Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

665 articles

VULNExploit-DB2 months ago

[webapps] cPanel - CRLF Injection

cPanel - CRLF Injection

VULNExploit-DB2 months ago

[webapps] Grav CMS 2.0.0-beta.2 - Remote Code Execution

Grav CMS 2.0.0-beta.2 - Remote Code Execution

VULNExploit-DB2 months ago

[webapps] Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service

Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service

VULNExploit-DB2 months ago

[hardware] D-Link DSL2600U - 'rom-0' Admin Password Disclosure

D-Link DSL2600U - 'rom-0' Admin Password Disclosure

VULNCheck Point Research2 months ago

25th May – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 25th May, please download our Threat Intelligence Bulletin. TOP ATTAC…

VULNhighMandiant2 months ago

Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability

Written by: Takahiro Sugiyama, Peter Revelant, Mathew Potaczek Introduction In late 2025, Mandiant responded to a security incid…

VULNhighMandiant2 months ago

2 PhaaS 2 Furious: The Evolution of Chinese-Language Phishing Services

While Russian-speaking threat actors have historically dominated the phishing-as-a-service (PhaaS) landscape, a rival ecosystem is…

VULNCheck Point Research2 months ago

Fast and Furious – Nimbus Manticore Operations During the Iranian Conflict

Key Findings Introduction During the recent geopolitical tensions in the Middle East, we reported on multiple Iran-nexus threat ac…

VULNPalo Alto Unit 422 months ago

Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns

Unit 42 details Screening Serpens' use of AppDomainManager hijacking and new RAT variants to target tech and defense sectors in re…

VULNPalo Alto Unit 422 months ago

Paved With Intent: ROADtools and Nation-State Tactics in the Cloud

Open-source framework ROADtools is being misused by threat actors for cloud intrusions. Learn how to identify its malicious use. T…

VULNhighCVE-2026-35188.4 HIGHZero Day Initiative2 months ago

ZDI-26-318: Progress Software Kemp LoadMaster ssodomain_killsession Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaste…

VULNhighCVE-2026-35178.4 HIGHZero Day Initiative2 months ago

ZDI-26-319: Progress Software Kemp LoadMaster addcountry Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaste…

VULNExploit-DB2 months ago

[local] Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path

Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path

VULNExploit-DB2 months ago

[webapps] BookStack 25.12.1 - Denial of Service

BookStack 25.12.1 - Denial of Service

VULNExploit-DB2 months ago

[webapps] Cockpit 359 - RCE

Cockpit 359 - RCE

VULNhighRecorded Future2 months ago

The Vulnerability Flood Is Now a Board Conversation. Here's How to Lead It.

Boards are asking about AI-driven vulnerability discovery. The leaders who answer that question well will come out with more credi…

VULNExploit-DB2 months ago

[webapps] FUXA 1.2.9 - RCE

FUXA 1.2.9 - RCE

VULNExploit-DB2 months ago

[webapps] solaredge - (CSRF-OOB-Injection)

solaredge - (CSRF-OOB-Injection)

VULNPalo Alto Unit 422 months ago

Tracking TamperedChef Clusters via Certificate and Code Reuse

Unit 42 analyzes TamperedChef malware clusters that use trojanized productivity apps and malvertising to deliver stealthy payloads…

VULNhighRecorded Future2 months ago

At Mythos Speed: A Defender's Playbook for the AI Vulnerability Surge in 2026

Frontier AI models like Mythos are making vulnerability discovery fast and cheap. Here's how defenders use threat intelligence and…

VULNCheck Point Research2 months ago

18th May – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 18th May, please download our Threat Intelligence Bulletin. TOP ATTAC…

VULNFull Disclosure2 months ago

APPLE-SA-05-13-2026-1 Safari 26.5

Posted by Apple Product Security via Fulldisclosure on May 17 APPLE-SA-05-13-2026-1 Safari 26.5 https://support.apple.com/en-us/12…

VULNFull Disclosure2 months ago

APPLE-SA-05-11-2026-11 visionOS 26.5

Posted by Apple Product Security via Fulldisclosure on May 17 APPLE-SA-05-11-2026-11 visionOS 26.5 https://support.apple.com/en-us…

VULNFull Disclosure2 months ago

APPLE-SA-05-11-2026-10 watchOS 26.5

Posted by Apple Product Security via Fulldisclosure on May 17 APPLE-SA-05-11-2026-10 watchOS 26.5 https://support.apple.com/en-us/…

VULNMandiant2 months ago

Welcome to BlackFile: Inside a Vishing Extortion Operation

Written by: Austin Larsen, Tyler McLellan, Genevieve Stark, Dan Ebreo Introduction Google Threat Intelligence Group (GTIG) has…

VULNPalo Alto Unit 422 months ago

Gremlin Stealer's Evolved Tactics: Hiding in Plain Sight With Resource Files

Unit 42 analyzes the evolution of Gremlin stealer. This variant uses advanced obfuscation, crypto clipping and session hijacking t…

VULNExploit-DB2 months ago

[local] Windows Snipping Tool - NTLMv2 Hash Hijack

Windows Snipping Tool - NTLMv2 Hash Hijack

VULNExploit-DB2 months ago

[local] Remote Sunrise Helper for Windows 2026.14 - Remote Code Execution

Remote Sunrise Helper for Windows 2026.14 - Remote Code Execution

VULNRecorded Future2 months ago

April 2026 CVE Landscape

In April 2026, Insikt Group® identified 37 high-impact vulnerabilities that should be prioritized for remediation, 35 of which had…

VULNExploit-DB2 months ago

[local] Remote Sunrise Helper for Windows 2026.14 - Unauthenticated File/Directory Listing

Remote Sunrise Helper for Windows 2026.14 - Unauthenticated File/Directory Listing