_J
0.63
Been burning the midnight oil a lot this week to chase things -- latest escapade has been digging into PaperCut CVE-2026-81578 and CVE-2026-82078, pre-auth RCE. I recreated a PoC, coordinated with PaperCut, and we saw i…
Official intelligence summary
HAIJA INTEL REPORT
Generated 31/08/2026, 09:57. Pipeline: Europe/Belgrade. Regular sources favor exploit, blog, red-team, and attack-path content. CVE items only stay with exploit signal.
Total items15
Regular sources8
Tweets / X7
Threshold0.62
You can save this report in your browser with the favorite button. If you need a shared favorite list, use the CLI helper.
Tweets / X
7 itemsRA
0.55
On 8/27/26, #PaperCut Software published an urgent security advisory, detailing active exploitation of a vuln affecting PaperCut NG & MF. PaperCut has confirmed customer incidents. More on CVE-2026-81578 and CVE-2026-82…
0.52
ServiceNow 4 Critical CVEs, including sandbox escape, RCE, sql injection https:// support.servicenow.com/kb?id=kb_artic le_view&sysparm_article=KB3152242 …
0.50
PaperCut Software security response team is investigating active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF. https:// papercut.com/kb/Main/securi ty-bulletin-27-aug-2026-urgent-security-advisory/ …
0.43
Building an AI pentesting tool? Your POC is hiding the real cost. @TufferB breaks it down in our latest blog:
0.38
preauth rce in @whmcs We found a preauth rce in @whmcs 9.0.0 to 9.0.6, since this has been already fixed in 9.0.7, I'll drop the details soon. x.com/realazizk/stat…
0.36
Kaspersky Antivirus For Endpoint ZeroDay Elevation of Privileges Vulnerability Kaspersky 0day ? Anyone ? https:// github.com/MSNightmare/Ha rdBreacher …
Regular sources
8 itemsJSON Deserialiser Unconstrained Resource Consumption Proof of Concept
Posted by Daniel Owens via Fulldisclosure on Aug 29 On 26 October 2025 we published "Struts2 and Related Framework Array/Collection DoS", which was followed up on 07 Mar…
graphql-go/graphql <= 0.8.1: quadratic CPU-exhaustion DoS via full-schema "did you mean" suggestion scan
Posted by William Carrier on Aug 29 Hello, This reports an algorithmic-complexity denial-of-service defect in github.com/graphql-go/graphql, affecting all released versi…
graphql-go/graphql <= 0.8.1: quadratic CPU-exhaustion DoS from a single syntax error
Posted by William Carrier on Aug 29 Hello, This reports an algorithmic-complexity denial-of-service defect in github.com/graphql-go/graphql, affecting all released versi…
ServiceNow warns of three max severity security vulnerabilities
ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in code injection, SQL injection, and privilege esc…
PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Overview On August 27, 2026, PaperCut Software published an urgent security advisory stating that it is investigating active exploitation of a vulnerability affecting Pa…
PaperCut Zero-Day: Active Exploitation and Pre-Auth RCE
PaperCut NG and PaperCut MF are under active exploitation. Huntress reproduced a pre-auth RCE chain and shares urgent patching and exposure guidance.
CyberDanube Security Research 20260611-0 | Multiple Denial of Service Vulnerabilities in Dahua IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC Camera Series
Posted by Thomas Weber | CyberDanube via Fulldisclosure on Aug 29 CyberDanube Security Research 20260611-0 https://www.dahuasecurity.com/ found| 20.10.2025 by| T. Weber,…
Fwd: [Freeipmi-announce] FreeIPMI 1.6.19 Released
Posted by Chad Dougherty on Aug 28 -------- Forwarded Message -------- Subject: [Freeipmi-announce] FreeIPMI 1.6.19 Released Date: Fri, 28 Aug 2026 17:36:03 +0000 From: …