Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
Multiple vulnerabilities in Foxit PDF Reader and Foxit PDF Editor allow remote code execution, privilege escalation, information disclosure, security…
Foxit PDF Reader is vulnerable to remote code execution via a use-after-free in its annotation handling.
Foxit PDF Reader AcroForm has an out-of-bounds read vulnerability that allows remote code execution via a malicious file.
Foxit PDF Reader is vulnerable to remote code execution via AcroForm due to use-after-free.
Foxit PDF Reader is vulnerable to a memory corruption vulnerability that allows remote code execution via a malicious file or page.
Foxit PDF Reader is vulnerable to a local privilege escalation due to a race condition in FoxitUpdater.
Foxit PDF Reader's FoxitUpdater allows local privilege escalation via improper certificate validation with user interaction.
Foxit PDF Reader is vulnerable to a remote code execution flaw via PRC stream parsing.
Foxit PDF Reader is vulnerable to an out-of-bounds read, allowing remote information disclosure via malicious file or page.
Foxit PDF Reader allows remote attackers to disclose sensitive information via a Use-After-Free vulnerability requiring user interaction.
Foxit PDF Reader's JPEG file parsing allows remote information disclosure via out-of-bounds read.
Foxit PDF Reader allows remote attackers to disclose sensitive information via PDF file parsing due to an out-of-bounds read.
Foxit PDF Reader is vulnerable to information disclosure via a Use-After-Free condition in its Doc Object handling.
Foxit PDF Reader is vulnerable to remote code execution via a malicious file or page.
Foxit PDF Reader is vulnerable to directory traversal leading to remote code execution.
Foxit PDF Reader's importIcon NTLM response disclosure allows remote attackers to disclose NTLM responses via malicious file or page.
Foxit PDF Reader allows remote code execution via uninitialized variable in FileOpen functionality.
Foxit PDF Reader is vulnerable to a remote code execution due to an out-of-bounds write in the DeviceN Colorspace handling.
Foxit PDF Reader allows remote attackers to disclose sensitive information via a use-after-free vulnerability in the Doc Object.
Forcepoint Security Engine (NGFW) versions 7.1.0 to 7.1.13, 7.3.0 to 7.3.1, 7.33, 7.4.0 to 7.4.1, and 7.5.0 contain a vulnerability.
Dell Command PowerShell Provider and Dell Command Monitor have vulnerabilities leading to credential theft and incorrect permission assignment.
RouterOS prior to 7.25beta5 contains a vulnerability.
NVIDIA Infrastructure Controller and NeMo Speech have vulnerabilities requiring updates.
GitHub Enterprise Server versions 3.17.0 prior to 3.17.21, 3.18.0 prior to 3.18.15, 3.19.0 prior to 3.19.12, 3.20.0 prior to 3.20.8, 3.21.0 prior to …
Chrome versions before 154.0.8037.57/58 (Windows/Mac) and 54.0.8037.57 (Linux) have vulnerabilities.
Ubiquiti products prior to specified versions contain vulnerabilities that could allow code execution.
Adobe products have vulnerabilities that could allow code execution.
Multiple vulnerabilities in Adobe products could allow for arbitrary code execution.
WordPress before 7.1.2 is vulnerable to unauthenticated path traversal in page-template resolution, leading to conditional RCE via CVE-2026-87902.
Multiple vulnerabilities in HPE Analytics and Location Engine (ALE) and Telco Service Orchestrator allow remote denial of service.
SolarWinds Observability Self-Hosted is vulnerable to unauthenticated remote code execution.
Notepad++ is vulnerable to 6 vulnerabilities, 4 with high severity, allowing arbitrary code execution and integrity checks bypass.
A remote unauthenticated attacker can execute arbitrary code on D-Link DAP-1360 devices via a public PoC exploit.
Moodle is affected by vulnerabilities that could allow unauthorized access to sensitive information and bypass security features.
Google Chrome has 108 new security vulnerabilities, including 11 critical and 25 high-severity issues.
GitHub Enterprise Server is vulnerable to code execution and information disclosure via exploited vulnerabilities.
An remote attacker can exploit multiple vulnerabilities in IBM SPSS Analytic Server and SPSS Modeler to disclose information and bypass security cont…
FreeRDP contains vulnerabilities that allow non-specific attacks.
A local attacker can exploit a vulnerability in GNU Emacs to execute arbitrary code.
Multiple vulnerabilities in yara allow remote denial of service.
FasterXML Jackson is vulnerable to Denial of Service via remote unauthenticated attack.
A local attacker can exploit a vulnerability in QT to cause a denial of service.
A remote attacker can cause a Denial of Service in QT.
Multiple vulnerabilities in Microsoft GitHub Enterprise Server allow information disclosure, data manipulation, code execution, and cross-site script…
PgBouncer is vulnerable to remote denial of service attacks via multiple vulnerabilities.
Multiple vulnerabilities in Broadcom Brocade SANnav allow an attacker to bypass security controls, execute arbitrary code, manipulate data, and discl…
Multiple vulnerabilities in Apache Tomcat allow an attacker to bypass security controls, perform denial of service, and manipulate data.
Multiple vulnerabilities in Apache Sling allow an attacker to perform denial of service, cross-site scripting, and bypass security controls.
A remote attacker can exploit a vulnerability in Gitea to disclose information.
A remote attacker can cause a Denial of Service on MikroTik RouterOS.
Local attacker can execute arbitrary code with service privileges, disclose information, corrupt memory, or cause denial of service via multiple vuln…
LibreOffice is vulnerable to multiple vulnerabilities that allow local attackers to cause denial of service, manipulate data, or disclose information.
Multiple vulnerabilities in MISP allow an attacker to execute arbitrary code, cause denial of service, disclose information, manipulate files, perfor…
Remote authenticated attacker can exploit multiple vulnerabilities in Mattermost Server to cause denial of service or bypass security controls.
wget allows local code execution via a vulnerability, potentially leading to privilege escalation.
An authenticated remote attacker can bypass security controls in Red Hat OpenShift Builds.
A local attacker can exploit a vulnerability in CUPS to escalate privileges.
A remote attacker can cause a denial of service in Red Hat Enterprise Linux via a vulnerability in golang.org/x/text.
Checkmk allows attackers to bypass security controls and manipulate data through multiple vulnerabilities.
Remote attackers can bypass security controls in Netty to manipulate data, disclose information, or cause denial of service.
Multiple vulnerabilities in Internet Systems Consortium BIND allow remote attackers to manipulate data, bypass security controls, or cause denial of …
Multiple vulnerabilities in Red Hat Enterprise Linux (corosync, libevent, libsoup) allow attackers to execute arbitrary code, bypass security control…
Multiple vulnerabilities in IBM MQ allow an attacker to execute arbitrary code, gain elevated privileges, bypass security controls, manipulate or dis…
Multiple vulnerabilities in Mozilla Firefox, Firefox ESR, and Thunderbird allow an attacker to elevate privileges, bypass security controls, disclose…
Multiple vulnerabilities in Atlassian products allow code execution and bypass of security controls.
PCRE2 vulnerabilities allow attackers to bypass security controls, disclose information, and cause denial-of-service.
Multiple vulnerabilities in IBM MQ Appliance allow remote attackers to execute arbitrary code, perform SSRF, manipulate data, disclose information, o…
OpenClaw contains vulnerabilities that allow attackers to gain elevated privileges, execute arbitrary code, bypass security controls, disclose or man…
Multiple vulnerabilities in Apache ActiveMQ Artemis allow an attacker to bypass security controls, compromise authenticated sessions, manipulate or d…
Multiple vulnerabilities in CUPS allow information disclosure via adjacent network attacks.
An remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to cause a denial of service or execute code.
Multiple vulnerabilities in GStreamer allow an attacker to cause denial of service, disclose sensitive information, manipulate data, or execute arbit…
A vulnerability in libtpms allows a remote attacker to cause a denial of service.
A remote attacker can exploit multiple vulnerabilities in Linux Kernel to cause memory errors, kernel crashes, denial-of-service conditions, and memo…
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to cause a denial of service.
Multiple critical and high-severity vulnerabilities exist in Adobe InDesign, Content Credentials Rust SDK, C2PA Tool, Bridge, Connect, Experience Man…
Erlang/OTP contains vulnerabilities that could allow unauthorized access to sensitive information and compromise availability.
ManageEngine ADSelfService Plus is vulnerable to remote code execution and authentication bypass via REST API.
SolarWinds Observability Self-Hosted has a critical vulnerability that allows remote code execution if exploited by an unauthenticated attacker in sp…
Available PoC exploit three vulnerabilities, already patched by the vendor, in WordPress Core.
Remote attackers can execute arbitrary code via multiple vulnerabilities in Check Point Security Gateway, Spark Firewall, and Security Management.
Luxion KeyShot BIP file parsing allows remote code execution via uncontrolled search path element.
Wireshark's RF4CE packet parsing has a buffer overflow vulnerability that allows remote code execution with user interaction.
F5 BIG-IP APM has a vulnerability that allows remote code execution, leading to full system control.