// security
$ tail -f ./security
Headlines from early disclosure channels, research labs and curated news, each with a short summary.
live updated 23 Oct, 22:38
last 24 h 73 headlines
sources 37
# Today
-
Metasploit Wrap Up: Langflow, MongoDB, and More
Metasploit adds modules for Langflow authentication bypass and remote code execution flaws, along with other targets such as MongoDB.
# 21 Oct
-
CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP
The PHP project released security updates for two critical unauthenticated remote code execution flaws affecting memory handling and request state.