Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
A local attacker can exploit a Linux Kernel vulnerability to escalate privileges.
Multiple vulnerabilities in the Linux Kernel allow an attacker to potentially bypass security measures, cause a denial of service, or disclose confid…
A Linux Kernel vulnerability allows Denial of Service via exploitation.
Multiple vulnerabilities in the Linux Kernel allow an attacker to perform unspecified attacks, including data disclosure, manipulation, and denial of…
MikroTik RouterOS has vulnerabilities that could allow unauthorized access to system resources.
Multiple vulnerabilities in HPE IceWall products allow remote bypass of security restrictions and denial of service.
cPanel's EmailTrack function has a SQL injection vulnerability (CVE-2026-67401) allowing unauthorized data manipulation.
Multiple vulnerabilities in Ivanti products could allow arbitrary code execution with system privileges.
Adobe Campaign Classic, Adobe Commerce, ColdFusion, and other products have vulnerabilities that could allow code execution.
Advantech WISE-6610 industrial gateway contains vulnerabilities requiring updates to address potential security risks.
Multiple vulnerabilities in vim allow an attacker to execute arbitrary code, cause a denial of service, and cause unspecified impacts.
Multiple vulnerabilities in ffmpeg allow code execution and denial of service.
Unbound is vulnerable to denial of service, information disclosure, data manipulation, and security-control bypass attacks.
Remote attackers can exploit multiple vulnerabilities in ffmpeg to execute arbitrary code, manipulate data, disclose sensitive information, or cause …
Remote attackers can bypass security controls, manipulate data, disclose information, or cause denial of service via multiple vulnerabilities in BIND.
A remote attacker can exploit a vulnerability in ImageMagick to perform an unspecified attack.
Multiple vulnerabilities in Mozilla Firefox and Thunderbird allow an attacker to execute arbitrary code, bypass security controls, disclose confident…
Remote attackers can exploit multiple vulnerabilities in Oracle Virtualization to compromise confidentiality, integrity, and availability.
Remote attackers can exploit multiple vulnerabilities in Oracle Java SE to compromise confidentiality, integrity, and availability.
A remote attacker can cause a Denial of Service via a vulnerability in CUPS.
Multiple vulnerabilities in Red Hat Enterprise Linux (sssd, glib, c-ares) allow attackers to gain administrator privileges, bypass security controls,…
A remote attacker can cause a Denial of Service via a vulnerability in helm.
Multiple vulnerabilities in NGINX NGINX Plus allow an attacker to execute arbitrary code, cause denial of service, manipulate data, and disclose info…
Multiple vulnerabilities in FreeRDP allow an attacker to execute arbitrary code, bypass security controls, disclose sensitive information, manipulate…
Remote attackers can cause Denial of Service in BusyBox via multiple vulnerabilities.
7-Zip allows remote code execution via a vulnerability.
A local attacker can exploit a vulnerability in ImageMagick to cause a denial of service.
GoAnywhere MFT Endpoint Prior to 7.10.2 is vulnerable to path traversal.
PAN-OS contains a high-severity vulnerability that could allow unauthorized access.
Palo Alto Networks products have buffer overflow and other vulnerabilities that could allow code execution.
Lenovo BIOS contains vulnerabilities that allow code execution and privilege escalation.
An authenticated remote attacker can execute arbitrary code with administrator privileges via a vulnerability in cPanel/WHM.
Insyde UEFI Firmware und Cisco UCS (UEFI Shell Secure Boot) ermöglichen Codeausführung durch Bypass des Secure Boot-Verfahrens.
Multiple vulnerabilities in Microsoft Developer Tools allow a remote, anonymous attacker to escalate privileges, bypass security mechanisms, and mani…
Apache ActiveMQ is vulnerable to remote authenticated attacker exploitation, allowing denial of service and data manipulation.
An attacker can exploit multiple vulnerabilities in Fortinet FortiSandbox to disclose information or execute code.
Remote attackers can bypass security controls or cause denial of service in Red Hat Enterprise Linux.
Multiple vulnerabilities in Red Hat Directory Server and Red Hat Enterprise Linux allow an attacker to execute arbitrary code, gain administrative pr…
An authenticated remote attacker can execute arbitrary code via a vulnerability in Dell integrated Dell Remote Access Controller.
Dell Secure Connect Gateway is vulnerable to multiple vulnerabilities allowing unauthorized access, bypassing authentication, information disclosure,…
Remote attackers can exploit multiple vulnerabilities in Grafana Enterprise to gain user or administrator privileges.
Multiple vulnerabilities in VMware Workstation and VMware Fusion allow local code execution.
A remote, anonymous attacker can exploit a vulnerability in Red Hat Enterprise Linux to perform cross-site scripting.
Multiple vulnerabilities in Dovecot allow an attacker to bypass security controls, disclose sensitive information, manipulate data, or cause denial o…
Redis is vulnerable to multiple flaws allowing bypass of security mechanisms, unauthorized data access, denial of service, and memory content manipul…
Multiple vulnerabilities in WatchGuard Firebox OS allow remote code execution with root privileges or denial of service.
Multiple vulnerabilities in Ruby allow an attacker to perform a denial of service and bypass security controls.
Authenticated remote attackers can bypass security controls and manipulate files in Grafana.
Multiple vulnerabilities in IBM QRadar SIEM allow an attacker to bypass security controls, escalate privileges, cause denial of service, disclose inf…
Velociraptor contains critical and high severity vulnerabilities that could allow unauthorized access and data manipulation.
ESET products contain a vulnerability that could allow an attacker to elevate privileges on affected systems.
Fortra GoAnywhere MFT contains a high-severity vulnerability that allows unauthorized access to sensitive data.
An authenticated remote attacker can exploit multiple vulnerabilities in Cisco Secure Firewall Management Center to gain root privileges and execute …
Check Point Security Gateway, Security Management e Spark Firewall contengono vulnerabilità critiche che consentono esecuzione di codice arbitrario d…
Check Point Security Gateway, Management Server, and Spark Firewall are vulnerable to unauthenticated remote code execution via Remote Access or Site…
A remote anonymous attacker can exploit a vulnerability in Fortinet FortiOS to execute arbitrary code.
Phishing campaign using fake Registro Imprese portal to steal business data.
An authenticated remote attacker can execute code via a vulnerability in ConnectWise ScreenConnect.
Adobe Photoshop is vulnerable to integer overflow in DCM JPEG image parsing, allowing remote code execution via malicious file or page.
Adobe Photoshop is vulnerable to a remote code execution vulnerability via DCM file parsing due to an integer overflow.
Adobe Photoshop allows remote code execution via malicious JPEG-LS image files due to an integer overflow in DCM image parsing.
Adobe Acrobat Reader DC is vulnerable to remote code execution via a use-after-free condition requiring user interaction.
Adobe Acrobat Reader DC is vulnerable to remote code execution via a use-after-free in annotations, requiring user interaction.
Adobe Acrobat Reader DC is vulnerable to an out-of-bounds write, allowing remote code execution via a malicious file or page.
Adobe Acrobat Pro DC is vulnerable to remote code execution via a use-after-free condition in Doc objects.
Adobe Acrobat Reader DC is vulnerable to integer underflow in PDF file parsing, allowing remote information disclosure via malicious file or page.
Adobe Acrobat Reader DC is vulnerable to remote code execution via a dialog object type confusion flaw requiring user interaction.
Adobe Acrobat Pro DC is vulnerable to an out-of-bounds read information disclosure via a malicious file or page.
Adobe Acrobat Reader DC is vulnerable to an out-of-bounds read in JBIG2 file parsing, allowing remote information disclosure via malicious file or pa…
Adobe Acrobat Reader DC is vulnerable to information disclosure via a Use-After-Free condition requiring user interaction.
Adobe Acrobat Reader DC is vulnerable to remote code execution via a use-after-free condition requiring user interaction.
Adobe Acrobat Reader DC is vulnerable to an out-of-bounds read in JPEG2000 file parsing, allowing remote information disclosure via a malicious file …
Adobe Acrobat Reader DC allows remote code execution via a use-after-free vulnerability when processing malicious files or pages.
Adobe Acrobat Reader DC is vulnerable to remote code execution via a use-after-free condition requiring user interaction.
Adobe Acrobat Pro DC is vulnerable to remote code execution via a use-after-free condition requiring user interaction.
Adobe Acrobat Reader DC is vulnerable to remote code execution via a use-after-free in annotations, requiring user interaction to exploit.
Adobe Acrobat Reader DC is vulnerable to remote code execution via a use-after-free condition requiring user interaction.
Adobe Acrobat Reader DC is vulnerable to information disclosure via font parsing use-after-free due to remote code execution.