Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

VULNExploit-DBabout 2 months ago

[webapps] Marimo 0.20.4 - RCE

Marimo 0.20.4 - RCE

VULNMicrosoft Securityabout 2 months ago

Counterfeit installers to system compromise: Tracking a deceptive software download campaign

An active campaign is impersonating legitimate software vendors to deliver malware through look-alike download pages and regenerat…

VULNMicrosoft Securityabout 2 months ago

Cybersecurity IR Workshop: The workshop you shouldn’t miss

Cyber resilience starts before a crisis. Gain practical insights from DART to strengthen readiness and response. The post Cybersec…

VULNExploit-DBabout 2 months ago

[webapps] Wolf CMS 0.8.3.1 - RCE v

Wolf CMS 0.8.3.1 - RCE v

VULNExploit-DBabout 2 months ago

[webapps] Payload CMS 3.72.0 - Blind SQL Injection

Payload CMS 3.72.0 - Blind SQL Injection

VULNExploit-DBabout 2 months ago

[webapps] Bludit CMS - Stored XSS

Bludit CMS - Stored XSS

VULNExploit-DBabout 2 months ago

[webapps] Grav CMS 2.0.7 - RCE

Grav CMS 2.0.7 - RCE

VULNExploit-DBabout 2 months ago

[webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass

miniOrange 5.4.3 - Unauthenticated Auth Bypass

VULNExploit-DBabout 2 months ago

[webapps] EasyAppointments 1.5.1 - Blind SQL Injection

EasyAppointments 1.5.1 - Blind SQL Injection

VULNRecorded Futureabout 2 months ago

The Agentic SOC – From AI Theater to Real Defense

Experts from Recorded Future and Accenture offer perspectives on navigating the path to becoming an agentic SOC. Find out how to p…

VULNCheck Point Researchabout 2 months ago

Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Research by: hasherezade Key Points Introduction JSCeal is a stealer delivered as compiled V8 bytecode (.jsc) and executed by a bu…

VULNCheck Point Researchabout 2 months ago

31th August – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 31st August, please download our Threat Intelligence Bulletin. TOP AT…

VULNhighPalo Alto Unit 42about 2 months ago

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Learn how the Spring Ring campaign abuses Microsoft Teams and voice phishing to deploy malware and target enterprise domain contro…

VULNcriticalZero Day Initiativeabout 2 months ago

ZDI-26-615: (0Day) pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker…

VULNcriticalZero Day Initiativeabout 2 months ago

ZDI-26-614: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User int…

VULNcriticalZero Day Initiativeabout 2 months ago

ZDI-26-613: (0Day) pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User int…

VULNcriticalZero Day Initiativeabout 2 months ago

ZDI-26-612: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User int…

VULNcriticalZero Day Initiativeabout 2 months ago

ZDI-26-611: (0Day) pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User int…

VULNExploit-DBabout 2 months ago

[webapps] CubeCart 6.7.4 - SQL injection

CubeCart 6.7.4 - SQL injection

VULNExploit-DBabout 2 months ago

[webapps] CubeCart 6.7.4 - SQL

CubeCart 6.7.4 - SQL

VULNExploit-DBabout 2 months ago

[webapps] CubeCart 6.7.4 - Stored XSS

CubeCart 6.7.4 - Stored XSS

VULNExploit-DBabout 2 months ago

[webapps] CubeCart 6.7.4 - Cross-Site Scripting

CubeCart 6.7.4 - Cross-Site Scripting

VULNExploit-DBabout 2 months ago

[webapps] Linksys E1200_2.0.04 - Unauthenticated OS Command Injection

Linksys E1200_2.0.04 - Unauthenticated OS Command Injection

VULNExploit-DBabout 2 months ago

[webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution

Langflow 1.8.4 - Path Traversal to Remote Code Execution

VULNExploit-DBabout 2 months ago

[webapps] C-MOR 6.0104 - Directory Traversal

C-MOR 6.0104 - Directory Traversal

VULNExploit-DBabout 2 months ago

[webapps] C-MOR 6.0104 - Cross-Site Scripting (XSS)

C-MOR 6.0104 - Cross-Site Scripting (XSS)

VULNhighFull Disclosureabout 2 months ago

CyberDanube Security Research 20260611-0 | Multiple Denial of Service Vulnerabilities in Dahua IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC Camera Series

Posted by Thomas Weber | CyberDanube via Fulldisclosure on Aug 29 CyberDanube Security Research 20260611-0 https://www.dahuasecuri…

VULNhighCVE-2025-702909.8 CRITICALFull Disclosureabout 2 months ago

Multiple Integer Overflows in U-Boot Filesystem Parsing (CVE-2025-70290 through CVE-2025-70293)

Posted by t.preissl via Fulldisclosure on Aug 29 -----BEGIN SECURITY ADVISORY----- Title: Multiple Integer Overflows in U-Boot Fi…

VULNhighCVE-2025-702909.8 CRITICALFull Disclosureabout 2 months ago

[ADVISORY] Multiple Integer Overflows in U-Boot Filesystem Parsing (CVE-2025-70290 through CVE-2025-70293)

Posted by t.preissl via Fulldisclosure on Aug 29 -----BEGIN SECURITY ADVISORY----- Title: Multiple Integer Overflows in U-Boot Fi…

VULNFull Disclosureabout 2 months ago

JSON Deserialiser Unconstrained Resource Consumption Proof of Concept

Posted by Daniel Owens via Fulldisclosure on Aug 29 On 26 October 2025 we published "Struts2 and Related Framework Array/Collectio…