Vulnerabilities

149 entries

GNUnet P2P Framework 0.26.2 Mon, 28 Dec 2026 19:00 · Vulners.com RSS Feed
IServ Schoolserver User Enumeration Wed, 09 Sep 2026 20:00 · Vulners.com RSS Feed
CVE-2026-17510 Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero length BMPSTRING attribute Sat, 08 Aug 2026 21:21 · Vulners.com RSS Feed
CVE-2026-17510 Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero length BMPSTRING attribute Sat, 08 Aug 2026 21:21 · Vulners.com RSS Feed
CVE-2026-71993 Sat, 08 Aug 2026 20:20 · Vulners.com RSS Feed
Exploit for CVE-2026-64638 Sat, 08 Aug 2026 20:17 · Vulners.com RSS Feed
CVE-2026-71992 Sat, 08 Aug 2026 20:16 · Vulners.com RSS Feed
CVE-2026-71991 Sat, 08 Aug 2026 20:16 · Vulners.com RSS Feed
CVE-2026-71993 Sat, 08 Aug 2026 20:16 · Vulners.com RSS Feed
CVE-2026-71990 Sat, 08 Aug 2026 20:16 · Vulners.com RSS Feed
CVE-2026-71984 Sat, 08 Aug 2026 20:16 · Vulners.com RSS Feed
CVE-2026-71985 Sat, 08 Aug 2026 20:16 · Vulners.com RSS Feed
CVE-2026-71986 Sat, 08 Aug 2026 20:16 · Vulners.com RSS Feed
CVE-2026-71989 Sat, 08 Aug 2026 20:16 · Vulners.com RSS Feed
CVE-2026-71988 Sat, 08 Aug 2026 20:16 · Vulners.com RSS Feed
CVE-2026-19323 Sat, 08 Aug 2026 20:16 · Vulners.com RSS Feed
CVE-2026-71987 Sat, 08 Aug 2026 20:16 · Vulners.com RSS Feed
CVE-2026-19323 azer react-analyzer-mcp analyze-projec index.ts generateProjectDocs path traversal Sat, 08 Aug 2026 20:00 · Vulners.com RSS Feed
CVE-2026-19323 Sat, 08 Aug 2026 20:00 · Vulners.com RSS Feed
CVE-2026-71993 Sat, 08 Aug 2026 20:00 · Vulners.com RSS Feed
CVE-2026-71993 MSI Radix AXE6600 v781521 Command Injection via openvpn function Sat, 08 Aug 2026 20:00 · Vulners.com RSS Feed
CVE-2026-71992 Sat, 08 Aug 2026 19:52 · Vulners.com RSS Feed
CVE-2026-71992 MSI Radix AXE6600 v781521 Command Injection via macfilter Sat, 08 Aug 2026 19:52 · Vulners.com RSS Feed
CVE-2026-71991 Sat, 08 Aug 2026 19:49 · Vulners.com RSS Feed
CVE-2026-71991 MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function Sat, 08 Aug 2026 19:49 · Vulners.com RSS Feed
The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code. Sat, 08 Aug 2026 19:45 · Vulners.com RSS Feed
The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information. Sat, 08 Aug 2026 19:45 · Vulners.com RSS Feed
The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges. Sat, 08 Aug 2026 19:45 · Vulners.com RSS Feed
The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code. Sat, 08 Aug 2026 19:45 · Vulners.com RSS Feed
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code. Sat, 08 Aug 2026 19:45 · Vulners.com RSS Feed
The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code. Sat, 08 Aug 2026 19:45 · Vulners.com RSS Feed
Blitz Identity Provider (Authentication server) Sat, 08 Aug 2026 19:45 · Vulners.com RSS Feed
The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity. Sat, 08 Aug 2026 19:45 · Vulners.com RSS Feed
The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges. Sat, 08 Aug 2026 19:45 · Vulners.com RSS Feed
The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure. Sat, 08 Aug 2026 19:45 · Vulners.com RSS Feed
The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems allows a hacker to cause a service failure. Sat, 08 Aug 2026 19:45 · Vulners.com RSS Feed
The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure. Sat, 08 Aug 2026 19:45 · Vulners.com RSS Feed
CVE-2026-71990 Sat, 08 Aug 2026 19:37 · Vulners.com RSS Feed
CVE-2026-71990 MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function Sat, 08 Aug 2026 19:37 · Vulners.com RSS Feed
CVE-2026-71989 MSI Radix AXE6600 v781521 Command Injection via porTrigger function Sat, 08 Aug 2026 19:33 · Vulners.com RSS Feed
CVE-2026-71989 Sat, 08 Aug 2026 19:33 · Vulners.com RSS Feed
CVE-2026-71988 MSI Radix AXE6600 v781521 Command Injection via portFw function Sat, 08 Aug 2026 19:31 · Vulners.com RSS Feed
CVE-2026-71988 Sat, 08 Aug 2026 19:31 · Vulners.com RSS Feed
CVE-2026-11612 Sat, 08 Aug 2026 19:30 · Vulners.com RSS Feed
SUSE CVE-2026-46358 Sat, 08 Aug 2026 19:29 · Vulners.com RSS Feed
SUSE CVE-2026-46405 Sat, 08 Aug 2026 19:29 · Vulners.com RSS Feed
SUSE CVE-2026-68081 Sat, 08 Aug 2026 19:29 · Vulners.com RSS Feed
SUSE CVE-2026-68082 Sat, 08 Aug 2026 19:29 · Vulners.com RSS Feed
CVE-2026-71987 MSI Radix AXE6600 v781521 Command Injection via alg function Sat, 08 Aug 2026 19:27 · Vulners.com RSS Feed
CVE-2026-71987 Sat, 08 Aug 2026 19:27 · Vulners.com RSS Feed
Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077) Fri, 07 Aug 2026 10:32 · Rapid7 Cybersecurity Blog
Linux Shell Forensic: Let?s Dive Into Atuin!, (Fri, Aug 7th) Fri, 07 Aug 2026 03:22 · SANS Internet Storm Center, InfoCON: green
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution Thu, 06 Aug 2026 23:22 · Cyber Security Advisories - MS-ISAC
ISC Stormcast For Friday, August 7th, 2026 https://isc.sans.edu/podcastdetail/10042, (Fri, Aug 7th) Thu, 06 Aug 2026 22:00 · SANS Internet Storm Center, InfoCON: green
ISC Stormcast For Thursday, August 6th, 2026 https://isc.sans.edu/podcastdetail/10040, (Thu, Aug 6th) Wed, 05 Aug 2026 22:00 · SANS Internet Storm Center, InfoCON: green
22 Seconds to Compromise: How Automated SSH Actors Move From Login to Persistence Before You Can Blink [Guest Diary], (Thu, Aug 6th) Wed, 05 Aug 2026 20:15 · SANS Internet Storm Center, InfoCON: green
Don't Revoke That Token Yet: Inside the keyv/cacheable npm Worm, (Wed, Aug 5th) Wed, 05 Aug 2026 13:56 · SANS Internet Storm Center, InfoCON: green
ISC Stormcast For Wednesday, August 5th, 2026 https://isc.sans.edu/podcastdetail/10038, (Wed, Aug 5th) Tue, 04 Aug 2026 22:00 · SANS Internet Storm Center, InfoCON: green
Botnet Hunting for Vulnerabilities in Diagnostic Tools, (Tue, Aug 4th) Tue, 04 Aug 2026 08:46 · SANS Internet Storm Center, InfoCON: green
CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild Tue, 04 Aug 2026 07:11 · Rapid7 Cybersecurity Blog
ISC Stormcast For Tuesday, August 4th, 2026 https://isc.sans.edu/podcastdetail/10036, (Tue, Aug 4th) Mon, 03 Aug 2026 22:00 · SANS Internet Storm Center, InfoCON: green
Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066) Mon, 03 Aug 2026 13:11 · Rapid7 Cybersecurity Blog
Multiple Vulnerabilities in SolarWinds Web Help Desk Could Allow for Authentication Bypass Mon, 03 Aug 2026 13:05 · Cyber Security Advisories - MS-ISAC
Is your SD-WAN ready for AI-powered operations? Mon, 03 Aug 2026 11:00 · Security @ Cisco Blogs
Metasploit Pro 5.1 Released Mon, 03 Aug 2026 10:48 · Rapid7 Cybersecurity Blog
Rapid7 Expands UK and Ireland Channel Presence Through Strategic Partnership with Exclusive Networks Mon, 03 Aug 2026 04:00 · Rapid7 Cybersecurity Blog
ISC Stormcast For Monday, August 3rd, 2026 https://isc.sans.edu/podcastdetail/10034, (Mon, Aug 3rd) Sun, 02 Aug 2026 22:00 · SANS Internet Storm Center, InfoCON: green
Atomic MacOS (AMOS) stealer infection, (Sun, Aug 2nd) Sun, 02 Aug 2026 00:05 · SANS Internet Storm Center, InfoCON: green
The Zero Trust Imperative for the Frontier AI Era Fri, 31 Jul 2026 11:00 · Security @ Cisco Blogs
Rapid7 at Black Hat USA 2026: See preemptive security in action Fri, 31 Jul 2026 07:53 · Rapid7 Cybersecurity Blog
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution Thu, 30 Jul 2026 14:20 · Cyber Security Advisories - MS-ISAC
KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails Thu, 30 Jul 2026 12:11 · Rapid7 Cybersecurity Blog
Rapid7 named a Leader in the IDC MarketScape: Worldwide MDR Service for Midmarket 2026 Vendor Assessment Thu, 30 Jul 2026 11:14 · Rapid7 Cybersecurity Blog
Metasploit Framework 6.5 Released Thu, 30 Jul 2026 10:29 · Rapid7 Cybersecurity Blog
Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310) Thu, 30 Jul 2026 06:35 · Rapid7 Cybersecurity Blog
CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity Wed, 29 Jul 2026 12:16 · Rapid7 Cybersecurity Blog
How AI is Rewriting the Zero-Day Playbook for Preemptive Security Wed, 29 Jul 2026 09:00 · Rapid7 Cybersecurity Blog
Rapid7 Analysis: Check Point SmartConsole Authentication Bypass (CVE-2026-16232) Tue, 28 Jul 2026 14:32 · Rapid7 Cybersecurity Blog
Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution Tue, 28 Jul 2026 13:30 · Cyber Security Advisories - MS-ISAC
A Vulnerability in VeloCloud Orchestrator (VCO) On-Prem Could Allow for Remote Code Execution Tue, 28 Jul 2026 09:51 · Cyber Security Advisories - MS-ISAC
Rapid7 Cyber GRC is now available: Turn security action into compliance proof Tue, 28 Jul 2026 09:00 · Rapid7 Cybersecurity Blog
The Next Evolution of MDR: Preemptive Defense and Agentic Investigation Tue, 28 Jul 2026 09:00 · Rapid7 Cybersecurity Blog
Rapid7 and Exclusive Networks expand partnership to modernize security operations and accelerate customer success Tue, 28 Jul 2026 04:00 · Rapid7 Cybersecurity Blog
Assuming Failure: The Mindset Shift That Actually Improves Your Defensive Outcomes Mon, 27 Jul 2026 11:00 · Security @ Cisco Blogs
The Journey towards Logically Air-Gapped Deployment Fri, 24 Jul 2026 11:00 · Security @ Cisco Blogs
Cisco Firewall Migration Manager: A Faster, Simpler, More Confident Path to Secure Firewall Thu, 23 Jul 2026 11:00 · Security @ Cisco Blogs
What Happened Between OpenAI and Hugging Face? Thu, 23 Jul 2026 08:47 · Rapid7 Cybersecurity Blog
CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild Thu, 23 Jul 2026 07:57 · Rapid7 Cybersecurity Blog
What’s New in Rapid7 Products and Services: Q2 2026 in Review Wed, 22 Jul 2026 09:28 · Rapid7 Cybersecurity Blog
From a Single Alert to 1,000 Files: Inside an Exposed WebDAV Malware Delivery Lab Mon, 20 Jul 2026 09:00 · Rapid7 Cybersecurity Blog
A Vulnerability Chain in WordPress Core Could Allow for Remote Code Execution Mon, 20 Jul 2026 08:53 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution Wed, 15 Jul 2026 15:03 · Cyber Security Advisories - MS-ISAC
We third-party tested our firewall built for AI-scale. The test tools hit their limit first. Wed, 15 Jul 2026 11:00 · Security @ Cisco Blogs
Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution Tue, 14 Jul 2026 14:30 · Cyber Security Advisories - MS-ISAC
Critical Patches Issued for Microsoft Products, July 14, 2026 Tue, 14 Jul 2026 14:28 · Cyber Security Advisories - MS-ISAC
SharpHound Recon Attack – How AI enhanced the threat hunt Tue, 07 Jul 2026 13:59 · Security @ Cisco Blogs
Machine Speed, Human Judgement: How AI Changed the SOC in 2026 Tue, 07 Jul 2026 13:59 · Security @ Cisco Blogs
Elevating Expertise in the SOC Tue, 07 Jul 2026 13:59 · Security @ Cisco Blogs
Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution Wed, 01 Jul 2026 15:09 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution Wed, 01 Jul 2026 14:48 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution Wed, 01 Jul 2026 00:41 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution Fri, 26 Jun 2026 00:39 · Cyber Security Advisories - MS-ISAC
A Vulnerability in PAN-OS Could Allow for Authentication Bypass Mon, 22 Jun 2026 13:39 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution Tue, 16 Jun 2026 15:30 · Cyber Security Advisories - MS-ISAC
A Vulnerability in SimpleHelp Could Allow for Authentication Bypass Tue, 16 Jun 2026 15:23 · Cyber Security Advisories - MS-ISAC
A Vulnerability in Oracle PeopleSoft PeopleTools Could Allow for Remote Code Execution Thu, 11 Jun 2026 14:29 · Cyber Security Advisories - MS-ISAC
Critical Patches Issued for Microsoft Products, June 9, 2026 Tue, 09 Jun 2026 13:53 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Check Point Products Could Allow for Authentication Bypass Tue, 09 Jun 2026 13:00 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution Tue, 09 Jun 2026 09:45 · Cyber Security Advisories - MS-ISAC
A Vulnerability in Cisco Products Could Allow for Server-Side Request Forgery Fri, 05 Jun 2026 09:13 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution Tue, 19 May 2026 20:37 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in NGINX Could Allow for Remote Code Execution Mon, 18 May 2026 16:17 · Cyber Security Advisories - MS-ISAC
A Vulnerability in Microsoft Exchange Server Could Allow for Arbitrary Code Execution Fri, 15 May 2026 15:48 · Cyber Security Advisories - MS-ISAC
A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens Wed, 13 May 2026 03:00 · Project Zero
Multiple Vulnerabilities in Fortinet Products Could Allow for Remote Code Execution Tue, 12 May 2026 15:45 · Cyber Security Advisories - MS-ISAC
Critical Patches Issued for Microsoft Products, May 12, 2026 Tue, 12 May 2026 14:15 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution Tue, 12 May 2026 14:13 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution Tue, 12 May 2026 14:10 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution Thu, 07 May 2026 12:18 · Cyber Security Advisories - MS-ISAC
A Vulnerability in PAN-OS Could Allow for Remote Code Execution Wed, 06 May 2026 18:07 · Cyber Security Advisories - MS-ISAC
A Vulnerability in Apache HTTP Server Could Allow for Remote Code Execution Wed, 06 May 2026 15:22 · Cyber Security Advisories - MS-ISAC
A Vulnerability in WHM cPanel and WP Squared Could Allow for Remote Code Execution Mon, 04 May 2026 12:20 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution Tue, 28 Apr 2026 13:52 · Cyber Security Advisories - MS-ISAC
Oracle Quarterly Critical Patches Issued April 21, 2026 Tue, 28 Apr 2026 13:50 · Cyber Security Advisories - MS-ISAC
A Vulnerability in OpenSSH Could Allow for Authentication Bypass Tue, 28 Apr 2026 11:45 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution Tue, 21 Apr 2026 16:40 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution Thu, 16 Apr 2026 10:40 · Cyber Security Advisories - MS-ISAC
Critical Patches Issued for Microsoft Products, April 14, 2026 Tue, 14 Apr 2026 14:18 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Fortinet Products Could Allow for Arbitrary Code Execution Tue, 14 Apr 2026 13:41 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution Tue, 14 Apr 2026 13:23 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution Tue, 07 Apr 2026 16:32 · Cyber Security Advisories - MS-ISAC
A Vulnerability in Fortinet FortiClientEMS Could Allow for Arbitrary Code Execution Sat, 04 Apr 2026 04:49 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Progress ShareFile Could Allow for Remote Code Execution Thu, 02 Apr 2026 14:10 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Cisco Products Could Allow for Arbitrary Code Execution Thu, 02 Apr 2026 11:17 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution Wed, 01 Apr 2026 21:18 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Apple Products Could Allow for Privilege Escalation Tue, 31 Mar 2026 23:45 · Cyber Security Advisories - MS-ISAC
A Vulnerability in F5 Products Could Allow for Remote Code Execution Mon, 30 Mar 2026 11:40 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in NetScaler ADC and NetScaler Gateway Could Allow for Memory Overread Mon, 30 Mar 2026 11:09 · Cyber Security Advisories - MS-ISAC
A Vulnerability in Oracle Products Could Allow for Remote Code Execution Mon, 23 Mar 2026 16:17 · Cyber Security Advisories - MS-ISAC
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution Fri, 13 Mar 2026 13:32 · Cyber Security Advisories - MS-ISAC
On the Effectiveness of Mutational Grammar Fuzzing Thu, 05 Mar 2026 03:00 · Project Zero
A Deep Dive into the GetProcessHandleFromHwnd API Thu, 26 Feb 2026 03:00 · Project Zero
Bypassing Administrator Protection by Abusing UI Access Thu, 12 Feb 2026 03:00 · Project Zero
Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529 Fri, 30 Jan 2026 03:00 · Project Zero
Bypassing Windows Administrator Protection Mon, 26 Jan 2026 03:00 · Project Zero
A 0-click exploit chain for the Pixel 9 Part 3: Where do we go from here? Wed, 14 Jan 2026 13:01 · Project Zero
A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave Wed, 14 Jan 2026 13:00 · Project Zero
A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby Wed, 14 Jan 2026 12:59 · Project Zero
Welcome to the new Project Zero Blog Tue, 16 Dec 2025 05:00 · Project Zero

← Back to home