InfoSec Planet

A collection of diverse security content from a curated list of sources. This website also serves as a demo for "worker-planet", the software that powers it.

AIs Compress Exploit Timeline

on 10/09/2026

Give an AI agent a mere rumor of an exploit, and it’s enough for them to find it. What’s worse, I found I could use my own agents to find the exploit just by knowing roughly what it was about and so could have been exploiting it well before the public patch was available! Given that just the rumour of a security issue seems enough to give attackers enough info to find new exploits, we& [...]

InfoSec Planet

A collection of diverse security content from a curated list of sources. This website also serves as a demo for "worker-planet", the software that powers it.

AIs Compress Exploit Timeline

Driver’s License Data for Sale

Claude Fable Solves a Historical Cipher

A “proof” of Fermat’s Last Theorem that fits the margin

Microsoft Plugs Nearly 1,000 Security Holes

AIs as Modern Genies

22: FTP wildcard matching decodes server-provided filenames, enabling directory traversal

Stack Buffer Overflow in mariadb-dump quote_name() Allows Malicious Server to Execute Arbitrary Code on Client

Stealing AI Reasoning Traces

Out-of-bounds read in MariaDB .frm parsing enables RCE via vtable hijacking

49: Cookie-jar save transfers group access to a different GID

29: CURLOPT_ISSUERCERT accepts a different-key certificate when issuer metadata collides

08: CVE-2026-7009 fix incomplete for AWS-LC: `--cert-status` bypass on SecTrust path

Apple SecTrust fallback ignores CURLOPT_CRLFILE, letting a revoked cert pass

HTTP Digest nonce reused across an httpshttp scheme change on the same handle

How AI has changed the way I think, build, and work. A day in the life of an Intigriti Engineer

54: Rejected HTTP/2 push destroys MIME callback state still used by parent (use-after-free)

57: Heap out-of-bounds read in `curl_easy_escape_ccsid()` / `curl_easy_unescape_ccsid()`

43: HTTP proxy CONNECT header chooses the `-OJ` filename after a redirect

36: HTTP upload resume offset consumed twice after early 307/308 redirect

11: `CURLOPT_FORBID_REUSE` silently lost on multiplexed HTTP/2 connection when the forbidding transfer finishes first

MariaDB GRANT PROXY permits unauthorized authentication changes and administrator account takeover

MariaDB: heap buffer overflow in ha_tina::chain_append() lets a low-privileged user crash the server via CSV row deletion

KILL authorization trusts the presented login name instead of the authenticated anonymous account

ACL cache collision lets a role inherit privileges from a same-named socket user

Automobile Camouflage to Hide from Flock Cameras

Unauthenticated testing endpoint of notify_push expose internal IP

Email Enumeration via Password-Protected Share Identity Verification

Improper Input Validation and Integer Overflow in timeamount parameter of files_retention app

Missing Duplicate Check allowing Multiple Retention Rules per System Tag

Activity app does not verify federated file activity received from remote servers

Friday Squid Blogging: Squid on a Stick at the New York State Fair

Mail contact autocomplete bypasses administrator-configured user enumeration restrictions and expose member information outside the intended scope

Dissecting Attacks Is Only Valuable If It Informs Controls: What the Unit 42 agentic AI investigation should change in your control set, stage by stage.

Using a VM to Contain an AI Agent

Security Vulnerability in a Voting System

AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks

API token sent to URL dictated by an untrusted project .weblate file

Unauthenticated ?q= search query causes exponential pyparsing backtracking under a process-global lock in Weblate

Hacking AI customer service agents

FBI Probes Service Selling 153M+ Drivers Licenses

Reconnaissance unleashed: Meet CrowdRecon

18: Explicit IPv6 proxy zone ID silently ignored proxy credentials sent to wrong interface

33: CONNECT_ONLY raw I/O selects wrong connection after CURLOPT_SHARE detach (incomplete fix for CVE-2020-8231)

41: `main_checkfds()` pipe reuse leaks proxy credentials into HTTPS upload body

06: Incomplete fix for CVE-2026-7009: GCC/SecTrust builds silently discard stapled OCSP responses

Password spraying campaign targets AWS root user accounts across 150+ organizations

**Unauthenticated IDOR allows modification of payment customer billing information**

50: CMake `HTTP_ONLY` does not disable SSH backends SCP and SFTP remain usable

42: `VMS_STS` macro typo (`< 3` vs `<< 3`) turns curl failures into successful OpenVMS conditions

Unauthorized vertical privilege escalation vulnerability found on ibm.com endpoint

Author arbitrary file deletion anywhere on disk (site takeover) via `POST /wp/v2/media/<id>/finalize` poisoning `_wp_attachment_metadata`

Author stored XSS in wp-admin: unescaped sub-size filename from attachment metadata breaks out of the `src` attribute in `get_media_item()`

HTTP Request Smuggling via Silent Header Truncation in Node.js HTTP Parser

Reachable assertion in node:zlib sync API crashes the entire process via spoofed TypedArray byteLength (all 11 *Sync functions affected)

dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records

node:sqlite SQLTagStore Iterator Replay Lets Attacker Re-Execute Victim-Bound Writes Indefinitely

Re-entrant `nghttp2_session_mem_send()` during `nghttp2_session_mem_recv()` causes heap-use-after-free in Node.js HTTP/2

HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion

46: `--libcurl` output carries `--insecure` across `--next` boundaries

28: HTTP/3 UDP path ignores CURL_SOCKOPT_ALREADY_CONNECTED, reconnects callback-provided socket

34: `curl_mprintf` reads `double` for documented `long double` conversions uninitialized value disclosure

--etag-save - truncates append-redirected stdout

Stacked --proto modifiers leave denied protocol enabled

Intigriti Bug Bytes #239 - August 2026 🚀

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia

Unbound cross-peer HTTP Digest challenge state

ARG_CLEAR credential scrubbing wipes only UTF-8 copies on Windows Unicode builds

Pre-authentication Stored XSS in Essity Customer-Service Pipeline via ContactApi (reCAPTCHA bypass + no rate limit)

Critical SQL Injection WDM API ()

VMs won't contain cyber-capable agents

curl_share TOCTOU > RCE via Curl_llist _dtor Function Pointer Hijack

Hidden/restricted tags can be mutated through synonym ID paths without per-tag authorization

Add labels to arbitrary issues/prs via Memex Bulk Update to compromise github actions label gating

TLS session cache case-folds CA paths and bypasses the active trust profile

libcurl Digest/NTLM authentication ignores an explicit Authorization header

State divergence enables unauthorized access

@jitsi/docker-jitsi-meet: `/colibri-relay-ws/` unsafe nginx regex (OCTO relay configuration)

Unauthenticated IDOR allows modification of payment customer billing information