Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
Multiple vulnerabilities in Google Chrome / Microsoft Edge allow an attacker to execute arbitrary code, bypass security controls, disclose informatio…
Google Chrome contains 247 vulnerabilities, 12 critical and 42 high severity, requiring an update.
Google Chrome vulnerabilities could allow arbitrary code execution with user privileges.
SonicWall SMA1000 Series Appliances are affected by multiple vulnerabilities.
wolfSSH prior to 1.6.0 contains vulnerabilities that may allow information disclosure.
Arista Networks CloudVision CUE versions 2026.2.0 and prior are affected by vulnerabilities.
AMD Instinct MI series GPUs with ROCm versions prior to 7.14 are vulnerable to information disclosure.
Qualcomm products contain vulnerabilities that could allow information disclosure.
JetBrains TeamCity versions prior to 2026.1.32025.11.7 and 2026.2.1 contain security vulnerabilities.
Cisco's products have 35 vulnerabilities, including 15 critical and 13 high-severity issues.
A Telegram Desktop vulnerability (CVE-2026-107181) has a public PoC exploit available.
HPE Networking ClearPass Policy Manager and AOS-Switch have multiple vulnerabilities.
Johnson Controls Illustra Standard - L4L China prior to 6.0.0.66394 has a vulnerability.
llama.cpp contains a high-severity vulnerability that could allow remote attackers to compromise service availability and potentially execute arbitra…
Craft CMS has 11 vulnerabilities, 4 high severity, allowing authenticated attackers to modify application data and execute arbitrary code remotely un…
Veeam Backup and Replication prior to 12.3.2.P4 and 13.03 is affected by vulnerabilities.
VMware Fusion and Workstation prior to 26H1u1 have integer overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347).
GitHub Enterprise Server versions prior to 3.18.16, 3.19.13, 3.20.9, 3.21.7, and 3.22.2 contain vulnerabilities.
Google Stable Channel Chrome for Desktop versions prior to 155.0.8059.39/.40 (Windows/Mac) and 155.0.8059.39 (Linux) have vulnerabilities.
Atlassian products have a vulnerability allowing information disclosure.
Google Pixel devices have 6 vulnerabilities, 3 critical and 3 high, that could allow unauthorized access to sensitive information and privilege escal…
Multiple vulnerabilities in Gitea allow an attacker to execute arbitrary code, gain elevated privileges, bypass security controls, manipulate or disc…
Multiple vulnerabilities in IBM SPSS allow an attacker to perform denial of service, disclose information, and manipulate files.
An remote unauthenticated attacker can bypass security controls, manipulate data, and cause denial of service in Red Hat Enterprise Linux.
Multiple vulnerabilities in GIMP allow a local attacker to cause denial of service, manipulate data, and potentially execute arbitrary code.
A remote attacker can bypass security controls in Mozilla Firefox.
X.Org X11 und Xwayland sind anfällig für mehrere Schwachstellen, die zu Codeausführung und Denial of Service führen können.
Multiple vulnerabilities in Google Android Pixel allow an attacker to escalate privileges and disclose information.
OpenSSH is vulnerable to remote attacks that can bypass security controls, cause denial of service, or escalate privileges.
An authenticated remote attacker can exploit multiple vulnerabilities in Elasticsearch to bypass security controls, manipulate data, and cause denial…
Remote attackers can execute arbitrary code, bypass security mechanisms, manipulate, and disclose data in ILIAS.
Authenticated remote attackers can bypass security controls in Kibana to disclose information.
An authenticated remote attacker can bypass security controls, disclose information, and cause denial of service in Proxmox Backup Server.
Django is vulnerable to Denial of Service, data manipulation, and information disclosure via multiple vulnerabilities.
Multiple vulnerabilities in Broadcom Fabric OS allow an attacker to execute arbitrary code, cause denial of service, disclose information, manipulate…
Multiple vulnerabilities in Apache Commons BCEL allow an attacker to perform cross-site scripting and manipulate data.
Ghostscript allows remote code execution via an unpatched vulnerability.
An authenticated remote attacker can exploit vulnerabilities in LangChain to disclose information and manipulate data.
Arista WiFi Access Point allows remote code execution and denial of service via multiple vulnerabilities.
An authenticated remote attacker can execute arbitrary code and disclose information via multiple vulnerabilities in JetBrains TeamCity.
RabbitMQ Java Client is vulnerable to denial of service and information disclosure attacks.
Multiple vulnerabilities in the Linux Kernel allow an attacker to potentially cause a denial of service, manipulate or disclose data, or bypass secur…
A remote unauthenticated attacker can manipulate files via a vulnerability in GnuPG.
Multiple vulnerabilities in Langflow allow an attacker to execute arbitrary code, cause denial of service, disclose information, and manipulate files.
RabbitMQ is vulnerable to remote denial of service via an anonymous attacker.
Multiple vulnerabilities in CPython allow an attacker to perform a denial of service and bypass security controls.
HCL BigFix allows information disclosure, data manipulation, and cross-site scripting via multiple vulnerabilities.
A local attacker can exploit a vulnerability in Red Hat Enterprise Linux (libpcap) to disclose information and execute arbitrary code.
Multiple vulnerabilities in DENX U-Boot allow an attacker to corrupt memory and cause denial-of-service conditions.
An authenticated remote attacker can exploit multiple vulnerabilities in Octopus Deploy to escalate privileges.
Remote attackers can exploit multiple vulnerabilities in Red Hat Enterprise Linux to manipulate data, disclose information, bypass security controls,…
Multiple vulnerabilities in Mozilla Firefox, Firefox ESR, and Thunderbird allow remote code execution and other unspecified attacks.
A vulnerability in DENX U-Boot allows code execution via a neighboring network.
Remote authenticated attacker can execute arbitrary code, corrupt adjacent memory, or cause denial of service via PCRE vulnerability.
A remote attacker can cause a Denial of Service in Red Hat Enterprise Linux (rhc).
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to cause a denial of service or perform unspecified attacks.
Apache Tomcat APR/native Connector is vulnerable to multiple vulnerabilities allowing denial of service and bypassing security controls.
sudo allows local attackers to execute arbitrary code due to a vulnerability.
Multiple vulnerabilities in Apache Tomcat allow an attacker to bypass security controls, causing denial of service and enabling data manipulation.
Multiple vulnerabilities in Microsoft GitHub Enterprise allow an attacker to manipulate data and execute arbitrary code.
Critical vulnerability in Asustor ADM software allows unauthorized reading of arbitrary files.
SonicWall's SMA1000 series devices have vulnerabilities that could allow unauthorized code execution.
Multiple Atlassian Data Center products have a critical arbitrary file access vulnerability.
Langflow contains 24 vulnerabilities, including 2 critical and 18 high-severity issues.
Gitea is vulnerable to 9 security issues, including 3 high-severity vulnerabilities affecting its source code management and software development fun…
ASUS router models have four vulnerabilities, two critical and two high severity, affecting their security.
GitHub Enterprise Server is vulnerable to code execution via authenticated user input redirection to attacker-controlled internal hosts.
Elasticsearch e Kibana contengono vulnerabilità che possono permettere esecuzione di codice.
TeamCity is vulnerable to remote code execution via a high-severity vulnerability.
Veeam Backup & Replication has 4 vulnerabilities, 2 high severity, allowing remote authenticated attacker with Backup Viewer role to execute arbitrar…