Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

Microsoft Threat Intelligence analyzes the LiteLLM 1.107.0 compromise, including Python startup hooks, credential theft, remote co…

VULNCheck Point Research2 days ago

Infostealer riding the AI Train

Key Points Introduction Infostealers commonly target browser passwords, session cookies, and cryptocurrency wallets. This malware…

VULNPalo Alto Unit 423 days ago

EMudhra Intermediate CA Certificates Compromised

Eight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and…

VULNPalo Alto Unit 423 days ago

The Current Landscape of OAuth Attacks

Unit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments. The post The Curr…

VULNhighCVE-2026-341829.1 CRITICALZero Day Initiative3 days ago

ZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value Vulnerability

This vulnerability allows network-adjacent attackers to tamper with CMS AuthEnvelopedData messages on affected installations of Op…

VULNhighCVE-2026-630739.8 CRITICALZero Day Initiative3 days ago

ZDI-26-789: OpenSSL CMP Use of Externally-Controlled Format String Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenSSL. Authentication…

VULNhighCVE-2026-202185.8 MEDIUMZero Day Initiative3 days ago

ZDI-26-788: Cisco Snort OLE VBA Decompression Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Snort. Authentication is n…

VULNhighCVE-2026-242507.8 HIGHZero Day Initiative3 days ago

ZDI-26-787: NVIDIA Megatron Bridge YAML File Parsing Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron Bridge. User int…

VULNhighCVE-2026-114549Zero Day Initiative3 days ago

ZDI-26-786: NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not…

VULNRecorded Future4 days ago

Behind Japan’s Warnings of a Cyber Crisis

Explore Japan's 2026 cyber crisis, rising breach trends, AI tooling, legacy systems, and key mitigation strategies to protect orga…

VULNhighCVE-2026-109618Exploit-DB4 days ago

[remote] PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE

PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE

VULNMicrosoft Security4 days ago

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise

Storm-0940 used ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, enabling application credential abuse across…

VULNhighPalo Alto Unit 424 days ago

“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities

An investigation into a threat actor bypassing AI safety controls to coordinate credential theft, VoIP fraud planning, and databas…

VULNcriticalCVE-2026-109618Palo Alto Unit 424 days ago

Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619

CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CM…

VULNcriticalRecorded Future5 days ago

PHP2Shell Exploitation: Two Critical PHP Flaws Explained

Two critical PHP remote code execution flaws (PHP2Shell) are reportedly being exploited. See who’s exposed, how the exploits work,…

VULNExploit-DB5 days ago

[webapps] pizzafy-1.0 - SQLi

pizzafy-1.0 - SQLi

VULNExploit-DB5 days ago

[remote] South River Technologies Titan MFT Server 26.0.0 - code execution

South River Technologies Titan MFT Server 26.0.0 - code execution

VULNExploit-DB5 days ago

[remote] Synametrics Syncrify 6.2 - command execution

Synametrics Syncrify 6.2 - command execution

VULNExploit-DB5 days ago

[webapps] Keycloak 26.7.2 - Unauthenticated Account Takeover

Keycloak 26.7.2 - Unauthenticated Account Takeover

VULNExploit-DB5 days ago

[webapps] Open eClass 3.15 - RCE

Open eClass 3.15 - RCE

VULNExploit-DB5 days ago

[webapps] Automotive Shop Management System 1.0 - SQLi

Automotive Shop Management System 1.0 - SQLi

VULNExploit-DB5 days ago

[remote] Edimax BR-6478AC firmware v2.20 - authenticated command injection

Edimax BR-6478AC firmware v2.20 - authenticated command injection

VULNExploit-DB5 days ago

[remote] Exasol Database 7.1.30 - command execution

Exasol Database 7.1.30 - command execution

VULNExploit-DB5 days ago

[remote] Parasoft Continuous Testing Platform 10.7.5 - JSP command execution

Parasoft Continuous Testing Platform 10.7.5 - JSP command execution

VULNExploit-DB5 days ago

[remote] ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root

ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root

VULNcriticalFull Disclosure5 days ago

[0day-rubbish] TRENDnet TV-IP302PI firmware 1.02.38 authenticated NTP server-address OS command injection to root command execution via a shell-form system() call (7.2 High, PR:H)

Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in TRENDnet TV…

VULNcriticalFull Disclosure5 days ago

[0day-rubbish] Royal Render 9.1.26b: default-unauthenticated job submission on rrServer TCP 7773 reaches worker-side shell execution as the worker identity, measured root (8.1 High)

Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in Royal Rende…

VULNcriticalFull Disclosure5 days ago

[0day-rubbish] ProSoft Technology RLX-IFH24E v2.2.44 unsigned firmware upgrade package to root command execution and full account-database overwrite (7.2)

Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in the ProSoft…

VULNcriticalFull Disclosure5 days ago

[0day-rubbish] Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT anonymous deserialization in the database restore path to JSP command execution as uid=1000 (9.8)

Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in Parasoft Co…

VULNcriticalFull Disclosure5 days ago

[0day-rubbish] Exasol Database 7.1.30 docker-db form: shipped default SYS credential to PYTHON3 UDF os.popen command execution as uid=500(exadefusr), output returned in-band (8.8)

Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in Exasol Data…