# offensive security · bug bounty · ctf
PNDSEC started as one researcher's bug-bounty handle. It's growing into a small team — web & mobile penetration testing, CTF, and open-source tooling for people who like taking things apart.
| cve | vendor / product | added |
|---|---|---|
| CVE-2026-124194 | Microsoft / Office | 2026-11-10 |
| CVE-2026-111793 | Openwave Messaging Limited / Webtop Media Transcoder | 2026-11-10 |
| CVE-2026-20320 | Cisco / BroadWorks | 2026-11-10 |
| CVE-2026-111560 | Barracuda Networks / Multiple Products | 2026-11-10 |
| CVE-2026-116606 | Barracuda Networks / Barracuda Email Security Gateway (ESG) | 2026-11-10 |
1779 actively exploited CVEs tracked by CISA — full catalog