ðĶ Vulnerability Garden ðŠī
@vulnerability.garden@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline!
Brought to you by the RSS Parrot.
---
A list of all named vulnerabilities, attack techniques and exploits.
Your feed and you don't want it here? Just
e-mail the birb.
S4GET
https://onapsis.com/blog/s4get-cve-2026-58240-sap-message-server-threat-advisory/
Published: September 9, 2026 15:57
Named vulnerability dubbed "S4GET" (CVE-2026-58240) from Pablo Artuso (Onapsis). â (source: https://onapsis.com/blog/s4get-cve-2026-58240-sap-message-server-threat-advisory/)
InjectEave
https://injecteave.github.io
Published: September 9, 2026 15:29
Named vulnerability dubbed "InjectEave" from Haoran Yan, Ziyu Shao, Shuhao Zhang, Qinhong Jiang, Yan Long. â (source: https://injecteave.github.io)
ShieldCrash
https://git.churchofmalware.org/Nightmare_Eclipse/ShieldCrash
Published: September 9, 2026 15:28
Named vulnerability dubbed "ShieldCrash" from Nightmare Eclipse". â (source: https://git.churchofmalware.org/Nightmare_Eclipse/ShieldCrash)
OVERPASS
https://onapsis.com/blog/sap-overpass-remediation/
Published: September 9, 2026 11:53
Named vulnerability dubbed "OVERPASS" (CVE-2026-44756) from JP Perez-Etchegoyen (Onapsis). â (source: https://onapsis.com/blog/sap-overpass-remediation/)
GuardBreaker
https://x.com/ESETresearch/status/2092885120562741652
Published: September 8, 2026 12:43
Named vulnerability dubbed "GuardBreaker" (CVE-2025-56383) from ESET Research. â (source: https://x.com/ESETresearch/status/2092885120562741652)
PostGREShell
https://www.cyera.com/research/postgreshell-the-database-powering-much-of-the-internet-had-an-open-door-for-12-years
Published: September 8, 2026 12:38
Named vulnerability dubbed "PostGREShell" (CVE-2026-6471) from Vladimir Tokarev (Cyera). â (source: https://www.cyera.com/research/postgreshell-the-database-powering-much-of-the-internet-had-an-open-door-for-12-years)
MikroTrick
https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/
Published: September 8, 2026 12:35
Named vulnerability dubbed "MikroTrick" (CVE-2026-67276, CVE-2026-86060, CVE-2026-67277) from CERT Polska. â (source: https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/)
WeWorm
https://calif.io/research/weworm
Published: September 8, 2026 12:31
Named vulnerability dubbed "WeWorm" from Calif. â (source: https://calif.io/research/weworm)
StyleSmuggler
https://sansec.io/research/stylesmuggler-0day
Published: September 8, 2026 12:30
Named vulnerability dubbed "StyleSmuggler" (CVE-2026-75650) from Sansec Forensics Team. â (source: https://sansec.io/research/stylesmuggler-0day)
BYOTC (Bring Your Own Trusted Caller)
https://xusheng.dev/posts/byotc/main/
Published: September 8, 2026 12:27
Named vulnerability dubbed "BYOTC (Bring Your Own Trusted Caller)" from Xusheng Li. â (source: https://xusheng.dev/posts/byotc/main/)
FalconFlank
https://github.com/MSNightmare/FalconFlank
Published: September 3, 2026 13:00
Named vulnerability dubbed "FalconFlank" from Nightmare Eclipse. â (source: https://github.com/MSNightmare/FalconFlank)
DirtyCLR
https://ipslav.github.io/2023-12-12-let-me-manage-your-appdomain/
Published: September 3, 2026 12:58
Named vulnerability dubbed "DirtyCLR" from ipSlav. â (source: https://ipslav.github.io/2023-12-12-let-me-manage-your-appdomain/)
GitSpawn
https://www.manifold.security/blog/ai-coding-agents-git-hijack
Published: September 2, 2026 20:01
Named vulnerability dubbed "GitSpawn" (CVE-2026-72718, CVE-2026-71963) from Francisco Rosales (Manifold). â (source: https://www.manifold.security/blog/ai-coding-agents-git-hijack)
MCPJacking
https://www.air.security/blog-posts/mcpjacking
Published: August 31, 2026 21:15
Named vulnerability dubbed "MCPJacking" from Nadav Dadush, Eliad Mualem, Roi Snir (Air Security). â (source: https://www.air.security/blog-posts/mcpjacking)
InjecMEM
https://arxiv.org/pdf/2608.23471
Published: August 31, 2026 13:36
Named vulnerability dubbed "InjecMEM" from Hanling Tian, Gengyu Zhang, Zeyang Sha, Jingying Wang, Yuhang Liu, Zhehao Huang, Kun Yang & Xiaolin Huang. â (source: https://arxiv.org/pdf/2608.23471)
PrettyPrague
https://git.projectnightcrawler.dev/NightmareEclipse/PrettyPrague
Published: August 31, 2026 13:31
Named vulnerability dubbed "PrettyPrague" from NightmareEclipse. â (source: https://git.projectnightcrawler.dev/NightmareEclipse/PrettyPrague)
GreenSection
https://git.projectnightcrawler.dev/NightmareEclipse/GreenSection
Published: August 31, 2026 13:30
Named vulnerability dubbed "GreenSection" from NightmareEclipse. â (source: https://git.projectnightcrawler.dev/NightmareEclipse/GreenSection)
HardBreacher
https://git.projectnightcrawler.dev/NightmareEclipse/HardBreacher
Published: August 31, 2026 13:29
Named vulnerability dubbed "HardBreacher" from NightmareEclipse. â (source: https://git.projectnightcrawler.dev/NightmareEclipse/HardBreacher)