r/netsec 10h ago

Authentication bypass in EOL Proxmox VE 7 release

Thumbnail forum.proxmox.com
42 Upvotes

A lot of proxmox 7.0-7 and < 8.0.4 has been rooted today, it's needed to have port :8006 open, exploitation demo here: https://forum.proxmox.com/threads/proxmox-ve-7-is-vulnerable-to-some-type-of-0day-rce-non-auth.186078/post-867875


r/netsec 13h ago

GeoNetwork - Pre-Auth RCE via Unauthenticated File Upload and Unsafe XSLT Processor (4 CVEs, 121 government deployments, all patched)

Thumbnail ethiack.com
8 Upvotes

r/netsec 10h ago

Off the Hook: Discovering and Observing Active Exploitation of Sangoma Switchvox CVE-2026-9586

Thumbnail horizon3.ai
5 Upvotes

r/netsec 17h ago

Don’t Let Abliteration Abliterate Your Bug Hunting: Discovering Verdict Bias in Uncensored Models

Thumbnail clearbluejar.github.io
5 Upvotes

r/netsec 7h ago

Contains AI From Patch to Exploit; Using Claude Code to reverse engineer an n-day in Papercut NG

Thumbnail techanarchy.net
3 Upvotes

r/netsec 9h ago

r/netsec monthly discussion & tool thread

3 Upvotes

Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.

Rules & Guidelines

  • Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
  • Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
  • If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
  • Avoid use of memes. If you have something to say, say it with real words.
  • All discussions and questions should directly relate to netsec.
  • No tech support is to be requested or provided on r/netsec.

As always, the content & discussion guidelines should also be observed on r/netsec.

Feedback

Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.