New Certighost PoC exploit lets attackers hijack Windows domains

A proof-of-concept exploit for "Certighost," a Windows Active Directory Certificate Services vulnerability, has been released ...
The Hacker News

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

A public GitLab 18.11.3 PoC chains two Oj parser bugs through crafted Jupyter notebook diffs to execute commands as git ...

vBulletin fixes critical pre-auth RCE flaw with public exploit

A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code ...
TMCnet

The $3 Exploit: Quantro Security Report Reveals AI Has Collapsed the Economics of Vulnerability Exploitation

Autonomous AI agents turned disclosed vulnerabilities into verified working exploits for a median of $2.83 and 11 minutes each. The vulnerabilities they exploited most easily are the ones today's risk ...
Dark Reading

'Certighost' Flaw Haunts Microsoft Active Directory Certificates

Researchers released a proof-of-concept (PoC) exploit for a now-patched flaw in Microsoft's Active Directory Certificate Services (AD CS) that can allow a low-privileged domain user to impersonate a ...
The Hacker News

Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw

Public exploit details show how CVE-2026-61511 reaches PHP eval() in unpatched vBulletin forums through a visitor-controlled ...
The Register on MSN

Patch Cisco ISE bug now before attackers abuse proof-of-concept exploit

No reports of active exploitation … yet Cisco patched a bug in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) products that allows remote attackers with admin-level ...