πŸ” Search
Sign in to post
CVE-2026-46633: Proving exploitability of Twig sandbox bypasshttps://www.reddit.com/r/netsec/comments/1xb2qvz/cve202646633_proving_exploitability_of_twig

I continued researching sandbox bypasses discovered in Twig by project Glasswing. This time, I focused on CVE-2026-46633, which still had no public exploits. This writeup documents my development of payloads for the CVE-2026-46633 and the corresponding SSTImap modules. submitted by /u/vladko312 [link] [comments]

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Executionhttps://thehackernews.com/2026/10/critical-fortisiem-flaw-gets-public.html

Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially

0trust.social media

Loading your media...

Pick a GIF β€” Giphy

Loading GIFs...