$ tail -f ./security

Headlines from early disclosure channels, research labs and curated news, each with a short summary.

live updated 23 Oct, 23:17
last 24 h 74 headlines
sources 37

# Today

  1. Rapid7 research infra

    Metasploit Wrap Up: Langflow, MongoDB, and More

    Metasploit adds modules for Langflow authentication bypass and remote code execution flaws, along with other targets such as MongoDB.

# 21 Oct

  1. Rapid7 research infra

    CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

    The PHP project released security updates for two critical unauthenticated remote code execution flaws affecting memory handling and request state.