Recent Items
# NatJack: A New Attack Class Against Network Infrastructure Devices
natjack
A NEW ATTACK CLASS AGAINST NETWORK INFRASTRUCTURE DEVICES
Origin: [https://natjack.io/](https://natjack.io/)
What is NatJack?
----------------
NatJack is a newly developed network address translation (NAT) table manipulation attack class effective against most virtual and physical network infrastructure performing NAT. These attacks can be used to hijack an existing TCP connection travers…
Published on Mon, 10 Aug 2026 13:32:53 +0000
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6423-1 security@debian.org
https://www.debian.org/security/ Nilesh Patra
August 09, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : kitty
CVE ID : CVE-2026-42850 CVE-2026-42851 CVE-2026-54055 CVE-2026-54057
Debian Bug : 1139898
…
Published on Sun, 09 Aug 2026 18:21:53 +0000
# Support Content Notification - Support Portal - Broadcom support portal
VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)
Initial Publication Date
29 July 2026
Affected CVE
CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709
* Advisory ID: : Advisory Severity:
* VMSA-2026-0006: Critical
* Advisory ID: : CVSSv3 Range:
* VMSA-2…
Published on Thu, 30 Jul 2026 06:11:30 +0000
# Security Advisory - Action Required - July 2026 Security Update - Check Point Blog
As part of Check Point’s Frontier AI Readiness Program, we are releasing a jumbo hotfix with security and hardening fixes for our firewall and management products.
This update includes a number of security hardening improvements and fixes, the most significant of which are outlined below.
During a routine BLAST review, we discovered a few vulnerabilities. Following a thorough analysis, we identified one of tho…
Published on Wed, 29 Jul 2026 08:40:30 +0000
# CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)
Ref: [https://www.rapid7.com/blog/post/ve-cve-2026-55040-microsoft-sharepoint-jwt-token-authentication-bypass-fixed/](https://www.rapid7.com/blog/post/ve-cve-2026-55040-microsoft-sharepoint-jwt-token-authentication-bypass-fixed/)
Overview
--------
Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve…
Published on Wed, 15 Jul 2026 21:30:24 +0000
Reference: https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc
Overview
Published: July 2, 2026
Version: 1.0
Revision: 1.0
Summary 1 of 25
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device.
Affected Products:
UniFi Connect Application (Version 3.4.16 and earlier)
Mitigation:
Update your …
Published on Wed, 08 Jul 2026 11:01:21 +0000
# CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)
Well, well, well - once again, the cat has dragged us in and spat us out.
Today, we find ourselves questioning the reality we sit within. Must it be so predictable, and why us? “But watchTowr, what do you mean?”
Well, if you’re here, you likely fit into one of the following categories:
* A dear reader,
* A group therapy accomplice
* A Groundhog Day fan club member
Why? Because we once again …
Published on Wed, 01 Jul 2026 07:59:26 +0000
# WARNING: Remote Code Execution and Cross-Site Scripting in pgAdmin 4 Can Be Exploited to Execute Arbitrary Commands and Exfiltrate Database Credentials. Patch Immediately! | CCB Belgium
Reference: https://ccb.belgium.be/advisories/warning-remote-code-execution-and-cross-site-scripting-pgadmin-4-can-be-exploited
Published : 22/06/2026
> * **Last update**: 22/06/2026
> * **Affected software:** pgAdmin 4 prior to version 9.16
> * **Type**:
> → **CWE-306**: Missing Authe…
Published on Tue, 23 Jun 2026 10:07:30 +0000
| CVE Number | Description | CVSS Score (Severity) | CVSS Vector | CWE |
| -------------- | ---------------------------------------------------------------------------------------------------------------------------------------------…
Published on Wed, 10 Jun 2026 04:44:07 +0000
NEWS for rsync 3.4.3 (20 May 2026)
Changes in this version:
SECURITY FIXES:
Six CVEs are fixed in this release. All six are assigned by VulnCheck as CNA. Affected versions are 3.4.2 and earlier in every case. Three of the six (CVE-2026-29518, CVE-2026-43617, CVE-2026-43619) require non-default daemon configuration to reach: the first and third need use chroot = no for a module, the second needs daemon chroot = ... set in rsyncd.conf. Two (CVE-2026-43618, CVE-2026-43620) are reachable from a nor…
Published on Mon, 08 Jun 2026 06:22:26 +0000