Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

583 articles

No Manners Here: The Ruthless Rise of The Gentlemen Ransomware

Unit 42 explores The Gentlemen ransomware operations, revealing the affiliate model driving its rapid growth. Learn more here. The…

VULNMicrosoft Security3 days ago

Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative

Microsoft’s latest Secure Future Initiative report outlines progress on secure foundations, AI-powered defense, and future-ready c…

VULNRecorded Future3 days ago

June 2026 CVE Landscape

In June 2026, Insikt Group® identified 60 high-impact vulnerabilities that should be prioritized for remediation, 30 of which had…

VULNhighMicrosoft Security4 days ago

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational platf…

VULNSentinelOne Labs4 days ago

One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement

China and India ran separate espionage operations against the same Pakistani police force, each drawn by different stakes in Pakis…

VULNhighFull Disclosure4 days ago

[REVIVE-SA-2026-003] Revive Adserver Vulnerabilities

Posted by Matteo Beccati on Jul 08 ======================================================================== https://www.revive-ads…

VULNRecorded Future4 days ago

RiskX interview video featuring Colin Mahony and Mastercard's Aditi Sawhney

Recorded Future CEO Colin Mahony and Mastercard’s Aditi Sawhney discuss the convergence of cyber and financial crime. Explore how…

VULNMicrosoft Security5 days ago

Protecting Microsoft at AI speed: How SFI proactively hardens our cloud

At Microsoft we encompass these security requirements, along with threat knowledge, and operational frameworks in our Secure Futur…

VULNcriticalZero Day Initiative5 days ago

ZDI-26-403: (0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentica…

VULNcriticalZero Day Initiative5 days ago

ZDI-26-402: (0Day) Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An attack…

VULNcriticalZero Day Initiative5 days ago

ZDI-26-401: (0Day) AnyDesk Support Information Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacke…

VULNcriticalZero Day Initiative5 days ago

ZDI-26-400: (0Day) AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacke…

VULNcriticalZero Day Initiative5 days ago

ZDI-26-399: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi…

VULNcriticalZero Day Initiative5 days ago

ZDI-26-398: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi…

VULNExploit-DB5 days ago

[webapps] Krayin CRM v2.2.x - Authenticated Remote Code Execution

Krayin CRM v2.2.x - Authenticated Remote Code Execution

VULNExploit-DB5 days ago

[webapps] Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure

Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure

VULNExploit-DB5 days ago

[webapps] Langflow 1.9.0 - RCE

Langflow 1.9.0 - RCE

VULNExploit-DB5 days ago

[webapps] Joomla Page Builder CK 3.5.10 - Arbitrary File Upload

Joomla Page Builder CK 3.5.10 - Arbitrary File Upload

VULNRecorded Future5 days ago

The Threat Isn’t the Frontier Model

The real AI threat isn't frontier models. It's cheap local models getting easier to run. Here's why CISOs should build defensive a…

VULNPalo Alto Unit 426 days ago

Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation

A cybercrime campaign combined a loader-as-a-service framework and DLL sideloading via a Go-compiled fake MpClient.dll, a novel ev…

VULNhighCVE-2026-53582Full Disclosure6 days ago

OPNsense XPATH Injection (CVE-2026-53582)

Posted by evan on Jul 06 SUMMARY: a stored XPATH injection allows any user with just ca https://github.com/opnsense/core/security/…

VULNFull Disclosure6 days ago

SCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+

Posted by Jan Hüber via Fulldisclosure on Jul 06 Authentication Bypass for SafeLine SL6 and SL6+ =================================…

VULNExploit-DB6 days ago

[webapps] Discuz! X5.0 - Authentication Bypass

Discuz! X5.0 - Authentication Bypass

VULNExploit-DB6 days ago

[webapps] Tenable Nessus 10.12.1 - SQL Injection

Tenable Nessus 10.12.1 - SQL Injection

VULNExploit-DB6 days ago

[webapps] WordPress Bricks Builder Theme - RCE

WordPress Bricks Builder Theme - RCE

VULNhighExploit-DB6 days ago

[remote] iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter

iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter

VULNExploit-DB6 days ago

[webapps] Flowise 3.1.3 - arbitrary code execution

Flowise 3.1.3 - arbitrary code execution

VULNExploit-DB6 days ago

[remote] Hydra - Stack Buffer Overflow

Hydra - Stack Buffer Overflow

VULNExploit-DB6 days ago

[webapps] MCPJam Inspector - Remote Code Execution

MCPJam Inspector - Remote Code Execution

VULNExploit-DB6 days ago

[local] ProtonVPN v4.4.1 - Unquoted Service Path

ProtonVPN v4.4.1 - Unquoted Service Path