application-security

S Stefan Mitocaru · Sep 18, 2026 · 20 min

CVE-2026-74820: how an unsanitized ORDER BY clause turned ServiceNow's AI Platform into an unauthenticated database backdoor

Inside CVE-2026-74820: a CVSS 10.0 unauthenticated SQL injection in ServiceNow's AI Platform, reachable through a dynamic schema ORDER BY cl...

P Paraschivoiu Alexandru · Jul 6, 2026 · 18 min

Pragma Core for Dynamic AppSec Teams

Pragma Core for dynamic AppSec teams: how a continuous, AI-driven platform spanning code, infrastructure, and adversary emulation replaces t...

S Stefan Mitocaru · Jun 19, 2026 · 12 min

Continuous attack emulation: turning the MITRE ATT&CK matrix into a live test your defenses never stop taking (Pragma Core feature preview)

A preview of Pragma Core's Continuous Attack Emulation: intelligence-led, MITRE ATT&CK-aligned breach simulation that runs on a loop, so sil...

S Stefan Mitocaru · Jun 15, 2026 · 16 min

CVE-2026-20253: how a localhost-only database helper turned every AWS Splunk box into a pre-auth RCE

Inside CVE-2026-20253 (CVSS 9.8): Splunk Enterprise's PostgreSQL backup sidecar trusted the network instead of the request, letting an unaut...

S Stefan Mitocaru · Jun 5, 2026 · 19 min

Megalodon: how TeamPCP turned 5,561 GitHub pipelines into a credential harvest factory in six hours

Inside Megalodon: how threat actor TeamPCP pushed 5,718 malicious commits to 5,561 GitHub repositories in a six-hour window, injecting dorma...

S Stefan Mitocaru · May 20, 2026 · 16 min

CVE-2026-6973: Ivanti EPMM RCE Actively Exploited in the Wild and Already in CISA KEV

Ivanti Ivanti Endpoint Manager Mobile (versions up to 12.8.0.0) contains an improper input validation vulnerability that allows remote code...

S Stefan Mitocaru · May 15, 2026 · 23 min

CVE-2026-45321: how attackers hijacked a trusted GitHub Actions publisher to weaponize the npm supply chain

Breakdown of CVE-2026-45321, the TanStack supply chain compromise. An attacker chained a pull_request_target misconfiguration, GitHub Action...

P Paraschivoiu Alexandru · May 13, 2026 · 15 min

CVE-2026-23918: Apache HTTP/2 Double-Free Flaw That Can Bring Down Your Server (and Worse)

A critical double-free bug in Apache HTTP Server 2.4.66 lets unauthenticated attackers crash worker processes with two HTTP/2 frames, and es...

S Stefan Mitocaru · May 11, 2026 · 23 min

Dirty Frag (CVE-2026-43284, CVE-2026-43500): how the same page-cache write class that powered Copy Fail came back in IPSec and rxrpc, and leaked before the patch was ready

Dirty Frag chains two Linux kernel LPE vulnerabilities (CVE-2026-43284 in IPSec ESP, CVE-2026-43500 in RxRPC) to achieve instant root on vir...

P Paraschivoiu Alexandru · May 8, 2026 · 17 min

CVE-2026-40372: how a broken HMAC check in ASP.NET Core Data Protection let attackers forge authentication cookies

A regression in ASP.NET Core Data Protection broke HMAC validation, exposing apps to forged authentication cookies and padding oracle attack...

S Stefan Mitocaru · May 6, 2026 · 12 min

CVE-2026-41940: How Three Small Mistakes in cPanel Handed Attackers the Keys to 1.5 Million Servers

CVE-2026-41940 is a critical (CVSS 9.8) authentication bypass in cPanel and WHM that lets unauthenticated attackers gain root-level server a...

P Paraschivoiu Alexandru · May 4, 2026 · 15 min

CVE-2026-31431: how a nine-year-old kernel optimization turned every Linux system into a privilege escalation target

A logic flaw in the Linux kernel's crypto subsystem, dormant since 2017, now lets any unprivileged local user write into the page cache of f...