September 29, 2026
September 29, 2026 Hash 126428bcee91afe0d680f3294c18cf635 2413f79d5630428c016e88b1d3e271be5 341a15d738d8667d58e6668be823e04f2 URL 1https[:]//popu-list[.]org/ 2http[:]//www[.]jybioscience[.]com/ 3http[:]//venturipiscinas[.]pt/ IP 1218[.]75[.]165[.]74 2218[.]90[.]139[.]13 3200[.]124[.]14[.]157...
WSO2 Product Security Update Advisory (CVE-2026-5430)
WSO2 Product Security Update Advisory (CVE-2026-5430) A vulnerability (CVE-2026-5430) in the JWT authentication process of WSO2 products has been discovered, and a security update has been released. This vulnerability allows authentication bypass through tokens signed with unsupported algorithms. Affected Products WSO2 API Control Plane 4.5.0. WSO2 API Control Plane 4.6.0.
WordPress Security Update Advisory (CVE-2026-87902)
WordPress Security Update Advisory. CVE-2026-87902, a vulnerability in WordPress that allows PHP files to be included through page template path traversal, has been resolved. Follow the instructions on the reference site to update to the latest version with the Vulnerability Patch. Affected Versions include various WordPress versions ranging from 4.7.0
F5 Product Security Update Advisory (CVE-2026-94127)
Overview F5 has released a security update that addresses vulnerability CVE-2026-94127 in BIG-IP APM. This vulnerability is a pre-authentication remote code execution vulnerability caused by a heap-based buffer overflow (memory handling error) in the OAuth authentication server feature of BIG-IP APM. Affected Versions The following BIG-IP APM versions are affected:
September 28, 2026
September 28, 2026 Hash 1b5b679c6ab4512360b0119da9b52654b 21ac6673dc2738021d1f2059674934cfe 39027907d9bc0013feb0e3a3349658139 URL 1http[:]//vnalra[.]hornygiirls[.]com/ 2http[:]//online-mediation-beratung[.]de/ 3http[:]//trronline[.]se/ IP 1154[.]18[.]197[.]35 24[.]224[.]40[.]94 331[.]56[.]19[.]21...
Vulnerability Attack Case: Installation of a Web Shell and Execution of a Scanner by Exploiting a Telerik UI Vulnerability
The AhnLab SEcurity intelligence Center (ASEC) has identified two vulnerability attack cases that exploited a remote code execution vulnerability (CVE-2019-18935) targeting unpatched Telerik UI for ASP.NET AJAX servers. In the first incident, after exploiting the vulnerability, the attacker executed a reverse shell, attempted to perform privilege escalation, and installed a
Adobe Product Security Update Advisory (CVE-2026-71362)
Overview Security updates have been released to address vulnerabilities found in Adobe products. These updates apply to Adobe Commerce, Adobe Commerce B2B, and Magento Open Source. Resolved Vulnerabilities CVE-2026-71362: An incorrect authorization vulnerability in Adobe Commerce and Magento Open Source. This vulnerability could allow an attacker to gain access to
September 27, 2026
September 27, 2026 Hash 1bb1465e9f6bb17b0328f503670079f8b 22aa4f70f5d323be812bac065dc9678b0 31e24c79535f395c80d9823a3121e82ba URL 1http[:]//soinluck[.]com/ 2https[:]//download[.]projectreal[.]live/setup/RealSetup[.]exe?itk=0c311db9a5e9b329145f4ae55c42339230997c49bbae13edcbadd5f926d299f7 3https[:]//coinva[.]com[.]mx/ IP 1147[.]90[.]234[.]13 2172[.]211[.]56[.]214 3116[.]196[.]119[.]94...
September 26, 2026
September 26, 2026 Hash 118ef82c0c3e5108fea4d284ff5dc8030 26dc4474942e7e796c0a2974952e1252d 3bd183af59dff809888d2ec67acbfb496 URL 1http[:]//enjoytouring[.]ro/ 2http[:]//onlinedating-nl[.]nl/ 3http[:]//ceramicsteel[.]com[.]mx/ IP 1117[.]176[.]220[.]76 214[.]225[.]206[.]171 3103[.]60[.]242[.]169...
September 25, 2026
September 25, 2026 Hash 1a19a0748a582c8d0d68866496c4aebd9 27cf49964cda7ff8bec41f5ae33e8164d 35a86a18af12e02d5abd0bf2d1db075f0 URL 1https[:]//cdn[.]minecraft-got[.]net/ 2http[:]//afisha-maly[.]com/ 3http[:]//i636f6d6d756e697479o736f75746877657374o636f6dz[.]oszar[.]com/ IP 1165[.]154[.]200[.]214 2195[.]178[.]110[.]227 3139[.]59[.]124[.]215...
