Hacker Newsnew | past | comments | ask | show | jobs | submit | slvnx's submissions login

1. New API integer overflow: one request turned a $0.10 balance into $16.9T (hellorecon.com) 1 point by slvnx 76 days ago | past 2. CyberPanel's hard-coded JWT secret grants an unauthenticated root shell (hellorecon.com) 1 point by slvnx 78 days ago | past 3. A BSON symbol namespace bypasses MongoDB's authorization check (CVE-2026-18690) (hellorecon.com) 9 points by slvnx 81 days ago | past 4. CVE-2026-25089: FortiSandbox unauthenticated command injection added to CISA KEV (hellorecon.com) 33 points by slvnx 3 months ago | past | 1 comment 5. CVE-2026-15409: SonicWall SMA 1000 SSRF Zero-Day (hellorecon.com) 2 points by slvnx 3 months ago | past 6. Cisco SD-WAN Manager arbitrary file write (CVE-2026-20262) – CISA KEV (hellorecon.com) 3 points by slvnx 4 months ago | past 7. Ivanti Sentry pre-auth RCE (CVE-2026-10520) – CVSS 10.0, public PoC, CISA KEV (hellorecon.com) 19 points by slvnx 4 months ago | past | 2 comments 8. Splunk Enterprise PostgreSQL sidecar has no auth (CVE-2026-20253, CVSS 9.8) (hellorecon.com) 2 points by slvnx 4 months ago | past

Consider applying for YC's Winter 2027 batch! Applications are open till November 2. Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact Search: