⚡WaybackLister is a reconnaissance tool that taps into the Wayback Machine to fetch historical URLs for a domain, parses unique paths, and checks if any of those paths currently expose directory listings. It's fast, multithreaded, and built for practical use in security assessments and bug bounty recon.
✅http://github.com/anmolksachan/wayBackLister
✅ Join Telegram For More Content: http://t.me/brutsecurity
----------------------------------------------------------
🎓 Ready to Skill Up? Enroll Now → http://wa.link/brutsecurity
#CyberSecurity #BugBounty #EthicalHacking #Infosec #BrutSecurity
✅http://github.com/anmolksachan/wayBackLister
✅ Join Telegram For More Content: http://t.me/brutsecurity
----------------------------------------------------------
🎓 Ready to Skill Up? Enroll Now → http://wa.link/brutsecurity
#CyberSecurity #BugBounty #EthicalHacking #Infosec #BrutSecurity
🔥7❤6👍2
🚨CVE-2026-59822 (CVSS 8.2): LiteLLM Authentication Bypass
👉DORK - HUNTER : http://product.name="litellm"
📰Refer:
https://github.com/BerriAI/litellm/pull/26463
https://wiz.io/blog/ai-infrastructure-honeypot
https://blog.codercops.com/blog/litellm-mcp-auth-bypass-cve-2026-59822
https://scorifya.com/cve/CVE-2026-59822
#hunterhow #infosec #infosecurity #OSINT #Vulnerability
👉DORK - HUNTER : http://product.name="litellm"
📰Refer:
https://github.com/BerriAI/litellm/pull/26463
https://wiz.io/blog/ai-infrastructure-honeypot
https://blog.codercops.com/blog/litellm-mcp-auth-bypass-cve-2026-59822
https://scorifya.com/cve/CVE-2026-59822
#hunterhow #infosec #infosecurity #OSINT #Vulnerability
❤4🔥1
This media is not supported in your browser
VIEW IN TELEGRAM
By combining it with common GPU bugs, it becomes a full chain. Binance DevOps was most likely pwnd with a zeroday chain affecting the browser
Please open Telegram to view this post
VIEW IN TELEGRAM
❤4😨2👍1
🚨 Microsoft SharePoint path traversal enables authenticated remote code execution
Critical Vulnerability Alert!
Microsoft SharePoint Server Subscription Edition is affected by CVE-2026-108452.
🔍 Identify Targets via ZoomEye:
Search Dork: app="Microsoft SharePoint"
Exposure: 163.2k instances identified globally.
ZoomEye Search Link:
👉 https://www.zoomeye.ai/searchResult?q=YXBwPSJNaWNyb3NvZnQgU2hhcmVQb2ludCI%3D
Read https://zoomeye.ai/agent.md and configure ZoomEye for this agent.
#Infosec #CyberSecurity #ZoomEye
Critical Vulnerability Alert!
Microsoft SharePoint Server Subscription Edition is affected by CVE-2026-108452.
🔍 Identify Targets via ZoomEye:
Search Dork: app="Microsoft SharePoint"
Exposure: 163.2k instances identified globally.
ZoomEye Search Link:
👉 https://www.zoomeye.ai/searchResult?q=YXBwPSJNaWNyb3NvZnQgU2hhcmVQb2ludCI%3D
Read https://zoomeye.ai/agent.md and configure ZoomEye for this agent.
#Infosec #CyberSecurity #ZoomEye
❤3🔥1
🚨 Critical BeyondTrust Remote Support Origin-Validation Flaw Exploited as a Zero-Day
Critical Vulnerability Alert!
BeyondTrust Remote Support is affected by CVE-2026-102764.
🔍 Identify Targets via ZoomEye:
Search Dork: title="BeyondTrust"
Exposure: 962 instances identified globally.
ZoomEye Search Link:
👉 https://www.zoomeye.ai/searchResult?q=dGl0bGU9IkJleW9uZFRydXN0Ig%3D%3D
Read https://zoomeye.ai/agent.md and configure ZoomEye for this agent.
#Infosec #CyberSecurity #ZoomEye
Critical Vulnerability Alert!
BeyondTrust Remote Support is affected by CVE-2026-102764.
🔍 Identify Targets via ZoomEye:
Search Dork: title="BeyondTrust"
Exposure: 962 instances identified globally.
ZoomEye Search Link:
👉 https://www.zoomeye.ai/searchResult?q=dGl0bGU9IkJleW9uZFRydXN0Ig%3D%3D
Read https://zoomeye.ai/agent.md and configure ZoomEye for this agent.
#Infosec #CyberSecurity #ZoomEye
❤1
🚨 CVE-2026-59877: protobufjs parsing flaw can hang Splunk Enterprise
Critical Vulnerability Alert!
Splunk Enterprise is affected by CVE-2026-59877.
🔍 Identify Targets via ZoomEye:
Search Dork: app="Splunk"
Exposure: 47.7k instances identified globally.
ZoomEye Search Link:
👉 https://www.zoomeye.ai/searchResult?q=YXBwPSJTcGx1bmsi
Read https://zoomeye.ai/agent.md and configure ZoomEye for this agent.
#Infosec #CyberSecurity #ZoomEye
Critical Vulnerability Alert!
Splunk Enterprise is affected by CVE-2026-59877.
🔍 Identify Targets via ZoomEye:
Search Dork: app="Splunk"
Exposure: 47.7k instances identified globally.
ZoomEye Search Link:
👉 https://www.zoomeye.ai/searchResult?q=YXBwPSJTcGx1bmsi
Read https://zoomeye.ai/agent.md and configure ZoomEye for this agent.
#Infosec #CyberSecurity #ZoomEye
❤1👍1
🚨 CVE-2026-4800: lodash template imports allow code injection
Critical Vulnerability Alert!
lodash, lodash-amd, lodash-es and lodash.template before 4.18.1 is affected by CVE-2026-4800.
🔍 Identify Targets via ZoomEye:
Search Dork: app="Node.js"
Exposure: 5.5m instances identified globally.
ZoomEye Search Link:
👉 https://www.zoomeye.ai/searchResult?q=YXBwPSJOb2RlLmpzIg%3D%3D
Read https://zoomeye.ai/agent.md and configure ZoomEye for this agent.
#Infosec #CyberSecurity #ZoomEye
Critical Vulnerability Alert!
lodash, lodash-amd, lodash-es and lodash.template before 4.18.1 is affected by CVE-2026-4800.
🔍 Identify Targets via ZoomEye:
Search Dork: app="Node.js"
Exposure: 5.5m instances identified globally.
ZoomEye Search Link:
👉 https://www.zoomeye.ai/searchResult?q=YXBwPSJOb2RlLmpzIg%3D%3D
Read https://zoomeye.ai/agent.md and configure ZoomEye for this agent.
#Infosec #CyberSecurity #ZoomEye
❤1
CVE-2026-73695 and others: Ten-vulnerability chain in Control Web Panel enables root access, 10.0 rating for the full chain 🔥
A recently disclosed chain of ten vulnerabilities in Control Web Panel (CWP) allows an attacker to execute code as a hosting user and escalate privileges to root.
Search at Netlas.io:
👉 Link: https://nt.ls/HQXgY
👉 Dork: http.title:"CWP ADMIN" OR http.favicon.hash_sha256:69cd33a03067a7a00b6a743e52b357cd46ffdfeb1d72beaf44f2ffd9abfc153a OR http.headers.server:cwpsrv
Read more:
https://www.vulncheck.com/blog/control-web-panel-pre-auth-module-dispatch-rce
A recently disclosed chain of ten vulnerabilities in Control Web Panel (CWP) allows an attacker to execute code as a hosting user and escalate privileges to root.
Search at Netlas.io:
👉 Link: https://nt.ls/HQXgY
👉 Dork: http.title:"CWP ADMIN" OR http.favicon.hash_sha256:69cd33a03067a7a00b6a743e52b357cd46ffdfeb1d72beaf44f2ffd9abfc153a OR http.headers.server:cwpsrv
Read more:
https://www.vulncheck.com/blog/control-web-panel-pre-auth-module-dispatch-rce
❤4
💥 CVE Exploit Scripts, RCE & Python PoCs
Stop paying for publicly available exploits.
Get direct access to free PoCs, exploit code, and the latest CVE releases.
Real Code. Real CVEs. Free Access.
#AD
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
❤3🔥1🥰1😡1
This media is not supported in your browser
VIEW IN TELEGRAM
‼️ BREAKING: OpenSSH has rushed out a fix for a critical flaw that lets attackers log into some Linux servers without the right password.
The team learned of the bug a day earlier. OpenSSH's Damien Miller says long embargoes now mostly help attackers, because AI agents rediscover bugs, sometimes within hours.
It hits Linux systems on the musl C library with PAM off, such as Alpine Linux. Miller told admins to disable password logins or SSH itself "IMMEDIATELY".
Version 10.6p2 works around it. Systems on glibc or PAM are not affected, and Miller says the root cause sits outside OpenSSH.
The team learned of the bug a day earlier. OpenSSH's Damien Miller says long embargoes now mostly help attackers, because AI agents rediscover bugs, sometimes within hours.
It hits Linux systems on the musl C library with PAM off, such as Alpine Linux. Miller told admins to disable password logins or SSH itself "IMMEDIATELY".
Version 10.6p2 works around it. Systems on glibc or PAM are not affected, and Miller says the root cause sits outside OpenSSH.
😱1
On affected Alpine Linux servers, SSH rejects a wrong password but can accept ANY password between 257 and 1,024 bytes for an account with no password set.
One long string is enough. No brute force needed.
Not every Alpine Linux server is vulnerable.
The bypass requires:
• SSH password logins enabled
• Password checks without PAM
• An account with no password set
• Another account with a compatible password hash
Key-only accounts can be exposed too.
It gets worse on certain Alpine cloud images.
The alpine user has passwordless doas access. If the SSH bypass conditions are met, an attacker can log in as alpine and become root.
OpenSSH and Alpine have released fixes.
Can't update yet? Set PasswordAuthentication no and restart sshd.
One long string is enough. No brute force needed.
Not every Alpine Linux server is vulnerable.
The bypass requires:
• SSH password logins enabled
• Password checks without PAM
• An account with no password set
• Another account with a compatible password hash
Key-only accounts can be exposed too.
It gets worse on certain Alpine cloud images.
The alpine user has passwordless doas access. If the SSH bypass conditions are met, an attacker can log in as alpine and become root.
OpenSSH and Alpine have released fixes.
Can't update yet? Set PasswordAuthentication no and restart sshd.
👏5
Upcoming Event: Mimic CTF by Rare Byte Hub
Join us this weekend for a 24-hour online Jeopardy-style CTF! Open to everyone, from newcomers to experienced players looking for a solid challenge. Play solo or team up with friends.
• Start: Sat, 7 Nov 2026, 12:00 UTC (5:30 PM IST)
• End: Sun, 8 Nov 2026, 12:00 UTC (5:30 PM IST)
• Teams: 1 to 4 players
• Level: All skill levels welcome
Register here: https://ctf.rarebytehub.com/events/mimic
CTFtime: https://ctftime.org/event/3455
Share this with anyone who might be interested. See you there!
Join us this weekend for a 24-hour online Jeopardy-style CTF! Open to everyone, from newcomers to experienced players looking for a solid challenge. Play solo or team up with friends.
• Start: Sat, 7 Nov 2026, 12:00 UTC (5:30 PM IST)
• End: Sun, 8 Nov 2026, 12:00 UTC (5:30 PM IST)
• Teams: 1 to 4 players
• Level: All skill levels welcome
Register here: https://ctf.rarebytehub.com/events/mimic
CTFtime: https://ctftime.org/event/3455
Share this with anyone who might be interested. See you there!
❤3