<unnamed>

Public Key

npub1wfmch5l920u6ds7c5uq9ey99q9h2pmmmtpg2fkz8nqtd30auw3ds225hsj

Profile Code

nprofile1qqs8yaut60j487dxc0v2wqzujzjszm4qaaa4s59ympres9kch778gkcpz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qz30mxc

Publishing to

relay.ditto.pub

Last Notes

2026-10-29 15:08:01 GMT

updated again placeholder: https://www.cisa.gov/news-events/alerts/2026/10/29/cisa-adds-two-known-exploited-vulnerabilities-catalog
#CISA #KEV

2026-10-29 13:31:49 GMT

On October 20 and 21, an attacker tried to exploit CVE-2026-97229 against Alpine Linux's GitLab instance.
We have found no evidence that it succeeded, but we cannot rule it out, so we treated the instance as compromised and rebuilt it from scratch. Our checks show that the aports repository, packages, and the October 21 releases were not tampered with.
https://alpinelinux.org/posts/GitLab-security-incident-CVE-2026-97229.html
#GitLab #CVE #eitw

2026-10-22 13:56:40 GMT

lol. lmao even.
https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities
#Linux #ZDI #CVE

2026-10-20 20:46:46 GMT

Get ready for PHP security updates tomorrow to address CVE-2026-109618 and CVE-2026-109619 (the leaked RCE CVEs with CVSSv4 9.2 scores)
https://www.php.net/archive/2026.php#2026-10-20-1
https://cert.europa.eu/publications/security-advisories/2026-018/
#PHP #CVE

2026-10-19 13:22:57 GMT

Plex2Shell chain exploited in the wild for cryptomining against Plex media servers: https://www.boredhackerblog.info/2026/10/plex-vulnerabilities-being-exploited-in.html
CVE-2026-96652 (5.3 med) Plex Media Server SSRF
CVE-2026-96654 (6.9 med) Plex Media Server URL injection
CVE-2026-96655 (5.3 med) Plex Media Server arbitrary-host SSRF
CVE-2026-96656 (8.6 high) Plex Media Server arbitrary file write
#threatintel #plex #IOC #eitw

2026-10-06 19:40:03 GMT

new SonicWall SMA1000 advisory. Check out CVE-2026-102255 (10.0 critical) Pre-authentication SSRF via unintended forward-proxy. No mention of exploitation, but it's not a good look that your Secure Mobile Access is not secure (including four known exploited vulnerabilities in the past 90 days)
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017
#sonicwall #sma1000 #cve

2026-10-04 23:53:23 GMT

Our weekly Citrix NetScaler zero-day CVE-2026-88779. See you next Sunday I guess
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88779
https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/
#citrix #netscaler #zeroday #eitw