slvnx

6 ms·

1.
New API integer overflow: one request turned a $0.10 balance into $16.9T(hellorecon.com)
1 points by slvnx 1mo ago|0 comments
2.
CyberPanel's hard-coded JWT secret grants an unauthenticated root shell(hellorecon.com)
1 points by slvnx 1mo ago|0 comments
3.
A BSON symbol namespace bypasses MongoDB's authorization check (CVE-2026-18690)(hellorecon.com)
9 points by slvnx 1mo ago|0 comments
4.
CVE-2026-25089: FortiSandbox unauthenticated command injection added to CISA KEV(hellorecon.com)
33 points by slvnx 2mo ago|1 comments
5.
CVE-2026-15409: SonicWall SMA 1000 SSRF Zero-Day(hellorecon.com)
2 points by slvnx 2mo ago|0 comments
6.
by slvnx 3mo ago
Do you use deepcode, or which cli and/or coding agent you use it with?
7.
by slvnx 3mo ago
This feels like one of those things where "just let users pick their AI assistant" sounds simple until you realize that means access to screen contents, local data, app control, wake words, etc. At that point, who’s actually on th
8.
Cisco SD-WAN Manager arbitrary file write (CVE-2026-20262) – CISA KEV(hellorecon.com)
3 points by slvnx 3mo ago|0 comments
9.
by slvnx 3mo ago
Author here - I liked the watchTowr article too, that’s why it’s linked. And yes, sadly, not every CVE writeup comes with cat pictures. Mine is for a different audience: a 5-minute summary of the important bits, with links to the deeper res
10.
Ivanti Sentry pre-auth RCE (CVE-2026-10520) – CVSS 10.0, public PoC, CISA KEV(hellorecon.com)
19 points by slvnx 3mo ago|2 comments
11.
by slvnx 3mo ago
It’s almost impossible to read the article with all those ads. Is this what the web has become?
12.
Splunk Enterprise PostgreSQL sidecar has no auth (CVE-2026-20253, CVSS 9.8)(hellorecon.com)
2 points by slvnx 3mo ago|0 comments
13.
by slvnx 3mo ago
Could you elaborate pls