esecurityplanet.com resources

esecurityplanet.com

Resources curated from this publisher and indexed across appsec.fyi topic pages. Last item added: 2026-08-22.

Supply Chain 8 RCE 6 SQLi 2 SSRF 2 XSS 2 AI 1 API Sec 1 GraphQL 1 Mobile 1 Python 1

Date Added	Resource	Excerpt
2026-08-22 2026	Microsoft Patches Entra ID RCE Vulnerability Exploited in Attacks RCE	Library of security advisories detailing CVE-2026-69836, a maximum-severity vulnerability in Microsoft Entra ID. This deserialization flaw allowed unauthenticated remote code execution and was exploited in attacks before Microsoft mitigated the issue. While customers need no immediate action, security teams should review Entra ID environments for signs of compromise, focusing on privileged activity, application changes, and suspicious sessions, and implement Zero Trust principles to mitigate identity-based risks.
2026-08-20 2026	GitLab Patches Critical CVE-2026-19478 GraphQL Vulnerability GraphQL	Writeup on CVE-2026-19478, a critical GitLab vulnerability with a CVSS score of 9.4, enabling unauthenticated attackers to delete public repositories and alter project data via a GraphQL directive. Self-managed instances are at risk, with observed in-the-wild exploitation attempts. Compromise poses software supply chain risks by manipulating repositories, merge records, and maintainer access. Immediate patching is recommended, with temporary controls including restricting unauthenticated /api/graphql access and monitoring for suspicious activity.
2026-08-18 2026	LiteLLM Supply-Chain Attack Exposed Credentials Across 2500 Organizations Supply Chain	Writeup of the LiteLLM supply-chain attack, which utilized malicious versions 1.82.7 and 1.82.8 on PyPI to steal cloud keys, repository tokens, SSH keys, Kubernetes secrets, and package credentials. Claimed by TeamPCP, the attack followed an earlier compromise of Trivy and may have exposed credentials across over 2,500 organizations and hundreds of thousands of CI/CD pipelines, with stolen data potentially reaching 195 terabytes.
2026-08-06 2026	Oracle SQL Injection Attack Enables Remote Code Execution SQLi	Writeup detailing an Oracle SQL injection attack that achieved remote code execution by abusing `CREATE JAVA SOURCE` functionality. Threat actors deployed the `khunt` toolkit within the Oracle database, leveraging modules like `KhuntCmd` for OS command execution and `KhuntHash` for credential theft. This technique highlights how legitimate database features can be weaponized, underscoring the need for secure coding, least-privilege access, enhanced Oracle monitoring, and robust incident response.
2026-07-20 2026	WordPress Remote Code Execution Flaws Get Public Exploits RCE	Library for WordPress security updates, addressing the wp2shell attack chain that chains CVE-2026-63030 (REST API batch-route confusion) and CVE-2026-60137 (SQL injection in WP_Query) for pre-authentication remote code execution in versions 6.9.x and 7.0.x. Public proof-of-concept exploits are available, demonstrating multiple attack paths including credential theft and arbitrary command execution. Immediate patching is critical to mitigate risks.
2026-06-24 2026	FFmpeg PixelSmash Vulnerability Enables Remote Code Execution RCE	Writeup on CVE-2026-8461, the "PixelSmash" vulnerability, details how a flaw in FFmpeg's MagicYUV decoder allows remote code execution via specially crafted media files. This critical vulnerability, with a CVSS score of 8.8, affects numerous FFmpeg-dependent applications like Jellyfin and Nextcloud, and can be triggered by automated processes such as thumbnail generation or metadata extraction. Researchers successfully demonstrated RCE and denial-of-service conditions across various products including Kodi, mpv, and OBS Studio. Mitigation strategies include patching FFmpeg, disabling unnecessary codecs, restricting media uploads, and isolating media-processing workloads.
2026-06-02 2026	Claude Code GitHub Actions Flaw Created Supply Chain Attack Risk Supply Chain	Library components for Claude Code GitHub Actions were found to have vulnerabilities that could lead to supply chain attacks. These flaws allowed attackers to bypass permission controls and inject untrusted input into trusted workflows, potentially exposing sensitive credentials like GitHub Actions OIDC tokens. The most severe scenario could have introduced malicious code into Anthropic's own claude-code-action repository, impacting downstream users. Organizations should upgrade to the latest version and review workflow permissions to mitigate these risks.
2026-05-27 2026	TeamPCP Compromised LiteLLM in AI Supply Chain Attack Supply Chain	Library compromising LiteLLM through an AI supply chain attack involved poisoning the Trivy scanner to steal CI/CD tokens, enabling the publication of malicious LiteLLM packages to PyPI. These packages used source injection and stealthy .pth file execution to harvest credentials for OpenAI, Anthropic, Azure, AWS, and Kubernetes, highlighting risks in AI infrastructure and developer pipelines.
2026-05-12 2026	Claude Code MCP Attack Enables Persistent Token Theft Supply Chain	Analysis of a Claude Code MCP attack reveals a sophisticated MitM technique that abuses integrations to steal OAuth tokens, enabling persistent access to connected SaaS platforms. The attack leverages malicious npm postinstall hooks to silently rewrite the `~/.claude.json` configuration file, redirecting traffic through attacker-controlled proxies. This method is difficult to detect as compromised OAuth sessions appear legitimate in audit logs and token rotation alone is insufficient. Organizations should implement layered controls focusing on configuration monitoring, OAuth security, and software supply chain governance.
2026-05-11 2026	AI Is Reshaping Software Supply Chain Risk Supply Chain	Analysis of AI's impact on software supply chain security highlights expanding attack surfaces due to AI-assisted development, with 84% of developers using AI tools. Traditional security controls like EDR and MDM lack visibility into AI integrations, browser extensions, and package managers. This leads to increased risk from malicious open-source packages, with Aikido Intel identifying up to 100,000 daily. Organizations require real-time visibility and install-time controls for developer tooling, as compromised workstations grant attackers trusted access to repositories and credentials.
2026-05-05 2026	Android Zero-Click RCE Vulnerability Enables Remote Shell Access Mobile RCE	Reference for CVE-2026-0073, a proximal zero-click RCE vulnerability in Android's Debug Bridge daemon (adbd). This flaw, affecting multiple Android versions, allows attackers on the same local network or within physical proximity to gain remote shell access without user interaction, bypassing application sandboxing. Exploitation requires timely patching, disabling USB debugging, network segmentation, and implementing zero-trust policies.
2026-04-30 2026	SAP npm Supply Chain Attack Targets Developer Credentials Supply Chain	Writeup of an SAP npm supply chain attack, TeamPCP group leveraging compromised @cap-js/sqlite, @cap-js/postgres, @cap-js/db-service, and mbt packages to steal developer credentials and secrets including GitHub, npm, AWS, Azure, GCP, and Kubernetes tokens via npm's preinstall script functionality and Bun JavaScript runtime.
2026-04-30 2026	GitHub Flaw Enables Remote Code Execution With a Single Git Push RCE	Writeup detailing CVE-2026-3854, a vulnerability in GitHub's internal git protocol allowing authenticated users to achieve remote code execution. Exploitation leveraged an injection flaw in the X-Stat header, where semicolon-delimited options, unsanitized by GitHub, could override security controls via a "last-write-wins" parsing model. This flaw affected both GitHub.com and GitHub Enterprise Server, potentially leading to repository compromise and server takeover. Mitigation involves upgrading GHES, enforcing least privilege, monitoring git activity, and hardening configurations.
2026-04-23 2026	Checkmarx Supply Chain Attack Exploits Docker Images and CI/CD Pipelines Supply Chain	Library exploiting Docker image poisoning and VS Code extension vulnerabilities, specifically targeting Checkmarx KICS and associated extensions (versions 1.17.0, 1.19.0), as part of a multi-stage supply chain attack by the TeamPCP group. The attack involved redirecting Docker image tags like `v2.1.20` and `alpine`, and a second-stage payload `mcpAddon.js` was executed via the Bun runtime, leading to credential harvesting of GitHub tokens, cloud credentials, and SSH keys. This campaign extended to compromise the Bitwarden CLI, demonstrating a broader trend of CI/CD pipeline abuse.
2026-04-21 2026	API Security Risks Rise as AI Adoption Accelerates API Sec	Survey of API security risks stemming from AI adoption, revealing that 49% of organizations struggle to monitor machine-to-machine traffic and 48% cannot distinguish AI agents from bots. The report highlights amplified vulnerabilities like broken object-level authorization (BOLA) and challenges with AI-generated code security, noting traditional SAST and DAST tools are insufficient. Attackers increasingly target authenticated access, with 99% of attempts originating from such entities, underscoring the need for continuous verification and behavioral monitoring.
2026-04-13 2026	Marimo RCE Flaw Exploited Within Hours of Disclosure RCE	Tool for detecting and mitigating the Marimo RCE vulnerability (CVE-2026-39987), which allows pre-authentication remote code execution via an unauthenticated WebSocket endpoint. Exploitation observed within 10 hours of disclosure, targeting sensitive credentials and infrastructure. Mitigation strategies include patching, access control, credential rotation, least privilege, and enhanced monitoring.
2026-04-11 2026	400K WordPress Sites Exposed by Elementor Ally Plugin SQL Flaw SQLi	Library vulnerability in Elementor's Ally plugin, tracked as CVE-2026-2413, exposes over 400,000 WordPress sites to SQL injection attacks. Exploitable without authentication when the Remediation module is active, the flaw allows attackers to steal sensitive data like password hashes by manipulating database queries through crafted URL parameters. Elementor has released a patch, and users are advised to update the plugin, disable unused features, deploy a WAF, and enforce least privilege for database accounts.
2026-04-11 2026	AI Agent Attacks in Q4 2025 Signal New Risks for 2026 AI	Analysis of Q4 2025 AI agent attacks highlights evolving threats including system prompt extraction via hypothetical scenarios and obfuscation. Attackers also bypass content controls using indirect methods and probe agents for weaknesses. New attack paths emerge through agentic capabilities like document browsing and tool calls, often via indirect prompt injection. Organizations must extend security controls, validate external content, enforce least-privilege access, and prepare AI-specific incident response.
2026-04-10 2026	CVE-2025-56005: Python PLY Flaw Enables Remote Code Execution Python	Library for hardening Python applications against the CVE-2025-56005 remote code execution vulnerability in the PLY (Python Lex-Yacc) library. This flaw exploits unsafe pickle deserialization when loading cached parser tables via the undocumented `picklefile` parameter, allowing arbitrary code execution during application startup before traditional security controls are active. The library addresses this by promoting secure deserialization practices, filesystem hardening for parser cache locations, and pipeline protections to prevent artifact poisoning.
2026-04-02 2026	LiteLLM Supply Chain Attack Exposes Credentials Across AI Ecosystems Supply Chain	Library detailing a LiteLLM supply chain attack where malicious PyPI packages, injected by threat actor TeamPCP, silently stole credentials and infrastructure data. The multi-stage malware used stealthy execution, harvested sensitive information including cloud credentials and Kubernetes secrets, and established persistence via system-level backdoors and privileged pod deployment. Mitigation strategies involve removing compromised versions, rebuilding systems, rotating credentials, auditing pipelines, and strengthening supply chain security through dependency pinning and verification.
2026-02-25 2026	XSS Bug in VS Code Extension Exposed Local Files XSS	Writeup on a cross-site scripting (XSS) vulnerability in the official Live Preview VS Code extension, impacting versions up to 0.4.16. This flaw allowed malicious websites to enumerate local files and exfiltrate sensitive data, including API keys and source code, by exploiting improper input sanitization in the extension's embedded HTTP server. Mitigation strategies include updating the extension, disabling non-essential plugins, implementing host firewalls, and utilizing secure secret management.
2026-02-11 2026	FortiSandbox XSS Vulnerability Allows Remote Command Execution XSS	Writeup detailing CVE-2025-52436, a reflected XSS vulnerability in FortiSandbox's web interface that allows unauthenticated remote command execution. Insufficient input sanitization enables attackers to inject malicious JavaScript, which, when rendered by a privileged user, can grant command-line access to the underlying system. Affected versions require prompt patching or migration, and mitigation strategies include access restrictions, WAF deployment, log monitoring, and incident response planning.
2025-11-13 2025	ChatGPT Exploited Through SSRF Flaw in Custom GPT Actions SSRF	Library for detecting SSRF vulnerabilities in AI systems, specifically detailing an exploit against ChatGPT's Custom GPT Actions. The vulnerability allowed attackers to bypass HTTPS requirements and inject custom headers to access internal cloud metadata, potentially exposing Azure credentials. Safeguards discussed include allowlisting outbound connections, blocking metadata endpoints, network egress controls, zero-trust validation for AI requests, and robust IAM boundaries.
2025-03-12 2025	SSRF Exploitation Surge Highlights Evolving Cyberthreats SSRF	Analysis of a coordinated surge in Server-Side Request Forgery (SSRF) attacks, highlighting exploitation of critical vulnerabilities including CVE-2020-7796 in Zimbra, CVE-2021-21973 and CVE-2021-22054 in VMware, and multiple CVEs in GitLab. These attacks, originating from hundreds of unique IP addresses across various countries, demonstrate a structured and automated approach to breaching internal systems and cloud environments by accessing metadata APIs and mapping networks.