#SecDB
LightNews LightNews
secdb.bsky.social
🚨PHP2Shell (CVE-2026-109618 / CVE-2026-109619): two pre-auth RCEs in the PHP core, 5.4 through 8.5.11.

From SecDB data, two weeks after disclosure:
🔗 secdb.nttzen.cloud/blog/2026/11...

#InfoSec #PHP2Shell
#NTTDATA #SecDB
Making sure you're not a bot!
secdb.nttzen.cloud
November 5, 2026 at 2:58 PM
secdb.bsky.social
🚨 CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)

⚠️ CVE-2026-109618 - PHP Memory Corruption Vulnerability

⚠️ CVE-2026-109619 - PHP Stale Internal Request-State Vulnerability

#ZEN #SecDB #InfoSec #CISA_KEV
October 27, 2026 at 3:01 AM
secdb.bsky.social
CLI: github.com/giterlizzi/s...
ZEN SecDB: secdb.nttzen.cloud
GitHub - giterlizzi/secdb-cli: ZEN SecDB CLI
ZEN SecDB CLI. Contribute to giterlizzi/secdb-cli development by creating an account on GitHub.
github.com
October 22, 2026 at 10:10 PM
secdb.bsky.social
🚨 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1023)

⚠️ CVE-2026-114625 - Arista VeloCloud Orchestrator SQL Injection Vulnerability

#ZEN #SecDB #InfoSec #CISA_KEV
October 23, 2026 at 7:02 PM
secdb.bsky.social
Looked it up from the terminal with the ZEN SecDB CLI:
secdb search php2shell

, then
secdb cve CVE-2026-109618

Same output lists 20 advisories from Debian, Red Hat, SUSE, Ubuntu and others, so you know if your distro has the fix.

secdb.nttzen.cloud
October 22, 2026 at 10:08 PM
secdb.bsky.social
🛡️secdb-cli 0.7.0 is out.

New: secdb search, full-text search across CVEs, CWEs, advisories, NASL plugins and ExploitDB, with CISA KEV marks.
Also new: --jq to filter the JSON output, no jq install needed.

github.com/giterlizzi/s...

#InfoSec #VulnMgmt #OSS #Golang #CVE
#NTTDATA #ZENSecDB
Release v0.7.0 · giterlizzi/secdb-cli
Notable changes Added secdb search: full-text search across ZEN SecDB (CVEs, CWEs, advisories, NASL plugins, ExploitDB entries), narrowed by record type (--type, a comma-separated list) and last-m...
github.com
October 16, 2026 at 12:14 PM
secdb.bsky.social
🚨 PwnEscape (CVE-2026-99999) has been identified as a notable vulnerability.

ℹ️ Additional details, advisories and sightings on ZEN SecDB 👉 secdb.nttzen.cloud/cve/detail/C...

#InfoSec #PwnEscape #Linux #Kernel #CVE202699999
#NTTDATA #ZENSecDB
Making sure you're not a bot!
secdb.nttzen.cloud
October 16, 2026 at 1:07 PM
secdb.bsky.social
🚨 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1015)

⚠️ CVE-2026-21589 - Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

#ZEN #SecDB #InfoSec #CISA_KEV
October 15, 2026 at 7:00 PM
jelv.is
Apparently Goldman was doing a version of this for their pricing models in the early 2000s with Slang and SecDB—and it was a good experience, at least for the folks working on the pricing models

Not literally content addressed, but automatically merged and deployed
October 14, 2026 at 1:26 AM
secdb.bsky.social
🚨 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1013)

⚠️ CVE-2026-104935 - Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

#ZEN #SecDB #InfoSec #CISA_KEV
October 13, 2026 at 5:00 PM
secdb.bsky.social
🚨 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1004)

⚠️ CVE-2026-88779 - Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

#ZEN #SecDB #InfoSec #CISA_KEV
October 4, 2026 at 9:00 PM
secdb.bsky.social
🚨 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1001)

⚠️ CVE-2026-104286 - Fortinet FortiMail Path Traversal Vulnerability

#ZEN #SecDB #InfoSec #CISA_KEV
October 1, 2026 at 9:00 PM
secdb.bsky.social
🚨 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)

⚠️ CVE-2026-76504 - Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

#ZEN #SecDB #InfoSec #CISA_KEV
September 30, 2026 at 7:00 PM
secdb.bsky.social
🚨 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0929)

⚠️ CVE-2026-86950 - Apple Multiple Products Out-of-Bounds Write Vulnerability

#ZEN #SecDB #InfoSec #CISA_KEV
September 29, 2026 at 3:00 PM
secdb.bsky.social
🚨 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0921)

⚠️ CVE-2026-7273 - Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability

#ZEN #SecDB #InfoSec #CISA_KEV
September 21, 2026 at 9:00 PM
secdb.bsky.social
secdb-cli 0.5.0 🚀

Point it at a repo → discovers every manifest → known vulns as inline diagnostics + SARIF with file & line.

Plain LSP over stdio: Neovim, Kate, Zed, any LSP editor.

github.com/giterlizzi/s...

#DevSecOps #golang #AppSec #OpenSource
#NTTDATA #ZEN #SecDB
September 18, 2026 at 7:22 AM
secdb.bsky.social
🚨 CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0918)

⚠️ CVE-2025-39964 - Linux Kernel Race Condition Vulnerability

⚠️ CVE-2026-53266 - Linux Kernel Out-of-Bounds Write Vulnerability

#ZEN #SecDB #InfoSec #CISA_KEV
September 18, 2026 at 3:00 PM
secdb.bsky.social
🚨 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0916)

⚠️ CVE-2026-58704 - Google Pixel Improper Authorization Vulnerability

#ZEN #SecDB #InfoSec #CISA_KEV
September 16, 2026 at 3:01 PM
secdb.bsky.social
🚨 ZcopyReaper (CVE-2026-43502) has been identified as a notable vulnerability.

ℹ️ Additional information on ZEN SecDB 👉 secdb.nttzen.cloud/cve/detail/C...

#Infosec #ZcopyReaper #Linux #Kernel #LPE #CVE202643502
#NTTData #ZEN #SecDB
September 14, 2026 at 10:13 PM
secdb.bsky.social
🚨 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0914)

⚠️ CVE-2026-76461 - Cisco Secure Email Gateway SQL Injection Vulnerability

#ZEN #SecDB #InfoSec #CISA_KEV
September 14, 2026 at 9:00 PM
secdb.bsky.social
🚨 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0904)

⚠️ CVE-2026-85046 - Google Chromium V8 Type Confusion Vulnerability

#ZEN #SecDB #InfoSec #CISA_KEV
September 4, 2026 at 7:00 PM
secdb.bsky.social
📈 CVE Published in last 30 days (2026-08-01 - 2026-08-01)

Total CVEs:

Severity:
- Critical: 1702
- High: 5241
- Medium: 3734
- Low: 735
- None: 1482

See more at https://secdb.nttzen.cloud/updates/c891743d-07f7-421e-84af-fcfd706a9999/vulnerabilities-published-in-august-2026.

#ZEN #SecDB #InfoSec
September 1, 2026 at 7:54 AM
secdb.bsky.social
🚨 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0825)

⚠️ CVE-2026-60004 - Gitea Code Injection Vulnerability

#ZEN #SecDB #InfoSec #CISA_KEV
August 25, 2026 at 6:00 PM
secdb.bsky.social
🚨 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0824)

⚠️ CVE-2026-21962 - Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

#ZEN #SecDB #InfoSec #CISA_KEV
August 24, 2026 at 9:00 PM
secdb.bsky.social
Introducing secdb-cli: ZEN SecDB from your terminal

Query CVEs and audit your dependencies (in PURL format) without leaving the terminal (CI-friendly gating included).

secdb.nttzen.cloud/blog/2026/08...

#opensource #cli #audit #cve #purl #ci #vulnerability #dependency
#nttdata #zen #secdb
Making sure you're not a bot!
secdb.nttzen.cloud
August 20, 2026 at 7:53 PM