https://cybercrime.club/tags/ai-discovered/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usWed, 07 Oct 2026 23:05:40 -0400https://cybercrime.club/posts/rejetto-hfs-cve-2026-61500-math-random-session-forgery-rce/Wed, 07 Oct 2026 23:05:40 -0400https://cybercrime.club/posts/rejetto-hfs-cve-2026-61500-math-random-session-forgery-rce/Rejetto HFS 3.x signs sessions with a key derived from Math.random() and leaks its outputs at login, letting unauthenticated attackers forge admin sessions and run server-side JavaScript; scanning from China began October 1.vulnerabilities