Skip to content

Breaking

LiteLLM Proxy Cryptographic Reuse Enables Admin Takeover via Forged Tokens
ConnectWise Supply Chain Breach: Storm-0940 Uses ARTEX AI Agents for Rapid Credential Abuse
GitHub Enterprise Server Researcher @r31n Exploits Chain Flaws in Bug Bounty Program
PHP RCE Vulnerabilities Tested Days Before Patch, Mass Exploitation Follows Update
Chrome Enhanced Protection Adds ClickFix Command Detection and Gemini Scam Warnings
Tor Exit Relays Misconfigured to Intercept SSH Credentials and Email
LiteLLM Proxy Cryptographic Reuse Enables Admin Takeover via Forged Tokens
ConnectWise Supply Chain Breach: Storm-0940 Uses ARTEX AI Agents for Rapid Credential Abuse
GitHub Enterprise Server Researcher @r31n Exploits Chain Flaws in Bug Bounty Program
PHP RCE Vulnerabilities Tested Days Before Patch, Mass Exploitation Follows Update
Chrome Enhanced Protection Adds ClickFix Command Detection and Gemini Scam Warnings
Tor Exit Relays Misconfigured to Intercept SSH Credentials and Email

SSRF

Everything RedTeam Tribune has reported about SSRF: 2 stories, newest first. Part of our Vulnerabilities coverage.

22 Oct
Cyber Attacks

GitHub Enterprise Server Researcher @r31n Exploits Chain Flaws in Bug Bounty Program

Security researcher @r31n combines multiple low-impact vulnerabilities to create high-severity issues on GitHub Enterprise Server, according to GitHub Security Lab.

13 Oct
Vulnerabilities

Crawl4AI SSRF CVE-2026-109238 Leaks Cloud Metadata in Versions Before 0.9.4

A critical server-side request forgery flaw in Crawl4AI versions before 0.9.4 allows attackers to fetch private cloud metadata and internal addresses.