Threat Intelligence - Sn1perSecurity

CVE-2026-9082: Drupal Core SQL Injection Detection with Sn1per

xer0dayz — Sat, 15 Aug 2026 20:29:38 +0000

CVE-2026-9082 is an actively exploited, unauthenticated SQL injection in Drupal core on PostgreSQL. Learn how to detect every affected host with Sn1per and Nuclei.

The post CVE-2026-9082: Drupal Core SQL Injection Detection with Sn1per first appeared on Sn1perSecurity.

XSS2Shell (CVE-2026-64638): WordPress Pre-Auth XSS to RCE Detection with Nuclei

xer0dayz — Mon, 10 Aug 2026 21:15:56 +0000

XSS2Shell (CVE-2026-64638) is a pre-authentication reflected XSS on the WordPress login screen that escalates to PHP code execution against a logged-in administrator. A plain-English advisory, a ready-to-run non-destructive Nuclei detection template, the full 24-branch patched-version table, and how to detect affected WordPress at scale with Sn1per.

The post XSS2Shell (CVE-2026-64638): WordPress Pre-Auth XSS to RCE Detection with Nuclei first appeared on Sn1perSecurity.

CVE-2026-42533: NGINX map Directive Heap Buffer Overflow – Advisory + Nuclei Detection

xer0dayz — Mon, 03 Aug 2026 17:08:57 +0000

CVE-2026-42533 is a critical heap buffer overflow in the NGINX script engine reached through the map directive, with weaponized public exploit code that defeats ASLR. A plain-English advisory, a tested non-destructive Nuclei detection template, and the two-window version trap that makes naive scanners clear every mainline 1.31.x host as patched.

The post CVE-2026-42533: NGINX map Directive Heap Buffer Overflow – Advisory + Nuclei Detection first appeared on Sn1perSecurity.

CVE-2026-42945 (NGINX Rift): Heap Buffer Overflow in the Rewrite Module – Advisory + Nuclei Detection

xer0dayz — Mon, 03 Aug 2026 17:08:55 +0000

CVE-2026-42945, known as NGINX Rift, is a critical heap buffer overflow in ngx_http_rewrite_module reachable from a single unauthenticated request, with exploitation reported in the wild. A plain-English advisory, a tested non-destructive Nuclei detection template, a configuration audit template for the pattern nginx -t will not warn you about, and why upgrading to 1.30.1 leaves you exposed.

The post CVE-2026-42945 (NGINX Rift): Heap Buffer Overflow in the Rewrite Module – Advisory + Nuclei Detection first appeared on Sn1perSecurity.

CVE-2026-61511: Pre-Auth Remote Code Execution in vBulletin (runMaths) – Advisory + Nuclei Detection

xer0dayz — Fri, 31 Jul 2026 19:54:35 +0000

CVE-2026-61511 is a critical unauthenticated RCE in vBulletin 5.x and 6.x, caused by eval injection in the runMaths() template handler. A plain-English advisory, a tested non-destructive Nuclei detection template, the 6.x patch-level trap that hides unpatched hosts, and how to find vulnerable vBulletin at scale with Sn1per.

The post CVE-2026-61511: Pre-Auth Remote Code Execution in vBulletin (runMaths) – Advisory + Nuclei Detection first appeared on Sn1perSecurity.

CVE-2026-50522: Unauthenticated Deserialization RCE in Microsoft SharePoint Server – Advisory + Nuclei Detection

xer0dayz — Tue, 28 Jul 2026 20:50:20 +0000

CVE-2026-50522 is a critical, actively-exploited unauthenticated RCE in on-prem Microsoft SharePoint Server (2016, 2019, Subscription Edition). A plain-English advisory, a ready-to-run non-destructive Nuclei detection template, remediation with machine-key rotation, and how to detect vulnerable SharePoint at scale with Sn1per.

The post CVE-2026-50522: Unauthenticated Deserialization RCE in Microsoft SharePoint Server – Advisory + Nuclei Detection first appeared on Sn1perSecurity.

wp2shell (CVE-2026-63030): Unauthenticated Pre-Auth RCE in WordPress Core – Advisory + Nuclei Detection

xer0dayz — Sat, 18 Jul 2026 19:00:36 +0000

wp2shell (CVE-2026-63030) is an unauthenticated pre-auth RCE in WordPress Core 6.9.0-6.9.4 and 7.0.0-7.0.1. A plain-English advisory, a ready-to-run Nuclei detection template, remediation, and how to detect affected WordPress at scale with Sn1per.

The post wp2shell (CVE-2026-63030): Unauthenticated Pre-Auth RCE in WordPress Core – Advisory + Nuclei Detection first appeared on Sn1perSecurity.

On-Prem vs Cloud Attack Surface Management: A Data-Sovereignty Guide for Regulated Teams

xer0dayz — Tue, 16 Jun 2026 00:27:38 +0000

Cloud and on-prem ASM both work - they answer the data-residency question very differently. An honest 2026 guide to the sovereignty trade-off, GDPR exposure, and keeping offensive AI in your perimeter.

The post On-Prem vs Cloud Attack Surface Management: A Data-Sovereignty Guide for Regulated Teams first appeared on Sn1perSecurity.

CVE-2024-21733 Apache Tomcat HTTP Request Smuggling

xer0dayz — Sun, 21 Jan 2024 19:32:46 +0000

Our security research team recently discovered a critical “0day” vulnerability which was assigned CVE-2024-21733. The vulnerability was discovered by xer0dayz from Sn1perSecurity LLC and allows attackers to force a victim’s…

The post CVE-2024-21733 Apache Tomcat HTTP Request Smuggling first appeared on Sn1perSecurity.

Dark Web Monitoring: Securing Your External Attack Surface

xer0dayz — Thu, 04 May 2023 22:50:53 +0000

In today’s digital era, data breaches and cyber-attacks are increasing day by day, and with the increasing amount of data being stored and transmitted online, the threat is real. Hackers…

The post Dark Web Monitoring: Securing Your External Attack Surface first appeared on Sn1perSecurity.