Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
A remote attacker can cause a Denial of Service in CPython.
Multiple vulnerabilities in CPython allow an attacker to manipulate files, bypass security measures, or disclose confidential information.
Multiple vulnerabilities in CPython allow an attacker to perform a denial of service and bypass security controls.
Unauthenticated attackers can execute arbitrary code on GitLab CE/EE servers via a critical vulnerability.
MikroTik RouterOS è vulnerabile a una vulnerabilità che consente a un utente remoto autenticato di eludere i meccanismi di sicurezza e elevare i priv…
OTRS is vulnerable to privilege escalation, authentication bypass, information disclosure, data manipulation, and cross-site scripting attacks.
Rocket Remote Desktop allows information disclosure via a vulnerability.
A Linux Kernel vulnerability allows a non-specific attack.
A vulnerability in Bouncy Castle allows information disclosure.
Multiple vulnerabilities in python-tornado in Red Hat Enterprise Linux allow information disclosure or denial of service.
A remote attacker can exploit multiple vulnerabilities in ffmpeg to execute arbitrary code, manipulate data, disclose confidential information, or ca…
SmarterTools SmarterMail allows remote code execution with SYSTEM privileges and enables data manipulation and security bypass.
Remote authenticated attacker can exploit Foreman vulnerability to manipulate files and bypass security controls.
ImageMagick allows remote code execution and data manipulation via multiple vulnerabilities.
A remote attacker can manipulate data via a vulnerability in mutt.
Remote attackers can bypass security controls and cause denial of service in IBM SPSS Modeler.
An authenticated remote attacker can exploit vulnerabilities in LiteLLM to bypass security controls, disclose information, and manipulate data.
A remote attacker can manipulate data via a vulnerability in Red Hat Enterprise Linux (cjose).
Multiple vulnerabilities in Red Hat Enterprise Linux allow an attacker to gain administrator rights, execute arbitrary code, manipulate data, or over…
Multiple vulnerabilities in CUPS allow remote attackers to cause a denial of service.
A remote attacker can cause a Denial of Service in GIMP.
Multiple vulnerabilities in GitLab allow an attacker to execute arbitrary code, disclose information, manipulate data, perform cross-site scripting, …
A local attacker can exploit a vulnerability in GNU Emacs to execute arbitrary code.
Samsung Mobile devices and Samsung Continuity Service for Windows have vulnerabilities that could allow an attacker to bypass security mechanisms and…
MariaDB Server contains multiple vulnerabilities, including three critical and eight high-severity issues.
CUPS is vulnerable to a local privilege escalation attack via CVE-2026-107886, potentially allowing service disruption.
MongoDB security updates address vulnerabilities that could allow unauthorized users to disrupt service availability under certain conditions.
GitLab CE/EE contains 24 vulnerabilities, including 1 critical and 5 high severity, allowing arbitrary code execution, security bypass, and sensitive…
Docker Desktop for Windows has a vulnerability that allows arbitrary code execution with elevated privileges.
Multiple vulnerabilities in Apache CXF allow attackers to bypass security controls, manipulate and disclose data, redirect users to attacker-controll…
Multiple vulnerabilities in Golang Go allow an attacker to cause a denial of service, disclose information, manipulate data, and bypass security cont…
A remote attacker can cause a denial of service and manipulate data via a vulnerability in poppler.
Multiple vulnerabilities in Red Hat Enterprise Linux (sssd, tftp, ansible-collection-ansible-posix) allow an attacker to escalate privileges, bypass …
Argo CD vulnerabilities allow code execution, information disclosure, access bypass, and denial of service.
A remote attacker can exploit a vulnerability in Red Hat Enterprise Linux's resteasy to disclose information.
A remote attacker can execute arbitrary code via a vulnerability in Ghostscript.
Remote attackers can bypass security controls, manipulate data, and cause denial of service in Red Hat Enterprise Linux.
Multiple vulnerabilities in Google Chrome / Microsoft Edge allow an attacker to execute arbitrary code, escalate privileges, bypass security controls…
Samsung Android allows remote code execution and information disclosure via multiple vulnerabilities.
A remote anonymous attacker can exploit a vulnerability in Camunda to gain administrator rights.
A remote attacker can cause a denial-of-service condition or potentially execute arbitrary code via a vulnerability in Red Hat Enterprise Linux.
Ghostscript is vulnerable to remote attacks that may allow data manipulation or denial of service.
Remote attackers can exploit multiple vulnerabilities in nginx-ui to gain administrator rights, bypass security mechanisms, disclose or manipulate in…
A remote attacker can cause a Denial of Service via a vulnerability in expat.
Multiple vulnerabilities in Red Hat Enterprise Linux allow a remote, anonymous attacker to manipulate data, disclose information, bypass security con…
Multiple vulnerabilities in OpenSSL allow an attacker to bypass security controls, disclose confidential information, manipulate data, and cause a de…
A remote, unauthenticated attacker can exploit a vulnerability in Red Hat Enterprise Linux (cjose) to cause a denial of service and manipulate data.
A vulnerability in libpng allows a Denial of Service attack.
SmarterMail is vulnerable to privilege escalation and arbitrary code execution via authenticated remote attackers.
A vulnerability in Atlassian Data Center products allows arbitrary file access.
SonicWall SMA1000 Series Appliances have multiple vulnerabilities, including a remote code execution flaw that allows unauthenticated remote attacker…
Dell System Update contains vulnerabilities that could allow remote code execution as root.
Remote attackers can exploit multiple vulnerabilities in ILIAS to execute arbitrary code, bypass security mechanisms, and manipulate or disclose data.