Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
Multiple vulnerabilities in the Linux Kernel allow an attacker to potentially cause a denial of service, manipulate or disclose data, or bypass secur…
Multiple vulnerabilities in the Linux Kernel allow an attacker to potentially bypass security measures, cause denial of service, or disclose sensitiv…
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to cause a Denial of Service.
Multiple vulnerabilities in the Linux Kernel allow an attacker to trigger a denial-of-service condition, bypass security measures, or cause memory co…
Multiple vulnerabilities in the Linux Kernel may allow an attacker to bypass security measures, cause a denial of service, or disclose confidential i…
Multiple vulnerabilities in Linux Kernel allow an attacker to gain root privileges, cause a denial of service, or perform an unspecified attack.
Multiple vulnerabilities in the Linux Kernel allow a remote, anonymous attacker to perform unspecified attacks, including code execution, information…
Multiple vulnerabilities in the Linux Kernel allow an attacker to execute arbitrary code, escalate privileges, disclose information, manipulate data,…
Multiple vulnerabilities in Linux Kernel allow disclosure of confidential information, data manipulation, denial of service, or privilege escalation.
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to cause a denial of service or perform unspecified attacks.
Progress DataDirect Autonomous REST Connector GenAI Agents ARCGenAI-Generator Prior to 2.1 is vulnerable to information disclosure via CVE-2026-91140.
Velociraptor Server Metadata update has an insufficient permission check vulnerability.
Android devices have vulnerabilities that could allow code execution if not patched.
Atlassian products have a vulnerability allowing information disclosure.
Dell System Update contains a critical vulnerability that allows code execution.
Apache Struts contains vulnerabilities that could allow remote code execution.
A remote attacker can exploit a vulnerability in HPE Integrated Lights-Out to escalate privileges.
A remote, anonymous attacker can exploit a vulnerability in Atlassian products to disclose information.
Multiple vulnerabilities in vllm allow a Denial of Service attack.
Multiple vulnerabilities in Zammad allow an attacker to escalate privileges, execute arbitrary code, bypass security controls, manipulate or disclose…
OpenJPEG is vulnerable to remote denial of service via an anonymous attacker.
Samsung Android allows remote code execution and information disclosure via multiple vulnerabilities.
A remote anonymous attacker can exploit a vulnerability in Camunda to gain administrator rights.
An authenticated remote attacker can bypass security controls in Keycloak.
Local attacker can execute arbitrary code with user privileges, cause denial of service, or disclose confidential information via multiple vulnerabil…
Multiple vulnerabilities in vim allow an attacker to execute arbitrary code, cause a denial of service, and cause unspecified effects.
A vulnerability in vim allows a Denial of Service attack.
Multiple vulnerabilities in vim allow an attacker to cause a denial of service or execute arbitrary code.
A local attacker can execute code and cause a denial of service in vim.
Local attacker can exploit vulnerabilities in vim to execute arbitrary code, cause denial of service, or manipulate data.
A remote attacker can bypass security controls in Joplin via a vulnerability.
HCL BigFix contains vulnerabilities that allow attackers to bypass security controls, gain elevated privileges, execute arbitrary code, disclose or m…
Qualcomm chipset contain multiple security vulnerabilities, including 11 high-severity issues.
GnuPG allows remote attackers to manipulate files via a vulnerability.
Local attacker can exploit multiple vulnerabilities in LibreOffice to disclose information, manipulate data, and execute arbitrary code.
Multiple vulnerabilities in Roundcube Webmail allow an attacker to execute arbitrary code, gain elevated privileges, bypass security controls, manipu…
RealObjects PDFreactor contains multiple vulnerabilities that allow a non-specific attack.
Multiple vulnerabilities in Red Hat Enterprise Linux (glib2) allow an attacker to cause a denial of service and disclose information.
Multiple vulnerabilities in Golang Go allow a remote attacker to cause a denial of service, perform cross-site scripting, bypass security controls, o…
Multiple vulnerabilities in vllm allow an attacker to disclose information, manipulate data, bypass security controls, or cause a denial of service.
An authenticated remote attacker can bypass security controls and manipulate data in Langflow.
Multiple vulnerabilities in Red Hat Build of Apache Camel for Quarkus allow denial of service, security-control bypass, data manipulation, and code e…
Multiple vulnerabilities in Red Hat Enterprise Linux (nodejs:24) allow attackers to perform SSRF attacks, bypass security controls, disclose or manip…
A local attacker can exploit multiple vulnerabilities in libvirt to gain administrator privileges and disclose confidential information.
Remote attackers can execute code, disclose information, or cause denial of service in Red Hat Enterprise Linux AI.
A remote attacker can cause a denial of service via a vulnerability in FasterXML Jackson.
Multiple vulnerabilities in Red Hat Enterprise Linux (Pillow) allow an attacker to disclose information, cause denial of service, and manipulate data.
LangFlow is vulnerable to code execution via 4 flaws, 2 critical and 2 high severity, with PoC available.
Remote attackers can execute arbitrary code, disclose sensitive information, or cause denial of service in Apache Struts.
Multiple vulnerabilities in Zabbix allow information disclosure, denial of service, security-control bypass, and data manipulation.
RabbitMQ is vulnerable to remote denial of service via an anonymous attacker.
Multiple vulnerabilities in CPython allow an attacker to perform a denial of service and bypass security controls.
A local attacker can exploit a vulnerability in Red Hat Enterprise Linux (libpcap) to disclose information and execute arbitrary code.
Authenticated remote attackers can exploit multiple vulnerabilities in Grafana to disclose information and manipulate data.
Nvidia GPU Display Treiber sind anfällig für mehrere Schwachstellen, die zu Codeausführung, Berechtigungssteigerung, Sicherheitsumgehungen, Datenmani…
Multiple vulnerabilities in Red Hat Enterprise Linux allow a remote, anonymous attacker to manipulate data, disclose information, bypass security con…
Multiple vulnerabilities in Google Chrome allow an attacker to execute arbitrary code, escalate privileges, bypass security controls, disclose or man…
A remote attacker can exploit a vulnerability in Grafana to disclose information.
Multiple vulnerabilities in QT for MCUs allow remote attackers to cause denial of service and data manipulation.
A vulnerability in libpng allows a Denial of Service attack.
Authenticated remote attackers can exploit multiple vulnerabilities in Langflow to gain superuser rights, execute arbitrary code, bypass security con…
X.Org X11 vulnerabilities allow Denial of Service attacks.
A remote attacker can cause a denial of service in Red Hat Enterprise Linux (rhc).
GIMP allows remote code execution and denial of service via a vulnerability.
sudo allows local attackers to execute arbitrary code due to a vulnerability.
Local attacker can exploit multiple vulnerabilities in LibreOffice to cause denial of service, data manipulation, or information disclosure.
X.Org X11 allows remote code execution via a vulnerability.
HPE iLO 7 is vulnerable to authentication bypass allowing unauthorized administrative access.
Android security updates address 25 vulnerabilities, including 7 critical and 18 high-severity issues.
Multiple vulnerabilities in Google Chrome / Microsoft Edge allow an attacker to execute arbitrary code, bypass security measures, disclose informatio…
Un utente non autenticato potrebbe accedere a file specifici nella cartella "root" se conosce nome e percorso.
An authenticated remote attacker can exploit multiple vulnerabilities in vllm to manipulate files, disclose information, or cause a denial of service.
Rapid7 Velociraptor is vulnerable to remote authenticated attacks that allow file manipulation, security bypass, privilege escalation, and informatio…
Multiple vulnerabilities in Microsoft Teams, Microsoft Azure Managed Instance, and Microsoft Service Bus allow code execution, privilege escalation, …
Multiple vulnerabilities in vm2 allow an attacker to execute arbitrary code with service privileges, bypass security controls, disclose or manipulate…