Habari Installation Path Disclosure Vulnerability
More information on the flaws can be found here.
Aug 3, 2011By Veerendra GG1 min read
More information on the flaws can be found here.
← Back to Security Research
Featured Posts
Open Silent Lynx Hits CIS Governments With WinRAR Flaw
threat intelligence
CVE Research
Silent Lynx Hits CIS Governments With WinRAR Flaw
Silent Lynx (UAT-6275 / TAG-193) is a cyber-espionage actor targeting government organizations across the Commonwealth of Independent States. From June 2025 through August 2026, the group used four infection chains, including macro-enabled documents, PS2EXE downloaders, LNK-based PowerShell loaders, and WinRAR archives that exploit CVE-2025-8088, to deploy custom reverse shells such as FoalShell, Chvost, Laplas, and PickleShell. Activity spans nine countries and focuses on diplomacy, economic development, environmental management, water resources, and energy. This article summarizes the campaign’s delivery methods, infrastructure exposure, indicators of compromise, and practical mitigations for defenders.
Open Drupal Fixes Critical Field UI Flaw Linked to Remote Code Execution
CVE Research
Drupal Fixes Critical Field UI Flaw Linked to Remote Code Execution
A critical vulnerability in Drupal core's Field UI module could allow attackers to execute arbitrary code on vulnerable websites through exposed contributed modules or custom code. Tracked as CVE-2026-108097, the flaw stems from improper validation of PHP callbacks during table rendering. At least one known exploitation path does not require authentication, potentially putting affected websites at risk of server compromise.
Open Palo Alto PAN-OS Vulnerability CVE-2026-0322 Could Allow Root-Level Code Execution
vulnerability research
