec/CVE-2026-22444\n\n\ud83e\udde0 Overview\nA vulnerability in Apache Solr (8.6 \u2013 9.10.0) allows attackers to trigger remote command execution or expose NTLM hashes in certain Windows standalone deployments.\nPublic PoC scripts demonstrate exploitation scenarios.\n\n\u2699\ufe0f Impact\n\u2022 Remote Code Execution\n\u2022 NTLM hash leakage\n\u2022 Server compromise\n\n4\ufe0f\u20e3 CVE-2026-21509\n\ud83c\udfaf Microsoft Office Security Feature Bypass\n\n\ud83d\udd17 PoC\nhttps://github.com/gavz/CVE-2026-21509-PoC\n\n\ud83e\udde0 Overview\nA research PoC demonstrates how specially crafted DOCX files with embedded OLE artifacts can bypass certain security protections in Microsoft Office environments.\nThe PoC is designed primarily for EDR / AV detection testing in isolated labs.\n\n\u2699\ufe0f Impact\n\u2022 Security feature bypass\n\u2022 Potential malware delivery vector\n\n5\ufe0f\u20e3 CVE-2026-29000\n\ud83c\udfaf pac4j-jwt Authentication Bypass (CVSS 10)\n\n\ud83e\udde0 Overview\nA critical vulnerability in the pac4j-jwt authentication library allows attackers to forge JWT tokens using only the public key.\nThis enables attackers to authenticate as any user, including administrators, without knowing a secret.\n\n\u2699\ufe0f Impact\n\u2022 Complete authentication bypass\n\u2022 Account takeover\n\u2022 CVSS 10.0 Critical\n\n\ud83d\udcda Research Value\nThese PoC repositories can be used for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Secure coding research\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:07.285404Z"}, {"uuid": "d74dc46a-7e15-48e8-a3fe-90e48f76f86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/hacking_Attack/192743", "content": "pac4j-check v0.2.0\n\nOffline scanner for CVE-2026-29000 (CVSS 10.0) in org.pac4j:pac4j-jwt. Inspects jars/fat-jars directly, so it works where mvn dependency:tree cannot. Single jar, zero dependencies, Java 8+.\nRead more...", "creation_timestamp": "2026-09-06T14:00:05.440390Z"}, {"uuid": "d32c9271-c32a-4b30-8083-f707418f353d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29000", "type": "seen", "source": "https://t.me/hacking_Attack/192743", "content": "pac4j-check v0.2.0\n\nOffline scanner for CVE-2026-29000 (CVSS 10.0) in org.pac4j:pac4j-jwt. Inspects jars/fat-jars directly, so it works where mvn dependency:tree cannot. Single jar, zero dependencies, Java 8+.\nRead more...", "creation_timestamp": "2026-09-07T01:00:13.114720Z"}, {"uuid": "d7337009-f77c-45f8-9e59-6ad362994a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29004", "type": "seen", "source": "https://t.me/shimiscyberworld/1197", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-04\n\n\ud83d\udcca 31 vulnerabilities detected today \u2014 20 \ud83d\udd34 Critical, 11 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42809 (9.9) \u2014 CVE-2026-42809: Apache Polaris Critical Credential\u2026\n  \u2022 CVE-2026-42810 (9.9) \u2014 CVE-2026-42810: Apache Polaris S3 Wildcard Vulnerability\u2026\n  \u2022 CVE-2026-42811 (9.9) \u2014 CVE-2026-42811: Apache Polaris Credential Bypass Exposes\u2026\n  \u2022 CVE-2026-42812 (9.9) \u2014 Apache Iceberg CVE-2026-42812 Bypasses Metadata Location\u2026\n  \u2022 CVE-2026-24118 (9.8) \u2014 VM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes\u2026\n  \u2022 CVE-2026-24120 (9.8) \u2014 CVE-2026-24120: vm2 Sandbox Escape Allows Host Command\u2026\n  \u2022 CVE-2026-24781 (9.8) \u2014 VM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes\u2026\n  \u2022 CVE-2026-26332 (9.8) \u2014 vm2 Sandbox Escape (CVE-2026-26332) Exposes Node.js Apps to\u2026\n  \u2026 and 12 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2025-58074 (8.8) \u2014 Norton Secure VPN Privilege Escalation via Microsoft Store\u2026\n  \u2022 CVE-2026-6266 (8.3) \u2014 CVE-2026-6266: AAP Gateway Email Auto-Link Flaw Allows\u2026\n  \u2022 CVE-2026-29004 (8.1) \u2014 BusyBox udhcpc6 Heap Overflow (CVE-2026-29004) Exposes\u2026\n  \u2022 CVE-2026-42084 (8.1) \u2014 CVE-2026-42084: OpenC3 COSMOS Allows Password Change\u2026\n  \u2022 CVE-2026-32834 (7.5) \u2014 CVE-2026-32834: WordPress Easy PayPal Plugin Authentication\u2026\n  \u2022 CVE-2026-41471 (7.5) \u2014 CVE-2026-41471: PayPal Events WordPress Plugin Exposes All\u2026\n  \u2022 CVE-2026-25863 (7.5) \u2014 CVE-2026-25863: WordPress Plugin DoS Vulnerability Hits\u2026\n  \u2022 CVE-2026-42151 (7.5) \u2014 Prometheus Azure AD OAuth Secret Exposed via Plaintext\u2026\n  \u2022 CVE-2026-42154 (7.5) \u2014 Prometheus CVE-2026-42154: Unauthenticated Memory\u2026\n  \u2022 CVE-2026-3120 (7.2) \u2014 SambaBox CVE-2026-3120: High-Severity OS Command Injection\n  \u2026 and 1 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:17.157357Z"}, {"uuid": "0bc6b2d5-66c5-479f-b5a6-71773c08dac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29004", "type": "seen", "source": "https://t.me/shimiscyberworld/1197", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-04\n\n\ud83d\udcca 31 vulnerabilities detected today \u2014 20 \ud83d\udd34 Critical, 11 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42809 (9.9) \u2014 CVE-2026-42809: Apache Polaris Critical Credential\u2026\n  \u2022 CVE-2026-42810 (9.9) \u2014 CVE-2026-42810: Apache Polaris S3 Wildcard Vulnerability\u2026\n  \u2022 CVE-2026-42811 (9.9) \u2014 CVE-2026-42811: Apache Polaris Credential Bypass Exposes\u2026\n  \u2022 CVE-2026-42812 (9.9) \u2014 Apache Iceberg CVE-2026-42812 Bypasses Metadata Location\u2026\n  \u2022 CVE-2026-24118 (9.8) \u2014 VM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes\u2026\n  \u2022 CVE-2026-24120 (9.8) \u2014 CVE-2026-24120: vm2 Sandbox Escape Allows Host Command\u2026\n  \u2022 CVE-2026-24781 (9.8) \u2014 VM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes\u2026\n  \u2022 CVE-2026-26332 (9.8) \u2014 vm2 Sandbox Escape (CVE-2026-26332) Exposes Node.js Apps to\u2026\n  \u2026 and 12 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2025-58074 (8.8) \u2014 Norton Secure VPN Privilege Escalation via Microsoft Store\u2026\n  \u2022 CVE-2026-6266 (8.3) \u2014 CVE-2026-6266: AAP Gateway Email Auto-Link Flaw Allows\u2026\n  \u2022 CVE-2026-29004 (8.1) \u2014 BusyBox udhcpc6 Heap Overflow (CVE-2026-29004) Exposes\u2026\n  \u2022 CVE-2026-42084 (8.1) \u2014 CVE-2026-42084: OpenC3 COSMOS Allows Password Change\u2026\n  \u2022 CVE-2026-32834 (7.5) \u2014 CVE-2026-32834: WordPress Easy PayPal Plugin Authentication\u2026\n  \u2022 CVE-2026-41471 (7.5) \u2014 CVE-2026-41471: PayPal Events WordPress Plugin Exposes All\u2026\n  \u2022 CVE-2026-25863 (7.5) \u2014 CVE-2026-25863: WordPress Plugin DoS Vulnerability Hits\u2026\n  \u2022 CVE-2026-42151 (7.5) \u2014 Prometheus Azure AD OAuth Secret Exposed via Plaintext\u2026\n  \u2022 CVE-2026-42154 (7.5) \u2014 Prometheus CVE-2026-42154: Unauthenticated Memory\u2026\n  \u2022 CVE-2026-3120 (7.2) \u2014 SambaBox CVE-2026-3120: High-Severity OS Command Injection\n  \u2026 and 1 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:10.534547Z"}]}