🚨 New RCE Alert CVE-2026-20841
A high-severity vulnerability in Microsoft Windows Notepad could allow Remote Code Execution via malicious Markdown files.
Attack requires user interaction (opening & clicking a crafted link)
⚠️ CVSS: 8.8 (High)
🛡️ Patch released
#CyberSecurity
Keycloak - CVE-2026-1529
An attacker can exploit this vulnerability by modifying the organization ID and target email within a legitimate invitation token's JSON Web Token (JWT) payload.
https://t.co/njQBMvgtLF
Claude Skills just dropped!
Teach Claude pro workflows: perfect branding, edit PDFs/Excel/Docs, automate comms + more.
Check Anthropic's repo: https://t.co/GK2IkqAI0J
Game changer 🔥 #ClaudeAI
🚨 Critical RCE in pgAdmin 4 (≤ v9.10): CVE-2025-13780
Bypasses regex filter on PLAIN dump restores using whitespace tricks – attackers run arbitrary shell commands!
Patch to v9.11+ NOW if in server mode.
Details: https://t.co/sCMfayJyLg
#CyberSecurity#PostgreSQL#pgAdmin
🚨Alert🚨:CVE-2025-13780 : pgAdmin are Affected by A Remote Code Execution (RCE) Vulnerability. It affects versions up to 9.10.
🔥PoC :https://t.co/sJaWOn73x8
📊189.9K Services are found on the https://t.co/g3tSyh1Boc yearly.
🔗Hunter Link:https://t.co/avRtLJIiBa
👇Query
HUNTER : https://t.co/yFFcJwegJK="pgAdmin"
📰Refer:https://t.co/NXCFEHZSob
https://t.co/OSuPhh42SR
#hunterhow #infosec #infosecurity #OSINT #Vulnerability
Bug Bounty reports are one thing, but full penetration test reports are a different beast entirely.
In this demo, we fed multiple findings to ReportLM with a detailed prompt for:
🟧 Executive summary
🟧 Technical evidence
🟧 Severity
🟧 Clear remediation guidance
The result? Flawless enterprise grade reports in seconds 😌
Ask any Web App pentester: It can be tricky to demonstrate Server-Side Request Forgery (#SSRF) impact. Alex fortunately has a few shortcuts that can help you out as you exploit this vulnerability.
Do you have any tips and tricks you use when you find SSRF? Drop them in the comments and let's learn from each other! https://t.co/6HOu31rkNW
This OneLiner extracts all API endpoints from AngularJS & Angular javascript files.⚡️
curl -s URL | grep -Po "(\/)((?:[a-zA-Z\-_\:\.0-9\{\}]+))(\/)*((?:[a-zA-Z\-_\:\.0-9\{\}]+))(\/)((?:[a-zA-Z\-_\/\:\.0-9\{\}]+))" | sort -u
#infosec#cybersec#bugbountytips