https://intel.birivibe.comVarredura periodica: KEV, PoCs, advisories, ransomware, EPSS, listas de disclosureThu, 29 Oct 2026 06:03:45 +0000https://github.com/Syerain/cve-2026-43499-vivo-mt6896https://github.com/Syerain/cve-2026-43499-vivo-mt6896PoC novos (GitHub)Thu, 29 Oct 2026 05:58:25 +0000CVE-2026-43499 exploit on vivo's MT6896 device V2238A.https://github.com/Again1996-bit/CVE-2026-98260-GhostKeyhttps://github.com/Again1996-bit/CVE-2026-98260-GhostKeyPoC novos (GitHub)Thu, 29 Oct 2026 05:13:36 +0000GhostKey - CVE-2026-98260 一键提权工具（Shizuku + NDK Native）https://github.com/FUNFACTOR1/CVE-2026-82090-18-Years-All-Versions-CVSS-9.2-CRITICAL-The-Pocket-Forever-Dayhttps://github.com/FUNFACTOR1/CVE-2026-82090-18-Years-All-Versions-CVSS-9.2-CRITICAL-The-Pocket-Forever-DayPoC novos (GitHub)Thu, 29 Oct 2026 05:02:02 +0000CVE-2026-82090 · CVSS 9.2 CRITICAL · 0-click stored XSS in Mozilla Pocket — all versions (v0 → v8.33.0.0) · 18-year forever-day · no patch · MITRE publishedhttps://github.com/Mas0nShi/CVE-2026-112445https://github.com/Mas0nShi/CVE-2026-112445PoC novos (GitHub)Thu, 29 Oct 2026 04:48:06 +0000https://seclists.org/fulldisclosure/2026/Oct/57https://seclists.org/fulldisclosure/2026/Oct/57full disclosureThu, 29 Oct 2026 04:12:45 +0000Posted by disclosure via Fulldisclosure on Oct 28 0day Rubbish Research Team is publicly disclosing a vulnerability in NETGEAR RAX120 (Nighthawk AX12) firmware V1.2.5.18, the WiFi 6 consumer router from NETGEAR (United States), built on the Qualcomm IPQ8074 platform. The administrative web plane of this firmware generation is a lighttpd server fronting the vendor's DNI-fhttps://seclists.org/fulldisclosure/2026/Oct/54https://seclists.org/fulldisclosure/2026/Oct/54full disclosureThu, 29 Oct 2026 04:12:44 +0000Posted by disclosure via Fulldisclosure on Oct 28 0day Rubbish Research Team is publicly disclosing a vulnerability in the Raritan PX3 PDU G4, firmware version 4.3.14, the intelligent rack power distribution unit from Raritan, a Legrand company (United States). A low-privilege authenticated session converts one diagnostics request into operating-system command execution in thhttps://seclists.org/fulldisclosure/2026/Oct/56https://seclists.org/fulldisclosure/2026/Oct/56full disclosureThu, 29 Oct 2026 04:12:43 +0000Posted by disclosure via Fulldisclosure on Oct 28 0day Rubbish Research Team is publicly disclosing a vulnerability in NUUO Crystal Server 3.19.0.85, the video management and NVR server software from NUUO Inc. of Taipei (Taiwan), distributed as the Crystal virtual-machine appliance: an Ubuntu-based OVA whose web tier is a lighttpd server fronting a PHP application, with .phphttps://seclists.org/fulldisclosure/2026/Oct/55https://seclists.org/fulldisclosure/2026/Oct/55full disclosureThu, 29 Oct 2026 04:12:41 +0000Posted by disclosure via Fulldisclosure on Oct 28 0day Rubbish Research Team is publicly disclosing a vulnerability in the Moxa MAR-2000 series industrial 4G/LTE cellular router, firmware image FWR_MAR2000_V1.0_Build_15010909, from Moxa Inc. (Taiwan). An authenticated administrator converts one saved monitoring-condition field into recurring, product-scheduled arbitrary commahttps://seclists.org/fulldisclosure/2026/Oct/53https://seclists.org/fulldisclosure/2026/Oct/53full disclosureThu, 29 Oct 2026 04:12:40 +0000Posted by disclosure via Fulldisclosure on Oct 28 0day Rubbish Research Team is publicly disclosing a vulnerability in the Moxa MAR-2000 series industrial 4G/LTE cellular router, firmware image FWR_MAR2000_V1.0_Build_15010909, from Moxa Inc. (Taiwan). An authenticated administrator converts one stored VPN address field into arbitrary command execution as the identity of the phttps://seclists.org/fulldisclosure/2026/Oct/52https://seclists.org/fulldisclosure/2026/Oct/52full disclosureThu, 29 Oct 2026 04:12:39 +0000Posted by disclosure via Fulldisclosure on Oct 28 0day Rubbish Research Team is publicly disclosing a vulnerability in the Moxa MAR-2000 series industrial 4G/LTE cellular router, firmware image FWR_MAR2000_V1.0_Build_15010909, from Moxa Inc. (Taiwan). An authenticated administrator converts one stored configuration field into arbitrary command execution as the identity of thehttps://seclists.org/fulldisclosure/2026/Oct/51https://seclists.org/fulldisclosure/2026/Oct/51full disclosureThu, 29 Oct 2026 04:12:02 +0000Posted by fulldisclosure on Oct 28 Am 21.10.26 um 07:23 schrieb jose: that is the CVE for the OOM RCE vulnerability in fpm and mod_php. Sure you got the right on? Best regards, Mariushttps://seclists.org/fulldisclosure/2026/Oct/50https://seclists.org/fulldisclosure/2026/Oct/50full disclosureThu, 29 Oct 2026 04:11:44 +0000Posted by Daniel Owens via Fulldisclosure on Oct 28 On 29 August 2026, we released "Commas of D00m" -- an old proof of concept that demonstrates unconstrained resource consumption in many JSON parsers. As recently discussed (in "Continued Apache Struts2 JSON Plugin Insecure Deserialisation"), the Apache Struts2 JSON Plugin's S2-072 and prior code changes fhttps://seclists.org/fulldisclosure/2026/Oct/49https://seclists.org/fulldisclosure/2026/Oct/49full disclosureThu, 29 Oct 2026 04:11:43 +0000Posted by Daniel Owens via Fulldisclosure on Oct 28 Summary Thus far we have written extensively about the rampant number of insecure JavaScript Object Notation (JSON) deserialisers available today, like in "Struts2 and Related Framework Array/Collection DoS" (26 October 2025) and "JSON Deserialiser Unconstrained Resource Consumption Quick Overview" (07 Marchttps://www.ransomware.live/id/eHNwcmluZ2NhcGl0YWwuY29tQGxvY2tiaXQ1https://www.ransomware.live/id/eHNwcmluZ2NhcGl0YWwuY29tQGxvY2tiaXQ1Ransomware live (RSS)Thu, 29 Oct 2026 04:03:54 +0000XSpring Capital Public Company Limited is a company that operates in the business of investing in va...https://www.ransomware.live/id/c3VzYW5uZWNlcmRhLmNvbUBsb2NrYml0NQhttps://www.ransomware.live/id/c3VzYW5uZWNlcmRhLmNvbUBsb2NrYml0NQRansomware live (RSS)Thu, 29 Oct 2026 04:03:09 +0000Die Unternehmensgruppe Susanne Cerdá bietet nicht nur Dienstleistungen im Bereich Unternehmensgründu...https://github.com/EQSTLab/CVE-2026-109619https://github.com/EQSTLab/CVE-2026-109619PoC novos (GitHub)Thu, 29 Oct 2026 03:32:45 +0000PHP2Shellhttps://github.com/advisories/GHSA-555x-f7vj-p9qwhttps://github.com/advisories/GHSA-555x-f7vj-p9qwGitHub Advisories (high/critical)Thu, 29 Oct 2026 03:30:29 +0000CVE-2026-66090 sev=high pkg=https://github.com/advisories/GHSA-64mg-3wpj-rcr6https://github.com/advisories/GHSA-64mg-3wpj-rcr6GitHub Advisories (high/critical)Thu, 29 Oct 2026 03:30:29 +0000CVE-2026-66088 sev=critical pkg=https://github.com/advisories/GHSA-jqqj-mjjm-8jrvhttps://github.com/advisories/GHSA-jqqj-mjjm-8jrvGitHub Advisories (high/critical)Thu, 29 Oct 2026 03:30:28 +0000CVE-2026-113387 sev=high pkg=https://github.com/advisories/GHSA-pw33-6fpc-cwfmhttps://github.com/advisories/GHSA-pw33-6fpc-cwfmGitHub Advisories (high/critical)Thu, 29 Oct 2026 03:30:27 +0000CVE-2026-21157 sev=high pkg=https://github.com/Scyrix-LLC/CVE-2026-109722https://github.com/Scyrix-LLC/CVE-2026-109722PoC novos (GitHub)Thu, 29 Oct 2026 02:35:15 +0000https://github.com/Try2Take/CVE-2026-97631-PoChttps://github.com/Try2Take/CVE-2026-97631-PoCPoC novos (GitHub)Thu, 29 Oct 2026 02:26:41 +0000An educational laboratory for studying a PXE network-boot vulnerability in EDK II / OVMF. It builds a pinned EDK II revision, boots a UEFI virtual machine in QEMU, and includes Python proof-of-concepthttps://github.com/Lariinz/CVE-2026-117025https://github.com/Lariinz/CVE-2026-117025PoC novos (GitHub)Thu, 29 Oct 2026 01:25:20 +0000https://github.com/advisories/GHSA-7h74-v9cc-6cp4https://github.com/advisories/GHSA-7h74-v9cc-6cp4GitHub Advisories (high/critical)Thu, 29 Oct 2026 00:31:26 +0000CVE-2026-118579 sev=high pkg=https://github.com/advisories/GHSA-jq9q-vph7-fh8whttps://github.com/advisories/GHSA-jq9q-vph7-fh8wGitHub Advisories (high/critical)Thu, 29 Oct 2026 00:31:26 +0000CVE-2026-93851 sev=high pkg=https://github.com/advisories/GHSA-hr55-whqv-38v8https://github.com/advisories/GHSA-hr55-whqv-38v8GitHub Advisories (high/critical)Thu, 29 Oct 2026 00:31:25 +0000CVE-2026-118804 sev=high pkg=https://github.com/advisories/GHSA-pq7g-3p4f-wvm7https://github.com/advisories/GHSA-pq7g-3p4f-wvm7GitHub Advisories (high/critical)Thu, 29 Oct 2026 00:31:25 +0000CVE-2026-118755 sev=high pkg=https://github.com/advisories/GHSA-33cw-hwxh-f8g5https://github.com/advisories/GHSA-33cw-hwxh-f8g5GitHub Advisories (high/critical)Thu, 29 Oct 2026 00:31:25 +0000CVE-2026-118803 sev=high pkg=https://github.com/advisories/GHSA-wr69-568q-rrqghttps://github.com/advisories/GHSA-wr69-568q-rrqgGitHub Advisories (high/critical)Thu, 29 Oct 2026 00:31:24 +0000CVE-2026-118753 sev=high pkg=https://github.com/advisories/GHSA-pqw8-2jmw-8f2chttps://github.com/advisories/GHSA-pqw8-2jmw-8f2cGitHub Advisories (high/critical)Thu, 29 Oct 2026 00:31:24 +0000CVE-2026-118752 sev=high pkg=https://github.com/advisories/GHSA-4r6j-f6gv-fqcxhttps://github.com/advisories/GHSA-4r6j-f6gv-fqcxGitHub Advisories (high/critical)Thu, 29 Oct 2026 00:31:24 +0000CVE-2026-118690 sev=critical pkg=https://github.com/advisories/GHSA-rgrp-3mvm-5g9jhttps://github.com/advisories/GHSA-rgrp-3mvm-5g9jGitHub Advisories (high/critical)Thu, 29 Oct 2026 00:31:24 +0000CVE-2026-118694 sev=high pkg=https://github.com/advisories/GHSA-c237-3r77-c8g5https://github.com/advisories/GHSA-c237-3r77-c8g5GitHub Advisories (high/critical)Thu, 29 Oct 2026 00:31:24 +0000CVE-2026-118689 sev=high pkg=https://github.com/advisories/GHSA-3v3v-qqf5-5rqrhttps://github.com/advisories/GHSA-3v3v-qqf5-5rqrGitHub Advisories (high/critical)Thu, 29 Oct 2026 00:31:24 +0000CVE-2026-118692 sev=high pkg=https://github.com/advisories/GHSA-wvpm-52pr-rww8https://github.com/advisories/GHSA-wvpm-52pr-rww8GitHub Advisories (high/critical)Thu, 29 Oct 2026 00:31:23 +0000CVE-2026-118682 sev=high pkg=https://github.com/advisories/GHSA-5j5x-575j-vr62https://github.com/advisories/GHSA-5j5x-575j-vr62GitHub Advisories (high/critical)Thu, 29 Oct 2026 00:31:23 +0000CVE-2026-116641 sev=high pkg=https://www.ransomware.live/id/U2FudGlhbSBIb3NwaXRhbCAmIENsaW5pY3NAYW51Ymlzhttps://www.ransomware.live/id/U2FudGlhbSBIb3NwaXRhbCAmIENsaW5pY3NAYW51YmlzRansomware live (RSS)Wed, 28 Oct 2026 23:32:38 +0000A major medical data breach.https://www.ransomware.live/id/TG93ZW5zdGVpbiBTYW5kbGVyIExMUEBTaWxlbnRSYW5zb21Hcm91cAhttps://www.ransomware.live/id/TG93ZW5zdGVpbiBTYW5kbGVyIExMUEBTaWxlbnRSYW5zb21Hcm91cARansomware live (RSS)Wed, 28 Oct 2026 23:30:55 +0000Founded in 1961 and headquartered in New York City, New York, Lowenstein Sandler is a national law fir…https://github.com/caveeroo/cve-2026-111497-wordpress-pochttps://github.com/caveeroo/cve-2026-111497-wordpress-pocPoC novos (GitHub)Wed, 28 Oct 2026 23:29:34 +0000CVE-2026-111497 RCE PoC for one pinned Docker Official Image for WordPresshttps://github.com/advisories/GHSA-3f7j-7jwc-fxfjhttps://github.com/advisories/GHSA-3f7j-7jwc-fxfjGitHub Advisories (high/critical)Wed, 28 Oct 2026 22:42:49 +0000CVE-2026-116576 sev=high pkg=systeminformationhttps://www.ransomware.live/id/Q3lyaW91cyBTb2Z0d2FyZUBwZWFyhttps://www.ransomware.live/id/Q3lyaW91cyBTb2Z0d2FyZUBwZWFyRansomware live (RSS)Wed, 28 Oct 2026 21:53:55 +0000Specialized business management software designed for sign, graphics, and print providershttps://github.com/advisories/GHSA-rxrw-f2xj-7fjxhttps://github.com/advisories/GHSA-rxrw-f2xj-7fjxGitHub Advisories (high/critical)Wed, 28 Oct 2026 21:31:18 +0000CVE-2026-6647 sev=high pkg=https://github.com/advisories/GHSA-3whv-82g3-5cwxhttps://github.com/advisories/GHSA-3whv-82g3-5cwxGitHub Advisories (high/critical)Wed, 28 Oct 2026 21:31:18 +0000CVE-2026-76418 sev=high pkg=https://github.com/advisories/GHSA-hqmm-q55h-r6p8https://github.com/advisories/GHSA-hqmm-q55h-r6p8GitHub Advisories (high/critical)Wed, 28 Oct 2026 21:31:18 +0000CVE-2026-78674 sev=high pkg=https://github.com/advisories/GHSA-92xh-3g2w-c2j3https://github.com/advisories/GHSA-92xh-3g2w-c2j3GitHub Advisories (high/critical)Wed, 28 Oct 2026 21:31:17 +0000CVE-2026-13451 sev=high pkg=https://github.com/advisories/GHSA-pwp9-3h93-h2x8https://github.com/advisories/GHSA-pwp9-3h93-h2x8GitHub Advisories (high/critical)Wed, 28 Oct 2026 21:31:17 +0000CVE-2026-109411 sev=high pkg=https://github.com/advisories/GHSA-4c29-j43w-vg8ghttps://github.com/advisories/GHSA-4c29-j43w-vg8gGitHub Advisories (high/critical)Wed, 28 Oct 2026 21:31:17 +0000CVE-2026-117574 sev=critical pkg=https://github.com/advisories/GHSA-mqxf-9g4h-p3qmhttps://github.com/advisories/GHSA-mqxf-9g4h-p3qmGitHub Advisories (high/critical)Wed, 28 Oct 2026 21:31:17 +0000CVE-2025-14260 sev=high pkg=https://github.com/advisories/GHSA-63fr-xrxj-8wrxhttps://github.com/advisories/GHSA-63fr-xrxj-8wrxGitHub Advisories (high/critical)Wed, 28 Oct 2026 21:31:16 +0000CVE-2026-118688 sev=high pkg=https://github.com/advisories/GHSA-59gw-w64r-2mg7https://github.com/advisories/GHSA-59gw-w64r-2mg7GitHub Advisories (high/critical)Wed, 28 Oct 2026 21:31:16 +0000CVE-2026-118684 sev=high pkg=https://github.com/advisories/GHSA-jv3j-8935-75r6https://github.com/advisories/GHSA-jv3j-8935-75r6GitHub Advisories (high/critical)Wed, 28 Oct 2026 21:31:16 +0000CVE-2026-118686 sev=high pkg=https://github.com/advisories/GHSA-j9wc-wg7r-6rm3https://github.com/advisories/GHSA-j9wc-wg7r-6rm3GitHub Advisories (high/critical)Wed, 28 Oct 2026 21:31:16 +0000CVE-2026-118687 sev=high pkg=https://www.ransomware.live/id/Rm9ydHJleEBXYWxsc3RyZWV0https://www.ransomware.live/id/Rm9ydHJleEBXYWxsc3RyZWV0Ransomware live (RSS)Wed, 28 Oct 2026 21:31:10 +0000Fortrex is the premier provider of food safety solutions in North America, offering comprehensive sanitation services, chemical products and intervention solutions for food processing facilities. Our team of skilled food sanitors, microbiologists, technical experts and engineers are committed to keeping USDA, FDA, and CFIA processing facilities clean, safe, and audit-readyhttps://www.ransomware.live/id/TW9ycmlzb24gRm9lcnN0ZXJAU2lsZW50UmFuc29tR3JvdXAhttps://www.ransomware.live/id/TW9ycmlzb24gRm9lcnN0ZXJAU2lsZW50UmFuc29tR3JvdXARansomware live (RSS)Wed, 28 Oct 2026 21:29:40 +0000Morrison Foerster is a leading international law firm with a presence in the United States, Asia, and …https://www.ransomware.live/id/VC4uLiBFLi4uQFNpbGVudFJhbnNvbUdyb3Vwhttps://www.ransomware.live/id/VC4uLiBFLi4uQFNpbGVudFJhbnNvbUdyb3VwRansomware live (RSS)Wed, 28 Oct 2026 21:29:20 +0000Redacted entry - full company name pending disclosure (FULL DATA TIMER active).https://www.ransomware.live/id/Uy4uLiBILi4uQFNpbGVudFJhbnNvbUdyb3Vwhttps://www.ransomware.live/id/Uy4uLiBILi4uQFNpbGVudFJhbnNvbUdyb3VwRansomware live (RSS)Wed, 28 Oct 2026 21:28:57 +0000Redacted entry - full company name pending disclosure (FULL DATA TIMER active).https://www.ransomware.live/id/QSZCIExhYkBnZW5lc2lzhttps://www.ransomware.live/id/QSZCIExhYkBnZW5lc2lzRansomware live (RSS)Wed, 28 Oct 2026 20:53:55 +0000Provides Laboratory Services.https://seclists.org/oss-sec/2026/q4/432https://seclists.org/oss-sec/2026/q4/432oss-sec (seclists)Wed, 28 Oct 2026 20:47:46 +0000Posted by Andrew Stitcher on Oct 28 Severity: low Affected versions: - Apache Qpid Proton C through 0.40.0 Description: A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accepts certificates that comply to this standard.https://seclists.org/oss-sec/2026/q4/431https://seclists.org/oss-sec/2026/q4/431oss-sec (seclists)Wed, 28 Oct 2026 20:46:00 +0000Posted by Andrew Stitcher on Oct 28 Severity: important Affected versions: - Apache Qpid Proton C through 0.40.0 Description: When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL frames. This allows authentication bypass. However there will be no user name set so the effects depend on hhttps://seclists.org/oss-sec/2026/q4/430https://seclists.org/oss-sec/2026/q4/430oss-sec (seclists)Wed, 28 Oct 2026 20:44:13 +0000Posted by Andrew Stitcher on Oct 28 Severity: important Affected versions: - Apache Qpid Proton C through 0.40.0 Description: A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash. This issue affects Apache Qpid Proton C: through 0.40.0. Users are recommended to upgrade to versiohttps://seclists.org/oss-sec/2026/q4/429https://seclists.org/oss-sec/2026/q4/429oss-sec (seclists)Wed, 28 Oct 2026 20:42:21 +0000Posted by Andrew Stitcher on Oct 28 Severity: important Affected versions: - Apache Qpid Proton C through 0.40.0 Description: When using the OpenSSL TLS implementation, both the pn_ssl_domain_set_trusted_ca_db() & pn_tls_config_set_trusted_certs() APIs added to rather than replaced the default system trust anchors. Leading to potentially truhttps://www.ransomware.live/id/VGhlIEFuZ2xpY2FuIEludGVybmF0aW9uYWwgU2Nob29sQEdsb2JhbCBTZWNyZXQgR3JvdXAhttps://www.ransomware.live/id/VGhlIEFuZ2xpY2FuIEludGVybmF0aW9uYWwgU2Nob29sQEdsb2JhbCBTZWNyZXQgR3JvdXARansomware live (RSS)Wed, 28 Oct 2026 20:24:06 +0000Country: Grenada.Spain | Website: aisj.co.il | Revenue: $11.1 Million | Industry: Primary and Secondary Education | Employees: 50-100 | Properties: 218 GB (257,960 Files, 28,378 Folders)https://github.com/mir7867/CVE-2026-41036-Quantum-Networks-Copy-repository-namehttps://github.com/mir7867/CVE-2026-41036-Quantum-Networks-Copy-repository-namePoC novos (GitHub)Wed, 28 Oct 2026 20:20:35 +0000Security research case study: CVE-2026-41036 authenticated command injection in Quantum Networks QN-I-470.https://github.com/Sable-Research/CVE-2026-101767-researchhttps://github.com/Sable-Research/CVE-2026-101767-researchPoC novos (GitHub)Wed, 28 Oct 2026 19:26:21 +0000Research notes on CVE-2026-101767 — unauthenticated vulnerability in Oracle Application Object Library (E-Business Suite)https://github.com/sachincool/cve-2026-84383-pochttps://github.com/sachincool/cve-2026-84383-pocPoC novos (GitHub)Wed, 28 Oct 2026 19:23:36 +0000https://github.com/kyos-public/keycloak-cve-2026-18963-hunthttps://github.com/kyos-public/keycloak-cve-2026-18963-huntPoC novos (GitHub)Wed, 28 Oct 2026 19:07:16 +0000Hunt for CVE-2026-18963 exploitation traces (Keycloak unauthenticated account takeover) in the Keycloak databasehttps://github.com/ChrisSub08/CVE-2026-XXXXX_SqlInjectionVulnerabilityOpenEMR8.4.0https://github.com/ChrisSub08/CVE-2026-XXXXX_SqlInjectionVulnerabilityOpenEMR8.4.0PoC novos (GitHub)Wed, 28 Oct 2026 19:04:20 +0000CVE-2026-XXXXX: SQL Injection Vulnerability in OpenEMR <8.5.0https://github.com/ricardojoserf/CVE-2026-63286https://github.com/ricardojoserf/CVE-2026-63286PoC novos (GitHub)Wed, 28 Oct 2026 18:45:33 +0000Exploit for CVE-2026-63286: Offline decryptor for AXIS Camera Station (ACS) credentialshttps://www.ransomware.live/id/UFFFIEdyb3VwQFBhbnplcghttps://www.ransomware.live/id/UFFFIEdyb3VwQFBhbnplcgRansomware live (RSS)Wed, 28 Oct 2026 18:26:50 +0000Founded in 1998, PQE Group provides technology solutions and compliance consulting services to the Life Sciences industry. The company is headquartered in Reggello, Florence. Note : The Full Data volume is coming as duplicati (dindex.zip.aes), Our Team with our Affiliates will try to enum the PassPhrase From the Target Network and Crack it with a Custom Pass lists and custom tools, We Also Gonna Shttps://seclists.org/oss-sec/2026/q4/428https://seclists.org/oss-sec/2026/q4/428oss-sec (seclists)Wed, 28 Oct 2026 18:21:16 +0000Posted by Robert Rothenberg on Oct 28 CVE-2026-116264 MIME::Field::ParamVal versions before 5.521 for Perl allow one invalid Content-Type parameter to hide the parameters after it, including the multipart boundary CVE-2026-116265 MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 conhttps://seclists.org/oss-sec/2026/q4/427https://seclists.org/oss-sec/2026/q4/427oss-sec (seclists)Wed, 28 Oct 2026 18:18:59 +0000Posted by Robert Rothenberg on Oct 28 CVE-2026-116131 HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts CVE-2026-116132 HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk CVE-2026-11613https://seclists.org/oss-sec/2026/q4/426https://seclists.org/oss-sec/2026/q4/426oss-sec (seclists)Wed, 28 Oct 2026 18:14:55 +0000Posted by Alan Coopersmith on Oct 28 https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-ch7p-g5pm-3gqx advises: https://research.jfrog.com/post/byte-debthttps://github.com/Venshell/copy-fail-CVE-2026-31431-aarch64https://github.com/Venshell/copy-fail-CVE-2026-31431-aarch64PoC novos (GitHub)Wed, 28 Oct 2026 18:07:38 +0000Linux 4.19 aarch64 PoC for CVE-2026-31431 (Copy Fail) - AF_ALG/authencesn page-cache writehttps://github.com/abraxas/CVE-2025-38502-Linux-LPEhttps://github.com/abraxas/CVE-2025-38502-Linux-LPEPoC novos (GitHub)Wed, 28 Oct 2026 18:01:43 +0000CVE-2025-38502 Linux LPE. BPF cgroup local storage OOB via tail calls. Affected kernels: 5.9–5.15.191, 5.16–6.1.150, 6.2–6.6.104, 6.7–6.12.45, 6.13–6.16.0; fixed in 5.15.192, 6.1.151, 6.6.105, 6.12.46https://unit42.paloaltonetworks.com/unwrapping-retail-cyber-threats/https://unit42.paloaltonetworks.com/unwrapping-retail-cyber-threats/Unit 42Wed, 28 Oct 2026 18:00:10 +0000Unit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend operations and customer trust. The post Unwrapping Retail Peak Season Cyber Threats appeared first on Unit 42 .https://github.com/jessoan/CVE-2025-5548https://github.com/jessoan/CVE-2025-5548PoC novos (GitHub)Wed, 28 Oct 2026 17:55:52 +0000CVE-2025-5548https://github.com/dkchaiv/CVE-2025-10035https://github.com/dkchaiv/CVE-2025-10035PoC novos (GitHub)Wed, 28 Oct 2026 17:51:24 +0000CVE-2025-10035 is a critical vulnerability in Fortra GoAnywhere MFT that may allow attackers to execute commands remotely on a vulnerable server.https://seclists.org/oss-sec/2026/q4/425https://seclists.org/oss-sec/2026/q4/425oss-sec (seclists)Wed, 28 Oct 2026 17:44:54 +0000Posted by Manikumar on Oct 28 Severity: important Affected versions: - Apache Kafka 0.11.0.0 through 4.1.2 - Apache Kafka 4.2.0 through 4.2.1 - Apache Kafka 4.3.0 through 4.3.1 Description: When a broker decodes a compressed record batch, the per-record decoder reads a declared body size from the decompressed stream and allocates a buffer ohttps://seclists.org/oss-sec/2026/q4/424https://seclists.org/oss-sec/2026/q4/424oss-sec (seclists)Wed, 28 Oct 2026 17:42:51 +0000Posted by Manikumar on Oct 28 Severity: important Affected versions: - Apache Kafka 3.2.0 through 4.1.2 - Apache Kafka 4.2.0 through 4.2.1 - Apache Kafka 4.3.0 through 4.3.1 Description: An authenticated Kafka principal with no authorization grants (not even ALTER_CONFIGS) can make a broker read a file or an environment variable from the brhttps://seclists.org/oss-sec/2026/q4/423https://seclists.org/oss-sec/2026/q4/423oss-sec (seclists)Wed, 28 Oct 2026 17:40:44 +0000Posted by Manikumar on Oct 28 Severity: moderate Affected versions: - Apache Kafka 2.4.0 before 4.2.2 - Apache Kafka 4.3.0 before 4.3.2 Description: Apache Kafka Connect has the /connector-plugins/{connector-type}/config/validate endpoint on its REST API to validate connector configurations. Apache Kafka Connect also support Configuration Phttps://seclists.org/oss-sec/2026/q4/422https://seclists.org/oss-sec/2026/q4/422oss-sec (seclists)Wed, 28 Oct 2026 17:38:38 +0000Posted by Manikumar on Oct 28 Severity: low Affected versions: - Apache Kafka 2.4.0 before 4.2.2 - Apache Kafka 4.3.0 before 4.3.2 Description: Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a separate listener from the main listeners property. Whttps://seclists.org/oss-sec/2026/q4/421https://seclists.org/oss-sec/2026/q4/421oss-sec (seclists)Wed, 28 Oct 2026 17:36:45 +0000Posted by Manikumar on Oct 28 Severity: low Affected versions: - Apache Kafka 1.1.0 through 4.1.2 - Apache Kafka 4.2.0 through 4.2.1 - Apache Kafka 4.3.0 through 4.3.1 Description: Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next() computed the next punctuation time as timestamp + (intervalsMissedhttps://seclists.org/oss-sec/2026/q4/420https://seclists.org/oss-sec/2026/q4/420oss-sec (seclists)Wed, 28 Oct 2026 17:34:54 +0000Posted by Manikumar on Oct 28 Severity: important Affected versions: - Apache Kafka 0.10.0.0 through 4.1.2 - Apache Kafka 4.2.0 through 4.2.1 - Apache Kafka 4.3.0 through 4.3.1 Description: Several Kafka deserialization paths read a size or count field from input data and use it directly to allocate an array, collection, or byte buffer, withttps://www.ransomware.live/id/TC4uLkBTaWxlbnRSYW5zb21Hcm91cAhttps://www.ransomware.live/id/TC4uLkBTaWxlbnRSYW5zb21Hcm91cARansomware live (RSS)Wed, 28 Oct 2026 17:34:09 +0000Redacted entry - full company name pending disclosure (FULL DATA TIMER active).https://seclists.org/oss-sec/2026/q4/419https://seclists.org/oss-sec/2026/q4/419oss-sec (seclists)Wed, 28 Oct 2026 17:33:02 +0000Posted by Manikumar on Oct 28 Severity: important Affected versions: - Apache Kafka 2.4.0 through 4.1.2 - Apache Kafka 4.2.0 through 4.2.1 - Apache Kafka 4.3.0 through 4.3.1 Description: Apache Kafka's code-generated readers for flexible protocol versions read a tagged-field count declared by the sender and retain a RawTaggedField objehttps://seclists.org/oss-sec/2026/q4/418https://seclists.org/oss-sec/2026/q4/418oss-sec (seclists)Wed, 28 Oct 2026 17:31:13 +0000Posted by Manikumar on Oct 28 Severity: moderate Affected versions: - Apache Kafka 3.7.0 through 4.1.2 - Apache Kafka 4.2.0 through 4.2.1 - Apache Kafka 4.3.0 Description: The broker-side PushTelemetry API (KIP-714) validates only the compressed size of a client's metrics payload against telemetry.max.bytes (default 1 MB) before decomphttps://www.ransomware.live/id/Tm9lbGtlciBhbmQgSHVsbEByaHlzaWRhhttps://www.ransomware.live/id/Tm9lbGtlciBhbmQgSHVsbEByaHlzaWRhRansomware live (RSS)Wed, 28 Oct 2026 16:59:06 +0000Noelker and Hull NHA-FULL � US ARCHITECTURE FIRM (est. 1971) - HEALTHCARE / SENIOR-LIVING DESIGN - COMPLETE INTERNAL FILE-SERVER - FRESH TO 2026No credentials in this lot (excluded by decision). Focus: identity and familypackages, payroll SQL, tax/bank pipes, litigation, seals & signatures, 26 GB mail.SUBJECT - Noelker and Hull Associates, Inc. (Chambersburg PA, est. 1971) + KAPClegacy (Frederhttps://www.ransomware.live/id/SGF1aGluY29AcGF5bG9hZAhttps://www.ransomware.live/id/SGF1aGluY29AcGF5bG9hZARansomware live (RSS)Wed, 28 Oct 2026 14:49:50 +0000Hauhinco is a German manufacturer of high-pressure water hydraulics. The company produces plunger pumps, valves, and pump stations for mining and industry. It also develops rail-bound shunting systems for automated material handling.https://www.ransomware.live/id/TWFyYnJlIERlc2lnbkBwYXlsb2Fkhttps://www.ransomware.live/id/TWFyYnJlIERlc2lnbkBwYXlsb2FkRansomware live (RSS)Wed, 28 Oct 2026 14:48:35 +0000Marbre Design is a French company specializing in the processing of natural stone, marble, granite, and composite materials. The enterprise custom-manufactures kitchen countertops, bathroom fixtures, fireplace surrounds, and interior architectural elements. Its core operations focus on precision cutting, slab polishing, and the on-site installation of finished products.https://github.com/axisops/CVE-2025-29927https://github.com/axisops/CVE-2025-29927PoC novos (GitHub)Wed, 28 Oct 2026 13:38:04 +0000Next.js Middleware Bypass CVE-2025-29927 Mitigation work (Ansible Role)https://www.ransomware.live/id/VHJ1bGlmZUBha2lyYQhttps://www.ransomware.live/id/VHJ1bGlmZUBha2lyYQRansomware live (RSS)Wed, 28 Oct 2026 13:37:58 +0000Trulife is an internationally recognized company with over 60 years of experience in the develo pment and manufacture of specialized healthcare and consumer products. Their extensive product range includes breastcare solutions, orthotics, lower limb prosthetics, walking aids, and press ure care products. We will upload 68gb of corporate data soon. Detailed employee information (passport scans, Dhttps://www.ransomware.live/id/Um9iZXJ0cyBDb25zdWx0aW5nIFNlcnZpY2VzQGFraXJhhttps://www.ransomware.live/id/Um9iZXJ0cyBDb25zdWx0aW5nIFNlcnZpY2VzQGFraXJhRansomware live (RSS)Wed, 28 Oct 2026 13:37:39 +0000RCS is a full-service engineering firm specializing in Construction Materials Testing, Construc tion Engineering and Inspection (CEI), and QA/QC services, founded in 2013. With over 60 years of combined FDOT experience, RCS provides high-quality professional services to clients in road way and bridge construction projects throughout Central Florida. We will upload 28gb of corporate data soon. Dehttps://www.ransomware.live/id/RVdNIEdyb3VwQGF1cm9yYQhttps://www.ransomware.live/id/RVdNIEdyb3VwQGF1cm9yYQRansomware live (RSS)Wed, 28 Oct 2026 13:00:09 +0000[fashion] EWM Group — the parent group behind Bonmarché, Edinburgh Woollen Mill, and Peacocks, three of the UK's best-known value fashion chains. The exposed material includes: 503,878 loyalty programme member records — full name, home address, date of birth, phone, mobile, email, loyalty card number, and transaction history spanning 2000–2026. ~21,000 employee records — salary, National Inhttps://www.ransomware.live/id/SW5zdXJhbmNlIFNlcnZpY2VzQGFraXJhhttps://www.ransomware.live/id/SW5zdXJhbmNlIFNlcnZpY2VzQGFraXJhRansomware live (RSS)Wed, 28 Oct 2026 12:58:43 +0000CHAT Insurance offers a comprehensive range of insurance products including commercial, home, a uto, and travel insurance. Established in 2015, the company has expanded to 10 offices and serv es over 20,000 policyholders across Ontario. We will upload 112gb of corporate data soon. Employee information (passports, DLs, birth certs and other personal docs), projects (client personal information anhttps://www.ransomware.live/id/RmVtZXJuIExpbmsgQ29udHJhY3RvcnNAQmFycmFjdWRhhttps://www.ransomware.live/id/RmVtZXJuIExpbmsgQ29udHJhY3RvcnNAQmFycmFjdWRhRansomware live (RSS)Wed, 28 Oct 2026 12:50:39 +0000Femern Link Contractors (FLC) is an international joint venture responsible for designing and building the Fehmarnbelt tunnel between Denmark and Germany. Its work includes the immersed tunnel, tunnel portals and ramps, and the factory that produces the tunnel elements. During the attack, we bypassed EDR and infiltrated infrastructure. Since September 17, 2026, we have had full access to all confihttps://github.com/tyie949/cve-2025-27740https://github.com/tyie949/cve-2025-27740PoC novos (GitHub)Wed, 28 Oct 2026 10:11:32 +0000Proof-of-concept exploit for CVE-2025-27740 Subject Key Identifier injection in Active Directory Certificate Serviceshttps://www.ransomware.live/id/TWVsZWdoeSBBdXRvbW90aXZlICYgQ2llLiBHbWJIQGF1cm9yYQhttps://www.ransomware.live/id/TWVsZWdoeSBBdXRvbW90aXZlICYgQ2llLiBHbWJIQGF1cm9yYQRansomware live (RSS)Wed, 28 Oct 2026 10:05:41 +0000[automotive] The exposed material includes: Passport/visa/student-admission dossiers Tesla Model Y/Opal tooling, CAD and DFM tree Employee contract and HR folders <redacted> MEB/BMW NCAR metrology and plant-layout trees PLC/SPS/robot backups and cross-reference DBs TISAX/IATF audit and corrective-action records Restricted management meeting/WLAN record <redacted> Browser profile SQLithttps://securelist.com/intelbras-camera-vulnerability/121131/https://securelist.com/intelbras-camera-vulnerability/121131/SecurelistWed, 28 Oct 2026 10:00:18 +0000https://www.ransomware.live/id/Q29tcGFueSAjMTEyQE4wbghttps://www.ransomware.live/id/Q29tcGFueSAjMTEyQE4wbgRansomware live (RSS)Wed, 28 Oct 2026 07:53:44 +0000telecommunications services · Malaysia | [PENDING EXPOSURE: · settlement window open]https://www.ransomware.live/id/d2FneXUueHl6IHVuZmFpcm5lc3NAV2hpdGVhcm1vcghttps://www.ransomware.live/id/d2FneXUueHl6IHVuZmFpcm5lc3NAV2hpdGVhcm1vcgRansomware live (RSS)Wed, 28 Oct 2026 02:10:42 +0000wagyu.xyz runs two rigged systems, both proven by the evidence: 1. Rigged coinflip. The site advertises "48% win chance, 4% house edge" (coinflip-public-claim.txt, coinflip-public-terms.json), but server settings aimed for a 4.00% expected edge and the distribution of outcomes is measurably shifted against players: of 2,852 provably-fair-verified flips, 1,417 fell in the 0-48000 band vehttps://www.ransomware.live/id/RWNoby5jb21AV2hpdGVhcm1vcghttps://www.ransomware.live/id/RWNoby5jb21AV2hpdGVhcm1vcgRansomware live (RSS)Wed, 28 Oct 2026 02:10:02 +0000Echo Global Logistics is a Chicago-based, technology-enabled third-party logistics provider offering freight brokerage and integrated supply chain services, including truckload, LTL, warehousing, and cross-border shipping across North America. We hold Echo Global Logistics data: 2.06M claims rows, 153,727 freight loads, 261,440 quotes ($705M buy volume), 136,273 tenderings, 59,607 tracking recordhttps://www.ransomware.live/id/UnlkZXJAV2hpdGVhcm1vcghttps://www.ransomware.live/id/UnlkZXJAV2hpdGVhcm1vcgRansomware live (RSS)Wed, 28 Oct 2026 01:09:16 +0000Ryder is a Fortune 500 transportation and supply chain management company providing fleet management, dedicated transportation, and logistics solutions. What we hold: 18.75M rows, 328 CSVs, consumer names, phones, emails, driver/associate PII, cleartext API keys, LMS credentials, FTP/telematics configs from RyderView, RLM, EFT. Our demand is only $20M in BTC... i swear. Samples can be found behttps://nvd.nist.gov/vuln/detail/CVE-2026-41709https://nvd.nist.gov/vuln/detail/CVE-2026-41709CISA KEV (explorado in the wild)Wed, 28 Oct 2026 00:00:00 +0000Ação: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evalhttps://nvd.nist.gov/vuln/detail/CVE-2026-46300https://nvd.nist.gov/vuln/detail/CVE-2026-46300CISA KEV (explorado in the wild)Wed, 28 Oct 2026 00:00:00 +0000Ação: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evalhttps://nvd.nist.gov/vuln/detail/CVE-2026-87902https://nvd.nist.gov/vuln/detail/CVE-2026-87902EPSS (até 2026-10-28)Wed, 28 Oct 2026 00:00:00 +0000risco de exploração alto ou subiu no diahttps://nvd.nist.gov/vuln/detail/CVE-2026-93616https://nvd.nist.gov/vuln/detail/CVE-2026-93616EPSS (até 2026-10-28)Wed, 28 Oct 2026 00:00:00 +0000risco de exploração alto ou subiu no diahttps://nvd.nist.gov/vuln/detail/CVE-2026-9082https://nvd.nist.gov/vuln/detail/CVE-2026-9082EPSS (até 2026-10-28)Wed, 28 Oct 2026 00:00:00 +0000risco de exploração alto ou subiu no diahttps://nvd.nist.gov/vuln/detail/CVE-2026-88771https://nvd.nist.gov/vuln/detail/CVE-2026-88771EPSS (até 2026-10-28)Wed, 28 Oct 2026 00:00:00 +0000risco de exploração alto ou subiu no diahttps://nvd.nist.gov/vuln/detail/CVE-2026-88772https://nvd.nist.gov/vuln/detail/CVE-2026-88772EPSS (até 2026-10-28)Wed, 28 Oct 2026 00:00:00 +0000risco de exploração alto ou subiu no diahttps://nvd.nist.gov/vuln/detail/CVE-2026-9198https://nvd.nist.gov/vuln/detail/CVE-2026-9198EPSS (até 2026-10-28)Wed, 28 Oct 2026 00:00:00 +0000risco de exploração alto ou subiu no diahttps://nvd.nist.gov/vuln/detail/CVE-2026-86950https://nvd.nist.gov/vuln/detail/CVE-2026-86950EPSS (até 2026-10-28)Wed, 28 Oct 2026 00:00:00 +0000risco de exploração alto ou subiu no diahttps://nvd.nist.gov/vuln/detail/CVE-2026-94127https://nvd.nist.gov/vuln/detail/CVE-2026-94127EPSS (até 2026-10-28)Wed, 28 Oct 2026 00:00:00 +0000risco de exploração alto ou subiu no diahttps://nvd.nist.gov/vuln/detail/CVE-2026-8732https://nvd.nist.gov/vuln/detail/CVE-2026-8732EPSS (até 2026-10-28)Wed, 28 Oct 2026 00:00:00 +0000risco de exploração alto ou subiu no diahttps://www.ransomware.live/id/aHR0cHM6Ly90Lm1lL3doaXRlYXJtb3J4ZEBXaGl0ZWFybW9yhttps://www.ransomware.live/id/aHR0cHM6Ly90Lm1lL3doaXRlYXJtb3J4ZEBXaGl0ZWFybW9yRansomware live (RSS)Tue, 27 Oct 2026 23:18:42 +0000Hi, join our telegram channel for fun.. i guess https://t.me/whitearmorxdhttps://www.ransomware.live/id/TWFjaGVsZW4gKEJlbGdpdW0pQHJoeXNpZGEhttps://www.ransomware.live/id/TWFjaGVsZW4gKEJlbGdpdW0pQHJoeXNpZGERansomware live (RSS)Tue, 27 Oct 2026 22:25:47 +0000Machelen (Belgium) Machelen (Belgium) - municipal and social welfare (OCMW) file servers1.3 million files, ~2.9 TB. Working copy + backup copy (lawer2/lawer3). Language: Dutch, partly French.Contents:Social welfare and migration service client files: passports, ID cards, residence permits, sick notes.WZC nursing home: medical files, staff HR dossiers, workplace accidents.Civil status records (birthttps://www.ransomware.live/id/VFdJQ0UgU1JMQGVtcGVyYWRvcghttps://www.ransomware.live/id/VFdJQ0UgU1JMQGVtcGVyYWRvcgRansomware live (RSS)Tue, 27 Oct 2026 21:22:05 +0000Сompany from the Republic of San Marino, associated with the production and sale of fashion clothing and accessories. Archived personal and corporate data of employees and customers. [Sector: Manufacturing, Finance]https://www.ransomware.live/id/VGFpbG9ybWFkZSBMb2dpc3RpY3NAcGxheQhttps://www.ransomware.live/id/VGFpbG9ybWFkZSBMb2dpc3RpY3NAcGxheQRansomware live (RSS)Tue, 27 Oct 2026 19:51:56 +0000Belgiumhttps://www.ransomware.live/id/Q29hc3QgMiBDb2FzdEBwbGF5https://www.ransomware.live/id/Q29hc3QgMiBDb2FzdEBwbGF5Ransomware live (RSS)Tue, 27 Oct 2026 19:51:00 +0000United Stateshttps://www.ransomware.live/id/VlBDIEJ1aWxkZXJzQHBsYXkhttps://www.ransomware.live/id/VlBDIEJ1aWxkZXJzQHBsYXkRansomware live (RSS)Tue, 27 Oct 2026 19:50:08 +0000United Stateshttps://www.ransomware.live/id/VVBEQVRFOiBVTk1AQllPRAhttps://www.ransomware.live/id/VVBEQVRFOiBVTk1AQllPRARansomware live (RSS)Tue, 27 Oct 2026 18:50:58 +0000We are offering the decryption key for the remaining of locked devices for free (ONLY for the hospital sector) we did not know that it was running machines related to assisting patients in real-time, (we would keep it locked if it was appointments, patient information + research data only), we are still going to keep the data, but we will provide the decryption key for the hospital sector only. Fehttps://www.ransomware.live/id/SHlnaWVuYUBwbGF5https://www.ransomware.live/id/SHlnaWVuYUBwbGF5Ransomware live (RSS)Tue, 27 Oct 2026 18:27:11 +0000United Stateshttps://www.ransomware.live/id/TW9uZXkgQ29uY2VwdHMgQ2FwaXRhbEBwbGF5https://www.ransomware.live/id/TW9uZXkgQ29uY2VwdHMgQ2FwaXRhbEBwbGF5Ransomware live (RSS)Tue, 27 Oct 2026 18:26:34 +0000United Stateshttps://www.ransomware.live/id/TWljcm9TZWFyY2hAcGxheQhttps://www.ransomware.live/id/TWljcm9TZWFyY2hAcGxheQRansomware live (RSS)Tue, 27 Oct 2026 17:30:26 +0000United Stateshttps://www.ransomware.live/id/UUxDQHBsYXkhttps://www.ransomware.live/id/UUxDQHBsYXkRansomware live (RSS)Tue, 27 Oct 2026 17:29:53 +0000United Stateshttps://github.com/Ghost-Bx1/Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651https://github.com/Ghost-Bx1/Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651PoC novos (GitHub)Tue, 27 Oct 2026 17:26:16 +0000PoC e exploits para CVE-2026-14440 (Universal SSL CAA Bypass), CVE-2026-3125 (OpenNext SSRF), CVE-2025-0651 (WARP Windows Privesc) | By Gh0st-Bx1https://github.com/Ghost-Bx1/TomcatPartialPUT-CVE-2025-24813https://github.com/Ghost-Bx1/TomcatPartialPUT-CVE-2025-24813PoC novos (GitHub)Tue, 27 Oct 2026 16:22:33 +0000PoC and exploit for CVE-2025-24813 - Apache Tomcat Partial PUT RCE (CVSS 9.8)https://www.ransomware.live/id/d2FneXUueHl6QFdoaXRlYXJtb3Ihttps://www.ransomware.live/id/d2FneXUueHl6QFdoaXRlYXJtb3IRansomware live (RSS)Tue, 27 Oct 2026 15:06:27 +0000Wagyu.xyz is a cross-chain swap platform that allows users to exchange cryptocurrencies for native Monero (XMR) without requiring identity verification (KYC) . It routes orders through Hyperliquid's order book for execution . We hold 38,628 orders and 10,139 IPs from wagyu.xyz: wallets, sessions, fingerprints, countries, $907M XMR-heavy volume. Our demand is only $5,000,000... hehe Sampleshttps://www.ransomware.live/id/R1JVUE8gUEVUUk9JTEBkaXJld29sZghttps://www.ransomware.live/id/R1JVUE8gUEVUUk9JTEBkaXJld29sZgRansomware live (RSS)Tue, 27 Oct 2026 14:11:50 +0000Oil and Gashttps://www.ransomware.live/id/UkNPQS0gUmVnZW50IENocmlzdGlhbiBPbmxpbmUgQWNhZGVteUBCb29iYSBQcm9qZWN0https://www.ransomware.live/id/UkNPQS0gUmVnZW50IENocmlzdGlhbiBPbmxpbmUgQWNhZGVteUBCb29iYSBQcm9qZWN0Ransomware live (RSS)Tue, 27 Oct 2026 13:52:40 +0000Hospitals and Health Care Stolen data: 1 GB.https://www.ransomware.live/id/S2VyY2tzdGVkZSB2endAQm9vYmEgUHJvamVjdAhttps://www.ransomware.live/id/S2VyY2tzdGVkZSB2endAQm9vYmEgUHJvamVjdARansomware live (RSS)Tue, 27 Oct 2026 13:52:20 +0000Hospitals and Health Care Stolen data: 10 GB.https://www.ransomware.live/id/QkFTUyBNZWRpY2FsIEdyb3VwQEJvb2JhIFByb2plY3Qhttps://www.ransomware.live/id/QkFTUyBNZWRpY2FsIEdyb3VwQEJvb2JhIFByb2plY3QRansomware live (RSS)Tue, 27 Oct 2026 13:51:59 +0000Medical Practices Stolen data: 100 GB.https://www.ransomware.live/id/SHVkc29uIFJpdmVyIE11c2V1bUBCb29iYSBQcm9qZWN0https://www.ransomware.live/id/SHVkc29uIFJpdmVyIE11c2V1bUBCb29iYSBQcm9qZWN0Ransomware live (RSS)Tue, 27 Oct 2026 13:51:38 +0000Museums, Historical Sites, and Zoos Stolen data: 115 GB.https://www.ransomware.live/id/SG9yaXpvbiBFeWUgU3BlY2lhbGlzdHMgJiBMQVNJSyBDZW50ZXJAQm9vYmEgUHJvamVjdAhttps://www.ransomware.live/id/SG9yaXpvbiBFeWUgU3BlY2lhbGlzdHMgJiBMQVNJSyBDZW50ZXJAQm9vYmEgUHJvamVjdARansomware live (RSS)Tue, 27 Oct 2026 13:51:17 +0000Medical Practices Stolen data: 121 GB.https://www.ransomware.live/id/QWVzdGhldGljIFNwZWNpYWx0eSBDZW50cmVAQm9vYmEgUHJvamVjdAhttps://www.ransomware.live/id/QWVzdGhldGljIFNwZWNpYWx0eSBDZW50cmVAQm9vYmEgUHJvamVjdARansomware live (RSS)Tue, 27 Oct 2026 12:51:50 +0000Medical Practices Stolen data: 22GB.https://www.ransomware.live/id/Q2l0eSBvZiBCaWcgU3ByaW5nQEJvb2JhIFByb2plY3Qhttps://www.ransomware.live/id/Q2l0eSBvZiBCaWcgU3ByaW5nQEJvb2JhIFByb2plY3QRansomware live (RSS)Tue, 27 Oct 2026 12:51:29 +0000Government Administration Stolen data: 151 GB.https://www.ransomware.live/id/S0lORyBGQU1JTFkgTUVESUNBTEBCb29iYSBQcm9qZWN0https://www.ransomware.live/id/S0lORyBGQU1JTFkgTUVESUNBTEBCb29iYSBQcm9qZWN0Ransomware live (RSS)Tue, 27 Oct 2026 12:51:09 +0000Hospitals and Health Care Stolen data: 67 GB.https://www.ransomware.live/id/Q2hhcnRlciBUb3duc2hpcCBvZiBDb21tZXJjZUBCb29iYSBQcm9qZWN0https://www.ransomware.live/id/Q2hhcnRlciBUb3duc2hpcCBvZiBDb21tZXJjZUBCb29iYSBQcm9qZWN0Ransomware live (RSS)Tue, 27 Oct 2026 12:50:48 +0000Government Administration Stolen data: 155 GB.https://www.ransomware.live/id/UmVnZW50IENocmlzdGlhbiBPbmxpbmUgQWNhZGVteUBCb29iYSBQcm9qZWN0https://www.ransomware.live/id/UmVnZW50IENocmlzdGlhbiBPbmxpbmUgQWNhZGVteUBCb29iYSBQcm9qZWN0Ransomware live (RSS)Tue, 27 Oct 2026 12:50:26 +0000Hospitals and Health Care Stolen data: 26 GB.https://www.ransomware.live/id/R3JlZW5iZXJnRmFycm93QGF1cm9yYQhttps://www.ransomware.live/id/R3JlZW5iZXJnRmFycm93QGF1cm9yYQRansomware live (RSS)Tue, 27 Oct 2026 12:11:30 +0000[architecture] GreenbergFarrow — a respected ESOP-owned architecture firm headquartered in Atlanta, Georgia with offices in Charlotte, Dallas, Los Angeles, New York, Myrtle Beach, and international operations in Mexico, Colombia, India, and Canada. The dataset spans three major divisions: Client Libraries (152 client folders, A–F): Proprietary architectural designs, prototypes, and specificationhttps://www.ransomware.live/id/QnJpc3RvbCBDaXR5IENvdW5jaWxAV2FsbHN0cmVldAhttps://www.ransomware.live/id/QnJpc3RvbCBDaXR5IENvdW5jaWxAV2FsbHN0cmVldARansomware live (RSS)Tue, 27 Oct 2026 12:08:39 +0000Bristol City Council is the local authority for Bristol, England. It provides public services for residents, businesses, and visitors, including council tax and benefits, housing, schools, social care, waste and recycling, transport, planning, parks, and librarieshttps://securelist.com/cloud-infrastructure-isolation-bypass/121609/https://securelist.com/cloud-infrastructure-isolation-bypass/121609/SecurelistTue, 27 Oct 2026 12:00:19 +0000https://www.ransomware.live/id/TnVWaXN0YSBGZWRlcmFsIENyZWRpdCBVbmlvbkBxaWxpbghttps://www.ransomware.live/id/TnVWaXN0YSBGZWRlcmFsIENyZWRpdCBVbmlvbkBxaWxpbgRansomware live (RSS)Tue, 27 Oct 2026 10:38:24 +0000N/Ahttps://www.ransomware.live/id/SGF3YWlpIExhdyBFbmZvcmNlbWVudCBGZWRyYWwgQ3JlZGl0IFVuaW9uQHFpbGluhttps://www.ransomware.live/id/SGF3YWlpIExhdyBFbmZvcmNlbWVudCBGZWRyYWwgQ3JlZGl0IFVuaW9uQHFpbGluRansomware live (RSS)Tue, 27 Oct 2026 10:37:43 +0000N/Ahttps://seclists.org/fulldisclosure/2026/Oct/48https://seclists.org/fulldisclosure/2026/Oct/48full disclosureTue, 27 Oct 2026 07:31:56 +0000Posted by Apple Product Security via Fulldisclosure on Oct 27 APPLE-SA-10-26-2026-5 macOS Tahoe 26.7.2 macOS Tahoe 26.7.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149522 . Apple maintains a Security Releases page at <a rel="https://seclists.org/fulldisclosure/2026/Oct/47https://seclists.org/fulldisclosure/2026/Oct/47full disclosureTue, 27 Oct 2026 07:31:54 +0000Posted by Apple Product Security via Fulldisclosure on Oct 27 APPLE-SA-10-26-2026-10 Safari 27.2 Safari 27.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149527 . Apple maintains a Security Releases page at <a rel="nofollow" hrehttps://seclists.org/fulldisclosure/2026/Oct/46https://seclists.org/fulldisclosure/2026/Oct/46full disclosureTue, 27 Oct 2026 07:31:53 +0000Posted by Apple Product Security via Fulldisclosure on Oct 27 APPLE-SA-10-26-2026-9 visionOS 27.2 visionOS 27.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149526 . Apple maintains a Security Releases page at <a rel="nofollow"https://seclists.org/fulldisclosure/2026/Oct/45https://seclists.org/fulldisclosure/2026/Oct/45full disclosureTue, 27 Oct 2026 07:31:52 +0000Posted by Apple Product Security via Fulldisclosure on Oct 27 APPLE-SA-10-26-2026-8 watchOS 27.2 watchOS 27.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149525 . Apple maintains a Security Releases page at <a rel="nofollow" hrhttps://seclists.org/fulldisclosure/2026/Oct/44https://seclists.org/fulldisclosure/2026/Oct/44full disclosureTue, 27 Oct 2026 07:31:50 +0000Posted by Apple Product Security via Fulldisclosure on Oct 27 APPLE-SA-10-26-2026-7 tvOS 27.2 tvOS 27.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149524 . Apple maintains a Security Releases page at <a rel="nofollow" href="hthttps://seclists.org/fulldisclosure/2026/Oct/43https://seclists.org/fulldisclosure/2026/Oct/43full disclosureTue, 27 Oct 2026 07:31:49 +0000Posted by Apple Product Security via Fulldisclosure on Oct 27 APPLE-SA-10-26-2026-6 macOS Sequoia 15.8.2 macOS Sequoia 15.8.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149523 . Apple maintains a Security Releases page at <a rhttps://www.ransomware.live/id/Q29tcGFueSAjMTExQE4wbghttps://www.ransomware.live/id/Q29tcGFueSAjMTExQE4wbgRansomware live (RSS)Tue, 27 Oct 2026 06:24:08 +0000retail and facility services · United Arab Emirates | [PENDING EXPOSURE: · The complete payroll ledger, employee records and identity document archive of a UAE services group are held.]https://www.ransomware.live/id/T1IgVGVjaG5vbG9neUBldmVyZXN0https://www.ransomware.live/id/T1IgVGVjaG5vbG9neUBldmVyZXN0Ransomware live (RSS)Tue, 27 Oct 2026 05:54:22 +0000[AI generated] N/Ahttps://www.ransomware.live/id/QnVycmlzICYgTWFjT21iZXJAZXZlcmVzdAhttps://www.ransomware.live/id/QnVycmlzICYgTWFjT21iZXJAZXZlcmVzdARansomware live (RSS)Tue, 27 Oct 2026 04:33:27 +0000[AI generated] N/A I don't have reliable, verifiable information about a company called "Burris & MacOmber." I'm not able to confirm its existence, industry, operations, or location, and providing fabricated details would be inaccurate and potentially misleading for threat intelligence purposes. If you have additional context or source material about this entity, I'dhttps://www.ransomware.live/id/RW5lcmd5IFN0b3JhZ2UgVGVybWluYWwgaW4gU2luZ2Fwb3JlQGV2ZXJlc3Qhttps://www.ransomware.live/id/RW5lcmd5IFN0b3JhZ2UgVGVybWluYWwgaW4gU2luZ2Fwb3JlQGV2ZXJlc3QRansomware live (RSS)Tue, 27 Oct 2026 04:32:51 +0000[AI generated] N/Ahttps://www.ransomware.live/id/UG9pbnQgUm9ib3RpY3NAZXZlcmVzdAhttps://www.ransomware.live/id/UG9pbnQgUm9ib3RpY3NAZXZlcmVzdARansomware live (RSS)Tue, 27 Oct 2026 04:32:17 +0000[AI generated] N/A I don't have verified, reliable information about a company specifically named "Point Robotics" to confidently describe its operations, industry focus, or country of headquarters. Providing details without solid confirmation could result in inaccurate threat intelligence. If you have additional context—such as a sector, location, or related aliases—I can try agaihttps://www.ransomware.live/id/TmF0dXp6aUBldmVyZXN0https://www.ransomware.live/id/TmF0dXp6aUBldmVyZXN0Ransomware live (RSS)Tue, 27 Oct 2026 04:31:41 +0000[AI generated] Natuzzi S.p.A. is an Italian manufacturer and distributor of furniture, specializing in leather and fabric upholstered sofas, chairs, and home furnishings. Founded in 1959 and headquartered in Santeramo in Colle, Italy, the company operates in the home furniture and interior design industry. Natuzzi designs, produces, and markets its products globally, selling through its own brandehttps://www.ransomware.live/id/VEVDTkEgSUNFQGV2ZXJlc3Qhttps://www.ransomware.live/id/VEVDTkEgSUNFQGV2ZXJlc3QRansomware live (RSS)Tue, 27 Oct 2026 04:31:06 +0000[AI generated] N/Ahttps://www.ransomware.live/id/TWVkaVNvbHV0aW9uQGV2ZXJlc3Qhttps://www.ransomware.live/id/TWVkaVNvbHV0aW9uQGV2ZXJlc3QRansomware live (RSS)Tue, 27 Oct 2026 04:30:31 +0000[AI generated] MediSolution was a Canadian software company based in Montreal, Quebec, specializing in enterprise resource planning and management software solutions for the public sector, including healthcare, local government, and education institutions. It provided financial management, human resources, and payroll software systems. The company operated in the enterprise software and informatiohttps://www.ransomware.live/id/U2xlZXBFeCBMYWJSZXRyaWV2ZXJAZXZlcmVzdAhttps://www.ransomware.live/id/U2xlZXBFeCBMYWJSZXRyaWV2ZXJAZXZlcmVzdARansomware live (RSS)Tue, 27 Oct 2026 04:29:56 +0000[AI generated] N/A I don't have reliable information about a company called "SleepEx LabRetriever." This does not correspond to any organization I can verify, and the name's unusual construction suggests it may be fictional, a test query, or a misspelling. I'd rather report this than fabricate details about its industry, operations, or country.https://www.ransomware.live/id/QW50YWggSGVhbHRoQ2FyZSBHcm91cEBjcnlwdG8yNAhttps://www.ransomware.live/id/QW50YWggSGVhbHRoQ2FyZSBHcm91cEBjcnlwdG8yNARansomware live (RSS)Tue, 27 Oct 2026 04:11:37 +0000Antah Healthcare Group (AHCG) is one of Malaysia's leading integrated healthcare distribution and commercial partners, specializing in the nationwide marketing, sales, clinical regulatory support, and supply chain logistics of pharmaceuticals, medical equipment, and consumable products to hospitals and clinics.We successfully infiltrated AHCG's network and exfiltrated over 500 GB of highhttps://www.ransomware.live/id/REFURU0sIEluYy5AY3J5cHRvMjQhttps://www.ransomware.live/id/REFURU0sIEluYy5AY3J5cHRvMjQRansomware live (RSS)Tue, 27 Oct 2026 04:11:17 +0000Once the timer reaches zero, all exfiltrated data will be published in full.https://www.ransomware.live/id/Z2FtYmxpbmdsb3JlQFdoaXRlYXJtb3Ihttps://www.ransomware.live/id/Z2FtYmxpbmdsb3JlQFdoaXRlYXJtb3IRansomware live (RSS)Tue, 27 Oct 2026 04:05:36 +0000Verification for Gamblinglore.comhttps://www.ransomware.live/id/VmVyaWZpY2F0aW9uQFdoaXRlYXJtb3Ihttps://www.ransomware.live/id/VmVyaWZpY2F0aW9uQFdoaXRlYXJtb3IRansomware live (RSS)Tue, 27 Oct 2026 03:07:40 +0000Verification for Gamblinglore.comhttps://www.ransomware.live/id/enpxLXRlc3RAVUxvc2Uhttps://www.ransomware.live/id/enpxLXRlc3RAVUxvc2URansomware live (RSS)Tue, 27 Oct 2026 01:08:42 +0000Country: c | Status: Salehttps://www.ransomware.live/id/cHJvYmUtMDExNjM3Y2FiYmY5NDA3Ni1AVUxvc2Uhttps://www.ransomware.live/id/cHJvYmUtMDExNjM3Y2FiYmY5NDA3Ni1AVUxvc2URansomware live (RSS)Tue, 27 Oct 2026 01:08:22 +0000Country: zz | Status: Publichttps://github.com/DeathShotXD/CVE-2025-52691-APT-PoChttps://github.com/DeathShotXD/CVE-2025-52691-APT-PoCPoC novos (GitHub)Tue, 27 Oct 2026 00:40:00 +0000An enhanced proof-of-concept exploit for CVE-2025-52691 (SmarterMail Arbitrary File Upload RCE) with APT-level features like stealth obfuscation, persistence, exfiltration, and interactive mode. For ehttps://www.ransomware.live/id/WmhpdG8gVGVjaG5vbG9neUBkcmFnb25mb3JjZQhttps://www.ransomware.live/id/WmhpdG8gVGVjaG5vbG9neUBkcmFnb25mb3JjZQRansomware live (RSS)Tue, 27 Oct 2026 00:14:02 +0000Provider and developer of smart logistics solutions and autonomous driving systems intended to serve the vehicle industry. The company develops intelligent vehicle software and hardware system for the commercial vehicle industry, committing to making transportation and logistics more intelligent and safer.https://projectzero.google/2026/10/fuzzing-v-AI.htmlhttps://projectzero.google/2026/10/fuzzing-v-AI.htmlProject ZeroTue, 27 Oct 2026 00:00:00 +0000Summary Project Zero compared two automated tools used by Google to find vulnerabilities in Chrome’s JavaScript engine, V8, on a regular basis. Fuzzilli is a generative JavaScript engine fuzzer and BigSleep is an LLM-based bug finding system. In the past six months, BigSleep found more vulnerabilities than Fuzzilli (45 versus 37) with a 25% overlap in the specific bugs reported. Since this comparihttps://nvd.nist.gov/vuln/detail/CVE-2026-48356https://nvd.nist.gov/vuln/detail/CVE-2026-48356CISA KEV (explorado in the wild)Tue, 27 Oct 2026 00:00:00 +0000Ação: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evalhttps://nvd.nist.gov/vuln/detail/CVE-2026-111497https://nvd.nist.gov/vuln/detail/CVE-2026-111497CISA KEV (explorado in the wild)Tue, 27 Oct 2026 00:00:00 +0000Ação: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evalhttps://www.ransomware.live/id/TW9ycmlzb24gQ29oZW5AU2lsZW50UmFuc29tR3JvdXAhttps://www.ransomware.live/id/TW9ycmlzb24gQ29oZW5AU2lsZW50UmFuc29tR3JvdXARansomware live (RSS)Mon, 26 Oct 2026 23:07:56 +0000[AI generated] Morrison Cohen LLP is a United States law firm headquartered in New York City. It provides legal services across practice areas including corporate law, litigation, bankruptcy and restructuring, real estate, intellectual property, and white-collar defense. The firm serves corporate clients, financial institutions, and individuals. It operates within the legal services industry, primhttps://www.ransomware.live/id/QWZmbGVsb3VAZW1wZXJhZG9yhttps://www.ransomware.live/id/QWZmbGVsb3VAZW1wZXJhZG9yRansomware live (RSS)Mon, 26 Oct 2026 21:52:29 +0000Alain Afflelou is a leading European franchisor of optical and hearing aid products, founded in France in 1972. The company operates a robust network of over 1,500 stores across 20 countries, driven by aggressive marketing innovations like its famous "Tchin-Tchin" multi-pair offer. Key Figures • Network Revenue: €1.13 billion (TTC) for the fiscal year ending July 2025 • Corporate Revenhttps://www.ransomware.live/id/VW5pdmVyc2l0eSBvZiBOZXcgTWV4aWNvQEJZT0Qhttps://www.ransomware.live/id/VW5pdmVyc2l0eSBvZiBOZXcgTWV4aWNvQEJZT0QRansomware live (RSS)Mon, 26 Oct 2026 20:52:51 +000036,000 Machines Compromised, both AD forests (Main Campus + Hospital Sector(with appointments, patient information + research)) With GPOs, Two Oracle databases, every student + employee PII (including SSNs), research information, entire Entra Tenant, Oracle HR + Payroll + Banner Student Records, Internal Emails, Cerner EHR rosters. This is your entire network and infrastructure compromised, the enhttps://www.ransomware.live/id/TUlTQyBHcm91cEByaHlzaWRhhttps://www.ransomware.live/id/TUlTQyBHcm91cEByaHlzaWRhRansomware live (RSS)Mon, 26 Oct 2026 20:27:18 +0000MISC Group Incorporated in 1968, MISC Group is a world leading provider of international energy-related maritime solutions and services.29,841 files , 28.4 GBComplete command workstations: Master, Chief Officer and Bridge user folders - 16,918 files / 15.5 GB, including PST mail archives;Crew personal data (PDPA breach): IMO FAL Form 5 crew lists for ~30 seafarers with passport numbers (Malaysia/Phttps://www.ransomware.live/id/SW5nZWxlY3R1cyBJbm5vdmF0aXZlIEVsZWN0cmljYWwgU29sdXRpb25zIFMuTC5ATjBuhttps://www.ransomware.live/id/SW5nZWxlY3R1cyBJbm5vdmF0aXZlIEVsZWN0cmljYWwgU29sdXRpb25zIFMuTC5ATjBuRansomware live (RSS)Mon, 26 Oct 2026 18:57:11 +0000smart grid engineering firm · Spain | Live electrical telemetry sampled from the plant control network, with voltage, current and energy readings recorded on 23 October 2026; Complete inventory of 49 network devices including substation switches, remote terminal units, power meters and server management controllers, with locations and firmware details; Full maps of the internal control network seghttps://www.ransomware.live/id/R2FtZG9tQFdoaXRlYXJtb3Ihttps://www.ransomware.live/id/R2FtZG9tQFdoaXRlYXJtb3IRansomware live (RSS)Mon, 26 Oct 2026 18:00:10 +0000Gamdom is an unregulated crypto casino and sportsbook founded in 2016. It recently suffered a hot-wallet breach, with founder Felix Romer reporting over $3 million in losses, though on-chain analysts estimate the damage closer to $4.2 million. We hold Gamdom's full user database, 15,420,003 accounts with 146 columns, with Gamdom's total combined profit value exceeding $1 billion. The whttps://www.ransomware.live/id/QmVhc2xleSBBbGxlbiBMYXcgRmlybUBGYWxjb24https://www.ransomware.live/id/QmVhc2xleSBBbGxlbiBMYXcgRmlybUBGYWxjb24Ransomware live (RSS)Mon, 26 Oct 2026 16:54:28 +0000Plaintiff litigation law firm - Our 214 GB extraction includes executed agreements, final settlement participation agreements, court-signed stipulations regarding net worth, privileged internal memos, detailed litigation strategies, rough trial transcripts, comprehensive staff FAQs and much more.https://www.welivesecurity.com/en/videos/php2shell-what-know-two-critical-php-flaws/https://www.welivesecurity.com/en/videos/php2shell-what-know-two-critical-php-flaws/WeLiveSecurityMon, 26 Oct 2026 13:25:00 +0000Here's the lowdown on CVE-2026-109618 and CVE-2026-109619, as well as what website owners and IT teams should do to stay safe – all in a little more than two minuteshttps://www.ransomware.live/id/UmFjZVRyYWtrYUBxaWxpbghttps://www.ransomware.live/id/UmFjZVRyYWtrYUBxaWxpbgRansomware live (RSS)Mon, 26 Oct 2026 13:13:30 +0000N/Ahttps://www.ransomware.live/id/U21pdGggRmVkZGVsZXIgJiBTbWl0aEBxaWxpbghttps://www.ransomware.live/id/U21pdGggRmVkZGVsZXIgJiBTbWl0aEBxaWxpbgRansomware live (RSS)Mon, 26 Oct 2026 13:12:22 +0000N/Ahttps://www.ransomware.live/id/U2FmZSBEYXRhIFN0b3JhZ2VAQXVkaXRUZWFthttps://www.ransomware.live/id/U2FmZSBEYXRhIFN0b3JhZ2VAQXVkaXRUZWFtRansomware live (RSS)Mon, 26 Oct 2026 12:20:30 +0000Safe Data Storage Ltd is an active UK-based SME IT services company founded in 2004, headquartered in Orpington, Kent, and run by David Cleaver and others; it offers managed backup and disaster recovery on its own dual-site ISO 27001 UK private-cloud infrastructure (including SAFE Backup/Backup Plus, cloud-to-cloud backup for Microsoft 365 and similar workloads, Veeam-powered DR, Arcserve image bahttps://www.ransomware.live/id/RGVsdGEgRWxlY3RyaWMgUG93ZXIgQXNzb2NpYXRpb25AcWlsaW4https://www.ransomware.live/id/RGVsdGEgRWxlY3RyaWMgUG93ZXIgQXNzb2NpYXRpb25AcWlsaW4Ransomware live (RSS)Mon, 26 Oct 2026 12:03:57 +0000N/Ahttps://www.ransomware.live/id/QmFuZ29yIFdob2xlc2FsZSBMYW1pbmF0ZXNAcWlsaW4https://www.ransomware.live/id/QmFuZ29yIFdob2xlc2FsZSBMYW1pbmF0ZXNAcWlsaW4Ransomware live (RSS)Mon, 26 Oct 2026 12:03:03 +0000N/Ahttps://www.ransomware.live/id/VGVsZVRyb25pY0BxaWxpbghttps://www.ransomware.live/id/VGVsZVRyb25pY0BxaWxpbgRansomware live (RSS)Mon, 26 Oct 2026 12:02:01 +0000N/Ahttps://www.ransomware.live/id/RklSTUVOR1JVUFBFIEFQUEwgSG9sZGluZyBHbWJIQHFpbGluhttps://www.ransomware.live/id/RklSTUVOR1JVUFBFIEFQUEwgSG9sZGluZyBHbWJIQHFpbGluRansomware live (RSS)Mon, 26 Oct 2026 12:01:07 +0000N/Ahttps://www.ransomware.live/id/UHJlbWllciBNZWRpY2FsIEdyb3VwQHFpbGluhttps://www.ransomware.live/id/UHJlbWllciBNZWRpY2FsIEdyb3VwQHFpbGluRansomware live (RSS)Mon, 26 Oct 2026 12:00:15 +0000N/Ahttps://www.ransomware.live/id/WmFjaGFyeSBDb25mZWN0aW9uc0BxaWxpbghttps://www.ransomware.live/id/WmFjaGFyeSBDb25mZWN0aW9uc0BxaWxpbgRansomware live (RSS)Mon, 26 Oct 2026 11:59:07 +0000N/Ahttps://www.ransomware.live/id/VEhPTUFTIEpPUkRBTiwgUC5BQHFpbGluhttps://www.ransomware.live/id/VEhPTUFTIEpPUkRBTiwgUC5BQHFpbGluRansomware live (RSS)Mon, 26 Oct 2026 11:58:15 +0000N/Ahttps://www.ransomware.live/id/Rml2ZSBTdGFyIFNoZWV0c0BxaWxpbghttps://www.ransomware.live/id/Rml2ZSBTdGFyIFNoZWV0c0BxaWxpbgRansomware live (RSS)Mon, 26 Oct 2026 11:57:22 +0000N/Ahttps://www.ransomware.live/id/UG93ZXIgRnVuZGluZ0BxaWxpbghttps://www.ransomware.live/id/UG93ZXIgRnVuZGluZ0BxaWxpbgRansomware live (RSS)Mon, 26 Oct 2026 11:55:59 +0000N/Ahttps://www.ransomware.live/id/TW91bnRhaW4gUmhldW1hdG9sb2d5QHFpbGluhttps://www.ransomware.live/id/TW91bnRhaW4gUmhldW1hdG9sb2d5QHFpbGluRansomware live (RSS)Mon, 26 Oct 2026 11:53:05 +0000N/Ahttps://www.ransomware.live/id/VGF1YmVuc2VlIFN0ZWVsICYgV2lyZUBxaWxpbghttps://www.ransomware.live/id/VGF1YmVuc2VlIFN0ZWVsICYgV2lyZUBxaWxpbgRansomware live (RSS)Mon, 26 Oct 2026 11:51:36 +0000N/Ahttps://www.ransomware.live/id/TmF0dXJhbCBFbmVyZ3kgTGFib3JhdG9yeSBvZiBIYXdhaWkgQXV0aG9yaXR5QHFpbGluhttps://www.ransomware.live/id/TmF0dXJhbCBFbmVyZ3kgTGFib3JhdG9yeSBvZiBIYXdhaWkgQXV0aG9yaXR5QHFpbGluRansomware live (RSS)Mon, 26 Oct 2026 11:50:06 +0000N/Ahttps://www.ransomware.live/id/QnVybmFieSBTY2hvb2xzIC0gU2Nob29sIERpc3RyaWN0IDQxQHFpbGluhttps://www.ransomware.live/id/QnVybmFieSBTY2hvb2xzIC0gU2Nob29sIERpc3RyaWN0IDQxQHFpbGluRansomware live (RSS)Mon, 26 Oct 2026 11:36:12 +0000N/Ahttps://www.ransomware.live/id/TWlsbGVyIFN0cmF0dmVydEBxaWxpbghttps://www.ransomware.live/id/TWlsbGVyIFN0cmF0dmVydEBxaWxpbgRansomware live (RSS)Mon, 26 Oct 2026 11:35:08 +0000N/Ahttps://www.ransomware.live/id/U2V1ZmVydCBDb25zdHJ1Y3Rpb25AcWlsaW4https://www.ransomware.live/id/U2V1ZmVydCBDb25zdHJ1Y3Rpb25AcWlsaW4Ransomware live (RSS)Mon, 26 Oct 2026 11:33:31 +0000N/Ahttps://www.ransomware.live/id/Qmktc2lscXVlQE1hamluYWhhbmFzaGkhttps://www.ransomware.live/id/Qmktc2lscXVlQE1hamluYWhhbmFzaGkRansomware live (RSS)Mon, 26 Oct 2026 10:47:51 +0000A Portuguese manufacturing company that produces equipment for offices, schools, and presentations. Its product line includes whiteboards, corkboards, flip charts, information displays, glass board...https://www.ransomware.live/id/VFJBTlNQT1JURVMgSklNRU5FWiBhbmQgUkVZRVMgSklNIFJFWSBTLkEuQGVtcGVyYWRvcghttps://www.ransomware.live/id/VFJBTlNQT1JURVMgSklNRU5FWiBhbmQgUkVZRVMgSklNIFJFWSBTLkEuQGVtcGVyYWRvcgRansomware live (RSS)Mon, 26 Oct 2026 10:21:11 +0000Transport company from Ecuador engaged in road freight transport. Including the transportation of heavy and bulk cargo, cars, animals and cargo in tanks. Year Founded: 2020 There are many customer documents and employee data. Financial documents, accounting and banking data. [Sector: Transportation]https://securelist.com/tr/how-to-secure-ai-agents/121444/https://securelist.com/tr/how-to-secure-ai-agents/121444/SecurelistMon, 26 Oct 2026 10:00:18 +0000https://github.com/solidevil14/Suricata-Rule-for-Detecting-CVE-2025-55182https://github.com/solidevil14/Suricata-Rule-for-Detecting-CVE-2025-55182PoC novos (GitHub)Mon, 26 Oct 2026 09:48:51 +0000CVE‑2025‑55182 Detectionhttps://www.ransomware.live/id/UmVmZXJhbnMgTGFiIFJlZi1MYWJARG9vbW1hZ2VkZG9uhttps://www.ransomware.live/id/UmVmZXJhbnMgTGFiIFJlZi1MYWJARG9vbW1hZ2VkZG9uRansomware live (RSS)Mon, 26 Oct 2026 09:22:04 +0000Status: leaked | Data size: 3.07 GB | Files: 2 files | Deadline: 2026-10-26T00:00:00Zhttps://www.ransomware.live/id/RXJuZXN0byBNYWx2ZXN0aXRpIFMucC5BLkBhdXJvcmEhttps://www.ransomware.live/id/RXJuZXN0byBNYWx2ZXN0aXRpIFMucC5BLkBhdXJvcmERansomware live (RSS)Mon, 26 Oct 2026 08:34:49 +0000[manufacturer] Ernesto Malvestiti S.p.A. — a privately-held Italian manufacturer of precision aluminium die-cast and fine-blanked components, supplying BMW, Valeo, BorgWarner, Schneider Electric, Fiat/Stellantis, and 150+ other automotive OEM. The exposed material spans the company's entire operations: PAGHENET payroll database (1.1 GB SQL Server backup ×7 copies) — every employee's sahttps://www.ransomware.live/id/SW5zaWRlIFBhc3NhZ2UgRWxlY3RyaWMgQ29vcGVyYXRpdmUsIEluY0BkcmFnb25mb3JjZQhttps://www.ransomware.live/id/SW5zaWRlIFBhc3NhZ2UgRWxlY3RyaWMgQ29vcGVyYXRpdmUsIEluY0BkcmFnb25mb3JjZQRansomware live (RSS)Mon, 26 Oct 2026 06:59:51 +0000In 2004, Tlingit & Haida Regional Electric Authority was re-organized to an electric cooperative which is now known as Inside Passage Electric Cooperative, Inc. IPEC is a non-profit, independent electric utility owned by the members we serve. Electric cooperatives are democratically governed businesses, ensuring they are closely regulated by their consumers. Members of electric cooperativehttps://www.ransomware.live/id/bWFoc2luZy5jb20ubXlAU2NhcmxldHRncm91cAhttps://www.ransomware.live/id/bWFoc2luZy5jb20ubXlAU2NhcmxldHRncm91cARansomware live (RSS)Mon, 26 Oct 2026 04:56:48 +0000Mah Sing Group is a leading Malaysian property developer specializing in affordable residential and commercial properties, with additional businesses in healthcare and plastics manufacturing.https://www.ransomware.live/id/TG92ZVNhY0BXaGl0ZWFybW9yhttps://www.ransomware.live/id/TG92ZVNhY0BXaGl0ZWFybW9yRansomware live (RSS)Mon, 26 Oct 2026 02:57:17 +0000LoveSac (LOVE) is a premium furniture retailer operating more than 250 showrooms across the United States, generating approximately $700 million in annual revenue. We have obtained a database containing 1,113,285 order records spanning nearly seven years of transactions, from December 2019 through October 2026, with a combined recorded transaction value exceeding $1.62 billion. Each record contahttps://www.ransomware.live/id/R2zDvGNrYXVmLVZlcm1lc3N1bmcgR21iSEBwYXlsb2Fkhttps://www.ransomware.live/id/R2zDvGNrYXVmLVZlcm1lc3N1bmcgR21iSEBwYXlsb2FkRansomware live (RSS)Mon, 26 Oct 2026 00:24:26 +0000Glückauf-Vermessung GmbH (glueckauf-vermessung.de) is a German engineering and technical company based in Sondershausen, operating as part of the ERCOSPLAN Group and specializing in surveying and mine surveying (Bergbau-Markscheiderei). Its core business activities include geodetic support for the mining industry, geological exploration, and work related to salt and mineral deposits. The company phttps://www.ransomware.live/id/TWlsZXRpYyBHbWJIQHBheWxvYWQhttps://www.ransomware.live/id/TWlsZXRpYyBHbWJIQHBheWxvYWQRansomware live (RSS)Mon, 26 Oct 2026 00:23:12 +0000Miletic GmbH is a German specialized contractor headquartered in Bad Schönborn that has been operating in the construction sector since 1989. The company's core business focuses on construction and repair work for ecologically sensitive industrial facilities, including gas stations, tank farms, and operations governed by German water protection laws (WHG Class LAU facilities). Its service porhttps://www.ransomware.live/id/RWRlbHN0YWhsLU1lY2hhbmlrIEdtYkhAcGF5bG9hZAhttps://www.ransomware.live/id/RWRlbHN0YWhsLU1lY2hhbmlrIEdtYkhAcGF5bG9hZARansomware live (RSS)Mon, 26 Oct 2026 00:21:58 +0000Edelstahl-Mechanik GmbH is a German manufacturing company based in Göppingen. The company specializes in laser metal processing, including 2D and 3D laser cutting and welding, as well as structural sheet metal fabrication. Its products and services are applied in industries such as mechanical engineering, the automotive sector, construction, medical technology, and the food industry.https://www.ransomware.live/id/Si5CIEh1bnRAV2hpdGVhcm1vcghttps://www.ransomware.live/id/Si5CIEh1bnRAV2hpdGVhcm1vcgRansomware live (RSS)Mon, 26 Oct 2026 00:00:24 +0000You are so stupid JB Hunt. Instead of getting in contact with us & starting the negotiation process, not only did you not announce the breach, you silently email customers demanding them to update their passwords.. Fuck you... ;/https://nvd.nist.gov/vuln/detail/CVE-2026-109618https://nvd.nist.gov/vuln/detail/CVE-2026-109618CISA KEV (explorado in the wild)Mon, 26 Oct 2026 00:00:00 +0000Ação: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evalhttps://nvd.nist.gov/vuln/detail/CVE-2026-109619https://nvd.nist.gov/vuln/detail/CVE-2026-109619CISA KEV (explorado in the wild)Mon, 26 Oct 2026 00:00:00 +0000Ação: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evalhttps://github.com/ohackercego/CVE-2025-26326https://github.com/ohackercego/CVE-2025-26326PoC novos (GitHub)Sun, 25 Oct 2026 19:16:38 +0000CVE-2025-26326 - vulnerabilidade critica em add-ons de conexao remota do NVDA (recuperado)https://www.ransomware.live/id/WW9kaW5nZW5pZXJpZUBQYW56ZXIhttps://www.ransomware.live/id/WW9kaW5nZW5pZXJpZUBQYW56ZXIRansomware live (RSS)Sun, 25 Oct 2026 17:55:57 +0000YOD Engineering is an engineering company computer science, member of the NED&CO Group , a pan-African player committed to transformation digital, information systems governance and innovation by intelligence artificial.https://www.ransomware.live/id/V2hpdGUgJiBDYXNlQHFpbGluhttps://www.ransomware.live/id/V2hpdGUgJiBDYXNlQHFpbGluRansomware live (RSS)Sun, 25 Oct 2026 17:18:17 +0000N/Ahttps://www.ransomware.live/id/SG9zc25lci1UZXh0aWwgR21iSEBxaWxpbghttps://www.ransomware.live/id/SG9zc25lci1UZXh0aWwgR21iSEBxaWxpbgRansomware live (RSS)Sun, 25 Oct 2026 17:17:40 +0000N/Ahttps://www.ransomware.live/id/UGFydGlkbyBMaWJlcmFsQFdoaXRlYXJtb3Ihttps://www.ransomware.live/id/UGFydGlkbyBMaWJlcmFsQFdoaXRlYXJtb3IRansomware live (RSS)Sun, 25 Oct 2026 16:56:33 +0000Brazil's Liberal Party (PL) is the political party of the Bolsonaro family. Although named "Liberal," it is currently characterized by conservatism and right-wing populism. Jair Bolsonaro joined the party in 2021, and his son Flávio Bolsonaro is now the party's presidential candidate, advocating reduced government intervention and tough security policies. We hold the completehttps://www.ransomware.live/id/T29yZWRvbyBNeWFubWFyQHFpbGluhttps://www.ransomware.live/id/T29yZWRvbyBNeWFubWFyQHFpbGluRansomware live (RSS)Sun, 25 Oct 2026 16:20:30 +0000N/Ahttps://www.ransomware.live/id/V2VpdHogJiBMdXhlbmJlcmdARmFsY29uhttps://www.ransomware.live/id/V2VpdHogJiBMdXhlbmJlcmdARmFsY29uRansomware live (RSS)Sun, 25 Oct 2026 15:52:01 +0000Mass tort litigation law firm - Our 82 GB extraction includes confidentiality agreements, stipulations, NDAs, internal board documents, privileged attorney-client communications, client rosters detailing medical conditions and settlement eligibility, active-case strategy documents, liability estimations, mediation term sheets, internal financial data, settlement payout memos, detailed bankruptcy shttps://www.ransomware.live/id/QXN0cmFuYSBIZWFsdGhARmFsY29uhttps://www.ransomware.live/id/QXN0cmFuYSBIZWFsdGhARmFsY29uRansomware live (RSS)Sun, 25 Oct 2026 14:53:02 +0000Healthcare services · NASDAQ: ASTH - Our 738 GB extraction includes internal documents, regulatory audit reports, payer financial dispute trackers, internal operational readiness reviews, acquisition pipelines, detailed reimbursement tables, internal system evaluations, regulatory notifications, funds transfer records showing liquidity status, company financial statements, user credential lists,https://www.ransomware.live/id/QS1STVNAZW1wZXJhZG9yhttps://www.ransomware.live/id/QS1STVNAZW1wZXJhZG9yRansomware live (RSS)Sun, 25 Oct 2026 14:52:33 +0000We encrypted your servers and stole some of your source code, along with some sensitive information. If you do not pay the ransom, we will contact and attack your employees, clients, and partners to destroy your business. [Sector: Technology]https://www.ransomware.live/id/QWVzdGhldGljIERlbnRhbCBEZXNpZ25zLCBQLkFASFlGTE9DSwhttps://www.ransomware.live/id/QWVzdGhldGljIERlbnRhbCBEZXNpZ25zLCBQLkFASFlGTE9DSwRansomware live (RSS)Sun, 25 Oct 2026 11:53:17 +0000Aesthetic Dental Designs, P.A. (operating commercially as Dental Arts of Atlantis) is a fully licensed and accredited dental healthcare corporation headquartered at 5057 S Congress Ave, Suite 401, Lake Worth Beach, Florida (NPI: 1235501420). The practice is anchored by a distinguished clinical team, featuring Dr. Colleen Lam, D.M.D. and Dr. Serrano. The organization provides comprehensive clinicalhttps://www.ransomware.live/id/RUNPTUBxaWxpbghttps://www.ransomware.live/id/RUNPTUBxaWxpbgRansomware live (RSS)Sun, 25 Oct 2026 10:35:02 +0000N/Ahttps://www.ransomware.live/id/QXlUIENPTVBVVEVSUyBTUkxAZW1wZXJhZG9yhttps://www.ransomware.live/id/QXlUIENPTVBVVEVSUyBTUkxAZW1wZXJhZG9yRansomware live (RSS)Sun, 25 Oct 2026 09:52:04 +0000Argentine Company operates in the field of electronic security systems, video surveillance, monitoring and IT infrastructure. There are many customer documents and employee data. Financial documents, customer cards with phone numbers and addresses. [Sector: Finance, Technology]https://www.ransomware.live/id/RVRPQHFpbGluhttps://www.ransomware.live/id/RVRPQHFpbGluRansomware live (RSS)Sun, 25 Oct 2026 07:24:50 +0000N/Ahttps://www.ransomware.live/id/VE9QTElWTyBBREBOMG4https://www.ransomware.live/id/VE9QTElWTyBBREBOMG4Ransomware live (RSS)Sun, 25 Oct 2026 06:56:34 +0000fuel trading and construction materials · Bulgaria | The complete counterparty ledger of a fuel trading company: 694 companies with full legal names, addresses, managing persons, national company numbers, tax numbers and bank account details; More than 3,100 live customs and fuel movement documents from December 2025 through October 2026, and a 12 year archive of more than 46,000 documents from 20https://www.ransomware.live/id/VGVjaG5vbGVhZHMgU2VydmljZXMgSW5jLkBOMG4https://www.ransomware.live/id/VGVjaG5vbGVhZHMgU2VydmljZXMgSW5jLkBOMG4Ransomware live (RSS)Sun, 25 Oct 2026 06:56:05 +0000media production (audio description and accessibility media) · Montreal, Quebec, Canada | Current 2026 client production files from your work in progress library, including active projects modified in October 2026; A job candidate resume with full personal contact details from your human resources records; Your archive of finished productions from 2016 through 2021, including a 2.1 GB demonstratiohttps://www.ransomware.live/id/UHVyZSBHcm93IERpYW1vbmRzIEluYy5ATjBuhttps://www.ransomware.live/id/UHVyZSBHcm93IERpYW1vbmRzIEluYy5ATjBuRansomware live (RSS)Sun, 25 Oct 2026 06:55:37 +0000diamond and lab grown diamond trading · New York, New York, United States | Diamond stock and inventory lists with stock codes and certificate numbers; Customer return records with customer names and tracking references; More than 2,200 bank deposit and invoice documents | [NOT PAID — EXPOSED]https://www.ransomware.live/id/TWFjaCBMYXcgQVBDIChTYW4gRGllZ28gZmFtaWx5IGxhdyBhbmQgZGl2b3JjZSBwcmFjdGljZSlATjBuhttps://www.ransomware.live/id/TWFjaCBMYXcgQVBDIChTYW4gRGllZ28gZmFtaWx5IGxhdyBhbmQgZGl2b3JjZSBwcmFjdGljZSlATjBuRansomware live (RSS)Sun, 25 Oct 2026 06:55:09 +0000Legal Services - Family Law (US) · California, USA | Client case files of a San Diego family law practice: divorce, custody and support matters with California court filings (FL-150 financial declarations, FL-300 requests for orders, FL-335 proofs of service) and XSpouse support calculations; Client intake records with Social Security numbers and dates of birth; Client bank statements (Navy Federahttps://www.ransomware.live/id/S2VpZGVsIFN1cHBseSBDb21wYW55IEluY29ycG9yYXRlZEBOMG4https://www.ransomware.live/id/S2VpZGVsIFN1cHBseSBDb21wYW55IEluY29ycG9yYXRlZEBOMG4Ransomware live (RSS)Sun, 25 Oct 2026 06:54:40 +0000plumbing and kitchen products distribution · Cincinnati, Ohio, United States | Sales orders with customer names, item numbers and product descriptions; Customer and order detail files with over 16,000 records; A full backup image of the main application library | [NOT PAID — EXPOSED]https://www.ransomware.live/id/QW5kcmV3cyBBZHZpc29yeSBHcm91cCBMTENATjBuhttps://www.ransomware.live/id/QW5kcmV3cyBBZHZpc29yeSBHcm91cCBMTENATjBuRansomware live (RSS)Sun, 25 Oct 2026 06:54:11 +0000Financial Advisory & Restructuring (US) · Chicago, Illinois, USA | Patient records with names and dates of birth from the patient database backup of December 2025 (3,698 records), taken from the office network; The complete patient database backup history, 2018 through 2025; More than 13,000 patient eye examination records with full ocular, medical and social history; OCT eye scan files from t