⤷ Title: GitLab Patch Release Fixes 13 Flaws, Including High-Severity XSS Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 23:57:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_15217 #CVE_2026_15423 #DevSecOps #gitlab #GitLab patch release #XSS
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 23:57:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_15217 #CVE_2026_15423 #DevSecOps #gitlab #GitLab patch release #XSS
Daily CyberSecurity
GitLab Patch Release Fixes 13 Flaws, Including High-Severity XSS Bugs
TL;DR GitLab shipped a new patch release on August 12, 2026. Versions 19.2.2, 19.1.4, and 19.0.6 fix 13 security flaws across Community and Enterprise Edition. The most severe are high-rated cross…
⤷ Title: Hunting Exchange Server 0day like a detective
════════════════════════
𐀪 Author: Jang
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 04:45:43 GMT
════════════════════════
⌗ Tags: #exchange #cve_2026_62911 #servers #rce
════════════════════════
𐀪 Author: Jang
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 04:45:43 GMT
════════════════════════
⌗ Tags: #exchange #cve_2026_62911 #servers #rce
Medium
Hunting Exchange Server 0day like a detective
It has been a while since my last blog post, not because I didn’t do anything (or I?), I just don’t have any time/ any motivation to start…
⤷ Title: CVE-2026-65640: WordPress 7.0.4 Fixes Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 07:34:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_65640 #Ghostscript #Imagick #Remote Code Execution #Web Security #wordpress
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 07:34:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_65640 #Ghostscript #Imagick #Remote Code Execution #Web Security #wordpress
Daily CyberSecurity
CVE-2026-65640: WordPress 7.0.4 Fixes Remote Code Execution
TL;DR WordPress released version 7.0.4 on August 12, 2026, as a security-only update. It fixes CVE-2026-65640, an authenticated remote code execution flaw rated CVSS 8.8. The bug affects sites tha…
⤷ Title: CVE-2026-43723: Apple mediaremoted Flaw Lets Apps Gain Root Privileges, PoC Exploit Code Publicly Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 13:15:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple #CVE_2026_43723 #ios #macOS #mediaremoted #privilege escalation #root
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 13:15:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple #CVE_2026_43723 #ios #macOS #mediaremoted #privilege escalation #root
Daily CyberSecurity
CVE-2026-43723: Apple mediaremoted Flaw Lets Apps Gain Root Privileges, PoC Exploit Code Publicly Disclosed
TL;DR Apple patched a flaw that let a local app gain root privileges through the mediaremoted service. Tracked as CVE-2026-43723, it carries a CVSS score of 7.8. Both the technical details and pro…
⤷ Title: Critical Vulnerability Alert: Unauthenticated SQL Injection in Metabase (CVE-2026–72898)
════════════════════════
𐀪 Author: Synthex
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 17:02:43 GMT
════════════════════════
⌗ Tags: #vulnerability_analysis #cybersecurity #sql_injection #cve_2026_72898 #application_security
════════════════════════
𐀪 Author: Synthex
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 17:02:43 GMT
════════════════════════
⌗ Tags: #vulnerability_analysis #cybersecurity #sql_injection #cve_2026_72898 #application_security
Medium
🚨 Critical Vulnerability Alert: Unauthenticated SQL Injection in Metabase (CVE-2026–72898)
In early August 2026, a maximum-severity security flaw tracked as CVE-2026–72898 (GitHub Advisory: GHSA-vwf4-m7j8-wcjf) was publicly…
⤷ Title: How I Took Over a Metabase Admin Panel
════════════════════════
𐀪 Author: samael0x4
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 17:19:41 GMT
════════════════════════
⌗ Tags: #account_takeover #metabase #cve_2026_72898 #hacking #sql_injection
════════════════════════
𐀪 Author: samael0x4
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 17:19:41 GMT
════════════════════════
⌗ Tags: #account_takeover #metabase #cve_2026_72898 #hacking #sql_injection
Medium
How I Took Over a Metabase Admin Panel 🥷
One HTTP request. Zero credentials. Full administrator access.
⤷ Title: CVE-2026-63455: EdgeConnect Orchestrator Web Authentication Bypass Rated CVSS 9.8
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 14:38:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_63455 #CVE_2026_63456 #CVSS 9.8 #EdgeConnect #HPE Aruba #SD_WAN Orchestrator
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 14:38:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_63455 #CVE_2026_63456 #CVSS 9.8 #EdgeConnect #HPE Aruba #SD_WAN Orchestrator
Daily CyberSecurity
CVE-2026-63455: EdgeConnect Orchestrator Web Authentication Bypass Rated CVSS 9.8
TL;DR HPE Aruba Networking patched two critical flaws in its SD-WAN EdgeConnect Orchestrator. Both carry a CVSS score of 9.8. They let an unauthenticated remote attacker bypass web authentication …
⤷ Title: TP-Link Patches 5 Flaws in ISP-Managed Routers and Mesh Devices
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 01:27:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Command Injection #CVE_2025_30237 #IoT security #router security #TP_Link
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 01:27:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Command Injection #CVE_2025_30237 #IoT security #router security #TP_Link
Daily CyberSecurity
TP-Link Patches 5 Flaws in ISP-Managed Routers and Mesh Devices
TL;DR TP-Link disclosed five vulnerabilities across its ISP-managed networking gear. The flaws hit mesh systems, routers, PON devices, and xDSL modems. The worst allow authentication bypass and co…
⤷ Title: CVE-2026-64582: PoC Exploit Published for Kernel LPE
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 01:01:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_64582 #Linux Kernel #privilege escalation #proof_of_concept #RDMA rxe #use after free
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 01:01:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_64582 #Linux Kernel #privilege escalation #proof_of_concept #RDMA rxe #use after free
Daily CyberSecurity
CVE-2026-64582: PoC Exploit Published for Kernel LPE
TL;DR A researcher published full technical details and working proof-of-concept exploit code for CVE-2026-64582. The flaw is a use-after-free in the Linux kernel RDMA/rxe driver. It started as a …
⤷ Title: CVE-2026-68067 (CVSS 9.8): Mira Monitor Flaw Lets Attackers Control User Accounts
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 02:29:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #CISA #CVE_2026_68067 #IoT security #Medical Device Security #Mira Hormone Monitor
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 02:29:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #CISA #CVE_2026_68067 #IoT security #Medical Device Security #Mira Hormone Monitor
Daily CyberSecurity
CVE-2026-68067 (CVSS 9.8): Mira Monitor Flaw Lets Attackers Control User Accounts
TL;DR CISA disclosed eight vulnerabilities in the Mira Hormone Monitor and its Android app. The worst, CVE-2026-68067, scores a critical CVSS 9.8. It lets a remote attacker control user accounts b…