Sn1perSecurity https://sn1persecurity.com/wordpress Get an attacker's view of your organization with our all-in-one offensive security platform Tue, 03 Nov 2026 22:56:05 +0000 en-US hourly 1 https://sn1persecurity.com/wordpress/wp-content/uploads/2023/03/favoriteiconsniper.png Sn1perSecurity https://sn1persecurity.com/wordpress 32 32 197797428 CVE-2026-98432: Linux Kernel TCP Use-After-Free RCE and MPTCP Exposure – Advisory + Nuclei Detection https://sn1persecurity.com/wordpress/cve-2026-98432-linux-kernel-tcp-rce-detection-with-sn1per/?utm_source=rss&utm_medium=rss&utm_campaign=cve-2026-98432-linux-kernel-tcp-rce-detection-with-sn1per Tue, 03 Nov 2026 22:56:05 +0000 https://sn1persecurity.com/wordpress/cve-2026-98432-linux-kernel-tcp-rce-detection-with-sn1per/ CVE-2026-98432 is a CVSS 9.8 use-after-free in the Linux kernel's IPv4 TCP handshake, present since Linux 4.4. Remote root has been demonstrated against servers with an MPTCP listener, and suspected threat-actor MPTCP scanning began on 2 November 2026. The bug is in plain TCP, so disabling MPTCP is not a fix. Fixed kernels per distribution, mitigations, an authenticated Nuclei template, and how to find exposed hosts with Sn1per.

The post CVE-2026-98432: Linux Kernel TCP Use-After-Free RCE and MPTCP Exposure – Advisory + Nuclei Detection first appeared on Sn1perSecurity.

]]> 68066 CVE-2026-119977: Upgrade-Window Race Condition RCE in WordPress Core – Advisory + Nuclei Detection https://sn1persecurity.com/wordpress/cve-2026-119977-wordpress-rce-detection-with-sn1per/?utm_source=rss&utm_medium=rss&utm_campaign=cve-2026-119977-wordpress-rce-detection-with-sn1per Tue, 03 Nov 2026 18:42:19 +0000 https://sn1persecurity.com/wordpress/cve-2026-119977-wordpress-rce-detection-with-sn1per/ CVE-2026-119977 lets an unauthenticated attacker race a WordPress core upgrade to remote code execution through the staged copy WordPress unpacks under wp-content/upgrade/. WordPress 7.1.4 fixes it, with backports to every branch down to 4.7.39. All 25 fixed versions by branch, which update paths actually stage the installer, why you should block the upgrade folder before patching, and a branch-aware Nuclei template to find every vulnerable WordPress site with Sn1per.

The post CVE-2026-119977: Upgrade-Window Race Condition RCE in WordPress Core – Advisory + Nuclei Detection first appeared on Sn1perSecurity.

]]> 68060 CVE-2026-84295: Pre-Auth Authentication Bypass in Progress WS_FTP Server – Advisory + Nuclei Detection https://sn1persecurity.com/wordpress/cve-2026-84295-ws-ftp-auth-bypass-detection-with-sn1per/?utm_source=rss&utm_medium=rss&utm_campaign=cve-2026-84295-ws-ftp-auth-bypass-detection-with-sn1per Sat, 31 Oct 2026 14:36:07 +0000 https://sn1persecurity.com/wordpress/cve-2026-84295-ws-ftp-auth-bypass-detection-with-sn1per/ CVE-2026-84295 is a CVSS 10.0 pre-auth Progress WS_FTP Server vulnerability that discloses administrative credentials. It is fixed in 2024.0.6 and 2025.0.3, but twelve more CVEs from the same 29 October 2026 bulletin, including two OS command injections, need 2024.0.7 or 2025.0.4. Both fix trains, passive Nuclei templates that read the version WS_FTP announces before login, and how to find every WS_FTP server on your attack surface with Sn1per.

The post CVE-2026-84295: Pre-Auth Authentication Bypass in Progress WS_FTP Server – Advisory + Nuclei Detection first appeared on Sn1perSecurity.

]]> 67958 CVE-2026-97229 and CVE-2026-110264: GitLab Ruby Regex RCE Detection with Sn1per https://sn1persecurity.com/wordpress/cve-2026-97229-gitlab-rce-detection-with-sn1per/?utm_source=rss&utm_medium=rss&utm_campaign=cve-2026-97229-gitlab-rce-detection-with-sn1per Fri, 30 Oct 2026 18:05:43 +0000 https://sn1persecurity.com/wordpress/cve-2026-97229-gitlab-rce-detection-with-sn1per/ CVE-2026-97229 is a CVSS 10.0 GitLab CE/EE remote code execution flaw in Ruby's Onigmo regex engine, on CISA KEV since 29 October 2026 after an attempt against Alpine Linux. Fixed versions, why a GitLab upgrade on your own Ruby is not a fix, a passive Nuclei template, and how to find every self-managed GitLab on your attack surface with Sn1per.

The post CVE-2026-97229 and CVE-2026-110264: GitLab Ruby Regex RCE Detection with Sn1per first appeared on Sn1perSecurity.

]]> 67932 php2shell (CVE-2026-109618 and CVE-2026-109619): PHP Core Pre-Auth RCE Detection with Sn1per https://sn1persecurity.com/wordpress/php2shell-cve-2026-109618-php-core-rce-detection-with-sn1per/?utm_source=rss&utm_medium=rss&utm_campaign=php2shell-cve-2026-109618-php-core-rce-detection-with-sn1per Wed, 21 Oct 2026 17:02:45 +0000 https://sn1persecurity.com/wordpress/php2shell-cve-2026-109618-php-core-rce-detection-with-sn1per/ CVE-2026-109618 and CVE-2026-109619 are two CVSS 9.2 pre-auth remote code execution flaws in PHP core, patched 21 October 2026. Get the passive four-branch Nuclei patch-gap template, the manual checks that catch what it cannot, and how to find unpatched PHP across your attack surface with Sn1per.

The post php2shell (CVE-2026-109618 and CVE-2026-109619): PHP Core Pre-Auth RCE Detection with Sn1per first appeared on Sn1perSecurity.

]]> 67655 Introducing the Sn1per MCP Server (Beta): Drive Sn1per From Your AI Assistant https://sn1persecurity.com/wordpress/sn1per-mcp-server/?utm_source=rss&utm_medium=rss&utm_campaign=sn1per-mcp-server Sun, 18 Oct 2026 13:54:23 +0000 https://sn1persecurity.com/wordpress/?p=67572 Now in beta: the Sn1per MCP Server is a free, open source (Apache-2.0) MCP server that lets the AI assistant you already use drive your self-hosted Sn1per, with scoped, audited scans and structured results, for authorized security testing only.

The post Introducing the Sn1per MCP Server (Beta): Drive Sn1per From Your AI Assistant first appeared on Sn1perSecurity.

]]> 67572 CVE-2026-88771 and CVE-2026-88772: Citrix NetScaler Pre-Auth RCE Detection with Sn1per https://sn1persecurity.com/wordpress/cve-2026-88771-citrix-netscaler-preauth-rce-detection-with-sn1per/?utm_source=rss&utm_medium=rss&utm_campaign=cve-2026-88771-citrix-netscaler-preauth-rce-detection-with-sn1per Thu, 01 Oct 2026 13:24:41 +0000 https://sn1persecurity.com/wordpress/cve-2026-88771-citrix-netscaler-preauth-rce-detection-with-sn1per/ CVE-2026-88771 and CVE-2026-88772 are actively exploited Citrix NetScaler RCE zero-days in CISA KEV. Get the passive Nuclei template, the four-branch patch-gap logic, and how to detect unpatched appliances at scale with Sn1per.

The post CVE-2026-88771 and CVE-2026-88772: Citrix NetScaler Pre-Auth RCE Detection with Sn1per first appeared on Sn1perSecurity.

]]> 67128 CVE-2026-82329: JFrog Artifactory Auth Bypass Detection with Sn1per https://sn1persecurity.com/wordpress/cve-2026-82329-jfrog-artifactory-auth-bypass-detection-with-sn1per/?utm_source=rss&utm_medium=rss&utm_campaign=cve-2026-82329-jfrog-artifactory-auth-bypass-detection-with-sn1per Fri, 04 Sep 2026 00:35:36 +0000 https://sn1persecurity.com/wordpress/cve-2026-82329-jfrog-artifactory-auth-bypass-detection-with-sn1per/ CVE-2026-82329 is a critical, unauthenticated JFrog Artifactory authentication bypass in CISA KEV. Get the passive Nuclei template, the six-branch version logic, and how to detect it at scale with Sn1per.

The post CVE-2026-82329: JFrog Artifactory Auth Bypass Detection with Sn1per first appeared on Sn1perSecurity.

]]> 66330 Introducing SILENTCHAIN Professional: Verified AI Findings for Burp Suite https://sn1persecurity.com/wordpress/introducing-silentchain-ai-professional/?utm_source=rss&utm_medium=rss&utm_campaign=introducing-silentchain-ai-professional Sun, 30 Aug 2026 14:02:13 +0000 https://sn1persecurity.com/wordpress/introducing-silentchain-ai-professional/ SILENTCHAIN Professional is now available at $199/seat/year. The advanced AI Burp Suite extension adds Phase 2 active verification, WAF detection, out-of-band testing, 200+ curated payloads, HTML advisory reports, and 10 AI providers.

The post Introducing SILENTCHAIN Professional: Verified AI Findings for Burp Suite first appeared on Sn1perSecurity.

]]> 66201 CVE-2026-9082: Drupal Core SQL Injection Detection with Sn1per https://sn1persecurity.com/wordpress/cve-2026-9082-drupal-sql-injection-detection-with-sn1per/?utm_source=rss&utm_medium=rss&utm_campaign=cve-2026-9082-drupal-sql-injection-detection-with-sn1per Sat, 15 Aug 2026 20:29:38 +0000 https://sn1persecurity.com/wordpress/cve-2026-9082-drupal-sql-injection-detection-with-sn1per/ CVE-2026-9082 is an actively exploited, unauthenticated SQL injection in Drupal core on PostgreSQL. Learn how to detect every affected host with Sn1per and Nuclei.

The post CVE-2026-9082: Drupal Core SQL Injection Detection with Sn1per first appeared on Sn1perSecurity.

]]> 65817