attack_Feed
Vulnerability Alerts

Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All FeedsAttack & NewsGov Alerts / ISACVulnerability AlertsPrivacy & GovernanceFraud & Scams
665 articles
EX
VULNExploit-DBabout 2 months ago

[webapps] MikroORM 7.0.13 - SQL Injection

EX
VULNExploit-DBabout 2 months ago

[remote] Microsoft - NTLMv2 Hash Capture

EX
VULNExploit-DBabout 2 months ago

[webapps] Prodigy Commerce 3.3.0 - Local File Inclusion

EX
VULNExploit-DBabout 2 months ago

[webapps] Langflow 1.3.0 - Remote Code Execution

VULNPalo Alto Unit 42about 2 months ago

2026 World Cup: Discussing The World’s Biggest Game’s Attack Surface

VULNhighCVE-2026-349287.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-321: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

VULNhighCVE-2026-452087.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-326: TrendAI Vision One Security Agent Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

VULNhighCVE-2026-349307.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-323: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

VULNhighCVE-2026-349277.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-320: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

VULNhighCVE-2026-349297.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-322: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

VULNhighCVE-2026-452067.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-324: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

VULNhighCVE-2026-452077.8 HIGHZero Day Initiativeabout 2 months ago

ZDI-26-325: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

VULNPalo Alto Unit 42about 2 months ago

Out of the Crypt: The Evolving Cyber Extortion Economy

EX
VULNExploit-DB2 months ago

[hardware] MeiG Smart FORGE_SLT711 - OS Command Injection

EX
VULNExploit-DB2 months ago

[webapps] EspoCRM 9.3.3 - SSRF

EX
VULNExploit-DB2 months ago

[webapps] OpenCATS 0.9.7.4 - SQL Injection

EX
VULNExploit-DB2 months ago

[local] Realtek rtl819x - Local Privilege

EX
VULNExploit-DB2 months ago

[webapps] scramble - Remote Code Execution

EX
VULNExploit-DB2 months ago

[local] Linux Kernel - Local Privilege Escalation

EX
VULNExploit-DB2 months ago

[webapps] Casdoor 3.54.1 - Arbitrary File Write via Path Traversal

VULNCheck Point Research2 months ago

AI Threat Landscape Digest March-April 2026

VULNFull Disclosure2 months ago

Re: Dovecot Security Advisory OXDC-2026-0002

VULNFull Disclosure2 months ago

SSRF in Anthropic mcp-server-fetch and Microsoft playwright-mcp — publicly disclosed via GitHub issues

VULNhighCVE-2021-217356.5 MEDIUMFull Disclosure2 months ago

[SECURITY ADVISORY] CVE-2021-21735 - ZTE ZXHN H168N V3.5 Unauthenticated Admin Credential Leak

VULNhighCVE-2026-344747.5 HIGHFull Disclosure2 months ago

[SECURITY ADVISORY] CVE-2026-34474 - ZTE H298A/H108N Unauthenticated Admin Credential Exposure

VULNhighCVE-2026-344727.1 HIGHFull Disclosure2 months ago

[SECURITY ADVISORY] CVE-2026-34472 - ZTE ZXHN H188A V6 Authentication Bypass via Pre-Login Wizard

VULNhighCVE-2026-344737.5 HIGHFull Disclosure2 months ago

[SECURITY ADVISORY] CVE-2026-34473 - Unauthenticated DoS in 17+ ZTE Router Models (140K+ Devices)

VULNhighFull Disclosure2 months ago

Multiple vulnerabilities in Sparx Pro Cloud Server and Enterprise Architect

EX
VULNExploit-DB2 months ago

[webapps] Wordpress Temporary Login Plugin 1.0.0 - 'temp-login-token' Authentication Bypass to Account Takeover

EX
VULNExploit-DB2 months ago

[local] Linux Kernel 6.8 - Local Privilege Escalation