# offensive security · bug bounty · ctf
PNDSEC started as one researcher's bug-bounty handle. It's growing into a small team — web & mobile penetration testing, CTF, and open-source tooling for people who like taking things apart.
| cve | vendor / product | added |
|---|---|---|
| CVE-2026-19868 | SonicWall / SonicOS SSLVPN | 2026-11-06 |
| CVE-2024-27834 | Apple / Multiple Products | 2026-11-04 |
| CVE-2026-119977 | WordPress / WordPress Core | 2026-11-03 |
| CVE-2026-118527 | Ivanti / Connect Secure | 2026-10-30 |
| CVE-2026-111357 | Ivanti / Connect Secure | 2026-10-30 |
1769 actively exploited CVEs tracked by CISA — full catalog