Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
A remote attacker can exploit multiple vulnerabilities in the Linux Kernel to perform unspecified attacks, including code execution, information disc…
Multiple vulnerabilities in the Linux Kernel allow an attacker to trigger a denial-of-service condition, bypass security measures, or cause memory co…
Multiple vulnerabilities in Linux Kernel allow disclosure of confidential information, data manipulation, denial of service, or privilege escalation.
Local attacker can exploit multiple vulnerabilities in Linux Kernel to cause Denial of Service.
Linux Kernel vulnerabilities may allow Denial of Service, memory corruption, or other unspecified impacts.
A Linux Kernel vulnerability allows Denial of Service via exploitation.
Multiple vulnerabilities in the Linux Kernel allow an attacker to disclose information, cause resource or memory management errors, trigger denial-of…
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to cause a denial of service or perform unspecified attacks.
Microsoft Exchange Server versions prior to specified cumulative updates are vulnerable to information disclosure.
HPE iLO 7 prior to 1.25.00 has a COM user validation failure vulnerability.
Progress Telerik Fiddler Classic prior to 6.0.20262.10021 has a weak executable signature verification vulnerability.
GeoVision GV-Eye versions prior to V3.6.0 Android have vulnerabilities.
Sitefinity Next.js Renderer e Telerik Fiddler Classic hanno vulnerabilità che permettono l'elevazione dei privilegi o l'elusione dei meccanismi di si…
31 vulnerabilities, including 2 critical and 9 high-severity, are resolved in MediaTek chipsets used in mobile and embedded devices.
IBM i has an incorrect permission assignment vulnerability in Network Authentication Service [CVE-2026-84414].
A remote attacker can exploit a vulnerability in Perl to cause a denial of service.
Remote attackers can cause denial of service or disclose sensitive information via multiple vulnerabilities in Perl.
A local attacker can execute arbitrary code with the service's privileges in Red Hat Enterprise Linux.
A Perl vulnerability allows non-specific attack via unspecified vector.
Multiple vulnerabilities in Google Chrome allow an attacker to execute arbitrary code, bypass security controls, disclose information, manipulate dat…
A remote attacker can cause a Denial of Service in RabbitMQ.
An anonymous remote attacker can bypass security controls in Apache Traffic Server.
Authentifizierter Angreifer kann Sicherheitsvorkehrungen umgehen und Kontozugriff mit übernommenem Identitätsnachweis erlangen.
A local attacker can bypass security measures in Grub and execute arbitrary code.
Local attacker can bypass security measures via vulnerability in ImageMagick.
An authenticated remote attacker can exploit multiple vulnerabilities in Rapid7 Velociraptor to manipulate files, bypass security controls, gain elev…
A remote attacker can bypass security controls and disclose information in Vaultwarden.
Multiple vulnerabilities in MISP allow an attacker to bypass security controls, manipulate data, disclose confidential information, and execute cross…
Multiple vulnerabilities in Langflow allow an attacker to execute arbitrary code, cause denial of service, disclose information, and manipulate files.
Keycloak allows information disclosure and security-control bypass via multiple vulnerabilities.
Zimbra Collaboration Suite non aggiornato è vulnerabile a esecuzione remota di codice con privilegi dell'utenza applicativa.
LibreOffice Calc contains a high-severity vulnerability that allows remote code execution.
Citrix NetScaler ADC and Gateway are affected by a vulnerability that can be exploited in the wild via CVE-2026-88779.
A local attacker can exploit a vulnerability in Red Hat Enterprise Linux (libpcap) to disclose information and execute arbitrary code.
MikroTik RouterOS contains a vulnerability that allows remote code execution and denial of service.
Multiple vulnerabilities in Red Hat Enterprise Linux (pki-core and dogtag-pki) allow remote code execution and data manipulation.
A local attacker can bypass security controls and manipulate files via a vulnerability in CPython.
Multiple vulnerabilities in Google Chrome allow an attacker to execute arbitrary code, escalate privileges, bypass security controls, disclose or man…
Local attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to cause denial of service, memory corruption, and potentially execut…
Multiple vulnerabilities in Mozilla Firefox, Firefox ESR, and Thunderbird allow an attacker to execute arbitrary code, escalate privileges, bypass se…
Multiple vulnerabilities in OpenSSL allow an attacker to bypass security controls, disclose confidential information, manipulate data, and cause deni…
WebKitGTK vulnerabilities allow code execution and bypass security controls, leading to information disclosure, data manipulation, spoofing, and deni…
An authenticated remote attacker can execute arbitrary code or cause denial of service via a vulnerability in PCRE.
A vulnerability in libpng allows a Denial of Service attack.
An authenticated remote attacker can bypass security controls in LiteLLM and potentially escalate privileges.
A remote anonymous attacker can cause a denial of service in Red Hat Enterprise Linux (rhc).
An authenticated remote attacker can bypass security controls in LiteLLM to disclose information and perform unauthorized actions.
Multiple vulnerabilities in IBM App Connect Enterprise allow an attacker to bypass security controls, leading to denial of service, information discl…
Multiple MongoDB drivers allow denial of service, data manipulation, and arbitrary code execution.
GIMP allows remote code execution and denial of service via a vulnerability.
Google Chrome vulnerabilities allow unauthorized code execution and service disruption via exploited security bypass mechanisms.
GitLab AI Gateway is vulnerable to code execution via authenticated users.
cPanel/WHM contains critical vulnerabilities that could allow remote code execution with administrative privileges.