[cyb]dash

▲ CRITICAL · KEV · 0DAY · last 7d 0 pinned

▶ EXPLOITS & POCs 9

🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols. HIGH POC

Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.

github ·#CVE-2026-20841#Windows

🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept. HIGH POC

Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.

github ·#CVE-2026-20841#Windows

18m ago ▶ EXP

🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops. HIGH POC

Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.

github ·#CVE-2025-68921

32m ago ▶ EXP

Azure IoT Hub where exposure of an owner-level Shared Access Key enables unauthenticated remote code execution (RCE) against connected IoT devices. Proof-Of-Concept HIGH POC

Azure IoT Hub where exposure of an owner-level Shared Access Key enables unauthenticated remote code execution (RCE) against connected IoT devices.

github ·#CVE-2026-13768

Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive. HIGH POC

Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.

github ·#CVE-2026-31431#Linux

[webapps] Krayin CRM v2.2.x - Authenticated Remote Code Execution HIGH

Exploit authenticated remote code execution in Krayin CRM v2.2.x.

Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine. POC

Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.

github ·#CVE-2026-2441#Chrome

13m ago ▶ EXP

🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication. POC

Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.

github ·#CVE-2026-24061

23m ago ▶ EXP

🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data. POC

Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.

github ·#CVE-2025-14847#MongoDB#Python

◊ LABS & RESEARCH 9

12d ago ◇ LAB

Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) CRIT

Red teamers can find a list of Progress Kemp LoadMaster vulnerabilities to exploit.

watchTowr ·#CVE-2026-8037

CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys HIGH

Exploiting the Windows HTTP.sys vulnerability can be used to gain unauthorized access or disrupt services.

ZDI ·#CVE-2026-47291#Windows

WolfSSL, GeoVision, VTK vulnerabilities HIGH

Vulnerabilities in WolfSSL, GeoVision, and VTK could be exploited for remote code execution.

reaction: A daemon that scans program outputs for repeated patterns, and takes action

A tool for detecting repeated patterns in program outputs could be used to evade detection by generating varied outputs.

VAR is ruining football 🫠

Understanding how VAR affects football can inform social engineering tactics to manipulate perceptions.

@campuscodi.risky.biz

Filing: Google urged the European Commission not to target DNS resolvers, VPNs, or IPs to fight piracy, calling the measures ineffective and easily circumvented (Ernesto Van der Sar/TorrentFreak) Main Link | Techmeme Permalink

Knowledge of ineffective anti-piracy measures can be used to evade detection by exploiting known vulnerabilities.

12h ago ◇ LAB

A shot/chaser tactic can be used to distract or disrupt an opponent's plans.

@shuadc.bsky.social

An update on the scraper situation

Understanding the scraper situation can inform tactics to evade detection or manipulate online data.

jpillora/chisel v1.11.8

Exploit a vulnerability in jpillora/chisel v1.11.8.

releases ·#chisel

☣ MALWARE 4

53m ago ☣ MAL

🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access. POC

Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.

github ·#CVE-2025-49844#Redis

No Manners Here: The Ruthless Rise of The Gentlemen Ransomware

Knowledge of the Gentlemen Ransomware tactics can inform defensive strategies to prevent ransomware attacks.

CitrixBleed 2 (CVE-2025-5777) 7Steps to Dragonforce Ransomware | Huntress

CitrixBleed 2 vulnerability can lead to Dragonforce ransomware attacks.

Huntress ·#CVE-2025-5777

Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation

Understanding Vidar Stealer's code signing abuse and Go loaders is vital for red-teamers to detect and prevent similar attacks.

☣ RANSOM 5

11h ago ◈ RAN

[qilin] Century Equities (US)

14h ago ◈ RAN

[cmdorganization] Golden Star Resources (GH)

[dragonforce] The Schuett Companies (US)

[interlock] Borger ISD (US)

[Deadlock] Catcorp

★ NEWS 7

CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys HIGH

Exploiting the Windows HTTP.sys vulnerability can be used to gain unauthorized access or disrupt services.

ZDI ·#CVE-2026-47291#Windows

reaction: A daemon that scans program outputs for repeated patterns, and takes action

A tool for detecting repeated patterns in program outputs could be used to evade detection by generating varied outputs.

VAR is ruining football 🫠

Understanding how VAR affects football can inform social engineering tactics to manipulate perceptions.

@campuscodi.risky.biz

Filing: Google urged the European Commission not to target DNS resolvers, VPNs, or IPs to fight piracy, calling the measures ineffective and easily circumvented (Ernesto Van der Sar/TorrentFreak) Main Link | Techmeme Permalink

Knowledge of ineffective anti-piracy measures can be used to evade detection by exploiting known vulnerabilities.

11h ago ◈ RAN

[qilin] Century Equities (US)

12h ago ◇ LAB

A shot/chaser tactic can be used to distract or disrupt an opponent's plans.

@shuadc.bsky.social

14h ago ◈ RAN

[cmdorganization] Golden Star Resources (GH)

↑ TRENDS top-5

CVEs

CVE-2025-5518210

CVE-2026-208413

CVE-2025-148472

CVE-2025-242572

CVE-2025-312582

Tools

bloodhound2

chisel2

nuclei2

Actors & Targets

Qilin2

Deadlock1

cmdorganization1

dragonforce1

interlock1

◈ PULSE & WATCH 24h

-24h-12hnow

#Fortinet 0

#Ivanti 0

#Citrix 1

#Chrome 1

#Kubernetes 0

#VMware 0

#OpenSSL 0

#Linux-Kernel 0