https://infosecpwn.com/categories/vulnerabilities/ Recent content in Vulnerabilities on infosecpwn Hugo en-us Wed, 09 Sep 2026 01:00:00 -0400 https://infosecpwn.com/posts/2026-09-09-telerik-rce-chain-public-exploit/ Wed, 09 Sep 2026 01:00:00 -0400 https://infosecpwn.com/posts/2026-09-09-telerik-rce-chain-public-exploit/ Progress fixed a four-CVE chain in Telerik UI for ASP.NET AJAX back in July. Public exploit code landed on 7 September. EPSS still says 0.5%. Here is what actually determines whether you are exposed. https://infosecpwn.com/posts/2026-09-08-magento-stylesmuggler-cve-2026-75650/ Tue, 08 Sep 2026 18:00:00 -0400 https://infosecpwn.com/posts/2026-09-08-magento-stylesmuggler-cve-2026-75650/ Adobe shipped a hotfix for the Magento template-injection flaw exploited since 4 September. Applying it is the easy half. The half that gets skipped is rotating every credential the exposed encryption key protected.