# offensive security · bug bounty · ctf
PNDSEC started as one researcher's bug-bounty handle. It's growing into a small team — web & mobile penetration testing, CTF, and open-source tooling for people who like taking things apart.
| cve | vendor / product | added |
|---|---|---|
| CVE-2026-102895 | GPUStack / GPUStack | 2026-11-09 |
| CVE-2026-123158 | OpenBSD / OpenSSH | 2026-11-09 |
| CVE-2026-116779 | SignalWire / FreeSwitch | 2026-11-09 |
| CVE-2026-19868 | SonicWall / SonicOS SSLVPN | 2026-11-06 |
| CVE-2024-27834 | Apple / Multiple Products | 2026-11-04 |
1772 actively exploited CVEs tracked by CISA — full catalog