Vulmon (@vulmoncom) header
Vulmon (@vulmoncom) profile picture

Vulmon

@vulmoncom

Vulnerability Intelligence Search Engine https://teapawt.net/t.co/nxqvEXUxMU Offical Account | Follow @VulmonFeeds for vulnerability feed

 Custom Vulnerability Alerts 👉
alerts.vulmon.com
Joined November 2017
  • Tweets930
  • Following2
  • Followers2.4K
152Media
Photo by Vulmon (@vulmoncom)Photo by Vulmon (@vulmoncom)Photo by Vulmon (@vulmoncom)Photo by Vulmon (@vulmoncom)Photo by Vulmon (@vulmoncom)Photo by Vulmon (@vulmoncom)Photo by Vulmon (@vulmoncom)Photo by Vulmon (@vulmoncom)Photo by Vulmon (@vulmoncom)Photo by Vulmon (@vulmoncom)
Vulmon retweeted
Clerk (@clerk) profile picture
Clerk
@clerk9 Jul 2025
Today we published CVE-2025-53548 in response to a vulnerability in our verifyWebhook() helper. It advises those using this helper to upgrade their npm package. Customers we believe were using affected versions were notified yesterday, in advance of the public disclosure. We regret the introduction of this vulnerability and are extremely grateful to the Clerk customer who responsibly disclosed the issue. More details are available here: clerk.com/changelog/2025-07-…
CVE-2025-53548

CVE-2025-53548

clerk.com
1
1
15
2,867
I published blogs detailing two vulnerabilities I recently discovered in Sudo. Update to 1.9.17p1. CVE-2025-32462 - Sudo Host option Elevation of Privilege Vulnerability stratascale.com/vulnerabilit… CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability stratascale.com/vulnerabilit…
11
80
11
264
45,808
Just finished reproducing CVE-2025-32433 and putting together a quick PoC exploit — surprisingly easy. Wouldn’t be shocked if public PoCs start dropping soon. If you’re tracking this, now’s the time to take action. #Erlang #SSH
12
131
8
419
60,180
It's always nice to see the fruits of my labor. The #laravel volt vulnerability just received it's #CVE number and a score of 9.3 / 10. CVE-2025-27517
Image from Jeremy Angele (@angelej_dev)
Jeremy Angele (@angelej_dev) profile pictureJeremy Angele@angelej_dev5 Mar 2025
BREAKING: There is a new critical #RCE vulnerability in the @laravelphp volt package ( < v1.7.0 ) affecting every application. Update your livewire/volt dependency to v1.7.0, ASAP! GHSA-v69f-5jxm-hwvv
1
1
339
Developed an exploit for CVE-2025-21333 (quite unreliable): vulnerability in vkrnlintvsp.sys. Exploit code: github.com/MrAle98/CVE-2025-… Exploits a paged pool overflow overwriting a _IOP_MC_BUFFER_ENTRY*. Hope you find it useful in case not already shown🙂.
GitHub - MrAle98/CVE-2025-21333-POC: POC exploit for CVE-2025-21333 heap-based buffer overflow. It...

GitHub - MrAle98/CVE-2025-21333-POC: POC exploit for CVE-2025-21333 heap-based buffer overflow. It...

POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I/O ring IOP_MC_BUFFER_ENTRY - MrAle98/CVE-2025-21333-POC

github.com
9
101
1
363
34,434
CVE-2025-24118 is an absolutely crazy race condition I found in the macOS / XNU kernel. Safe memory reclamation, read-only objects, memcpy implementation details, and a race condition- oh my! jprx.io/cve-2025-24118
CVE-2025-24118 Writeup

CVE-2025-24118 Writeup

A crazy race condition in the XNU kernel.

jprx.io
5
79
7
335
56,801
Critical Palo Alto Networks PAN-OS authentication bypass 🚨 Exploited in the wild 🚨 Details of CVE-2024-0012: vulmon.com/vulnerabilitydeta… #Vulmon #infosec #PaloAlto

CVE-2024-0012 - Authentication Bypass in PAN-OS…

Authentication Bypass in PAN-OS: Unauthenticated Admin Privilege Risk. There is an authentication bypass issue in Palo Alto Networks PAN-OS software. An…

vulmon.com
1
2
484
🚨 Scanning Ivanti Cloud Services Appliance - Path Traversal (CVE-2024-8963) Using Nuclei detect it fast and keep your assets secure! 🔍 Template : cloud.projectdiscovery.io/?t… Reference: fortinet.com/blog/threat-res… #ivanti #kev #hackwithautomation @pdnuclei
Image from Dhiyaneshwaran (@DhiyaneshDK)
1
37
1
167
19,053
This is a well-written article about CVE-2024-38821 — a critical Spring authorization bypass vulnerability. The blog post provides a clear explanation of filters and handlers workflows. deep-kondah.com/spring-webfl…
Spring WebFlux Authorization Bypass: CVE-2024-38821 Explained

Spring WebFlux Authorization Bypass: CVE-2024-38821 Explained

Spring announced on October 25, 2024, CVE-2024-38821, a critical vulnerability allowing attackers to access restricted resources under certain circumstances. The vulnerability specifically impacts...

deep-kondah.com
48
1
156
11,870
🚨🚨🚨 PoC DROP! Full Details of the CVE-2024-4358 are out now!, a deserialization issue 🔥 chained with an authentication bypass 🪲 leading to pre-auth RCE🩸, This research would've not been possible without the help of my dear friend Soroush @irsdl 💪 summoning.team/blog/progress…

Molding lies into reality || Exploiting CVE-2024-4358

Discovering a zero-day authentication bypass and chaining a .NET deserialization to achieve pre-auth RCE on Progress Report Server

summoning.team
9
108
4
277
61,728
I tried to write an exploit for CVE-2022-24355 in TP-Link TL-WR940N, i want to thank @s4muii for his help with this exploit. Blog: flex0geek.blogspot.com/2024/… Exploit: github.com/flex0geek/cves-ex… #cve_2022_24355 #pwn
Image from Mohamed Sayed - مُحَمَّد 🇵🇸 (@FlEx0Geek)
8
1
30
2,809
Vulmon retweeted
Lau (@notselwyn) profile picture
Lau@notselwyn26 Mar 2024
Exciting news! 🚀 Just dropped my blogpost unveiling the universal Linux kernel LPE PoC for CVE-2024-1086 (working on v5.14 - v6.7) used for pwning Debian, Ubuntu, and KernelCTF Mitigation instances, including novel techniques like Dirty Pagedirectory 🧵 pwning.tech/nftables
Flipping Pages: An analysis of a new Linux vulnerability in nf_tables and hardened exploitation...

Flipping Pages: An analysis of a new Linux vulnerability in nf_tables and hardened exploitation...

A tale about exploiting KernelCTF Mitigation, Debian, and Ubuntu instances with a double-free in nf_tables in the Linux kernel, using novel techniques like Dirty Pagedirectory. All without even...

pwning.tech
12
262
22
768
115,221
LockBit acknowledged that they just lost 22 sites to law enforcement to, "Operation Chronos." According to VXuG Lockbit the group claims that law enforcement agencies compromised them by exploiting CVE-2023-3824. Lockbit affiliates receive the message below when they log in.
Image from Jux Mux (@UxTruckLuck)
1
1
3
3,061
Hey that's my CVE report! 😍😁 Here is the vulnerability analysis breakdown: security.snyk.io/vuln/SNYK-J…
Directory Traversal in @nubosoftware/node-static | CVE-2023-26111 | Snyk

Directory Traversal in @nubosoftware/node-static | CVE-2023-26111 | Snyk

High severity (7.5) Directory Traversal in @nubosoftware/node-static | CVE-2023-26111

security.snyk.io
Vulmon Vulnerability Feed (@VulmonFeeds) profile pictureVulmon Vulnerability Feed@VulmonFeeds6 Mar 2023
CVE-2023-26111 All versions of the package @nubosoftware/node-static; all versions of the package node-static are vulnerable to Directory Traversal due to improper file path sanitization in the startsWith() method... vulmon.com/vulnerabilitydeta…

CVE-2023-26111 All versions of the package…

All versions of the package @nubosoftware/node-static; all versions of the package node-static are vulnerable to Directory Traversal due to improper file path…

vulmon.com
1
1
7
1,115
We now have an RCE exploit module in the @metasploit pull queue for CVE-2024-0204 in Fortra GoAnywhere MFT: github.com/rapid7/metasploit…
Image from Stephen Fewer (@stephenfewer)
1
48
1
123
16,077
Ugh. CVE-2023-40547 is a critical bug that exists in every #Linux boot loader signed in the past decade
Image from nixCraft 🐧 (@nixcraft)
5
21
2
167
31,793
Exploit for CVE-2022-4262. Fukin finally! Shoutout to @_clem1 for finding the ITW exploit. And shoutout to @5aelo, @bjrjk, @alisaesage for their RCA's and prior analysis of the vuln :). github.com/mistymntncop/CVE-…
GitHub - mistymntncop/CVE-2022-4262

GitHub - mistymntncop/CVE-2022-4262

Contribute to mistymntncop/CVE-2022-4262 development by creating an account on GitHub.

github.com
15
59
225
40,217
PoC to takeover Android using another Android by exploiting critical Bluetooth vulnerability to install #Metasploit payload without proper Bluetooth pairing (CVE-2023-45866) It still affects Android 10 and bellow mobile-hacker.com/2024/01/23… #NetHunter
18
285
15
1,066
109,458
PoC for CVE-2023-0386, Linux Kernel Privilege Escalation , github.com/xkaneiki/CVE-2023…
GitHub - xkaneiki/CVE-2023-0386: CVE-2023-0386在ubuntu22.04上的提权

GitHub - xkaneiki/CVE-2023-0386: CVE-2023-0386在ubuntu22.04上的提权

CVE-2023-0386在ubuntu22.04上的提权. Contribute to xkaneiki/CVE-2023-0386 development by creating an account on GitHub.

github.com
52
1
117
19,441
Vulmon retweeted
Go (@golang) profile picture
Go
@golang2 May 2023
🎆 Go 1.20.4 and 1.19.9 are released! 🔐 Security: Includes security fixes for html/template (CVE-2023-24539, CVE-2023-24540, and CVE-2023-29400). 📢 Announcement: groups.google.com/g/golang-a… ⬇️ Download: go.dev/dl/#go1.20.4 #golang
Image from Go (@golang)
7
105
5
346
62,907
Load more