Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

Security advisory: Authenticated RCE (command injection) in Kerio Connect 10.0.9 Patch 2 (build 10320) (GFI Software)

Posted by disclosure via Fulldisclosure on Aug 17 0day Rubbish Research Team is publicly disclosing a vulnerability in Kerio Conne…

VULNFull Disclosure2 months ago

Security advisory: Pre-authentication RCE (default credentials + path traversal) in PulseNET Enterprise 6.0.3 (build 6975) (GE Vernova)

Posted by disclosure via Fulldisclosure on Aug 17 0day Rubbish Research Team is publicly disclosing a vulnerability in PulseNET En…

VULNFull Disclosure2 months ago

Security advisory: Pre-authentication RCE (BinaryFormatter deserialization) in Cinegy Cinegize 2026-02-05 installer (Cinegy GmbH)

Posted by disclosure via Fulldisclosure on Aug 17 0day Rubbish Research Team is publicly disclosing a vulnerability in Cinegy Cine…

VULNFull Disclosure2 months ago

Security advisory: Pre-authentication RCE in Wyn Enterprise 9.1.00145.0 (Mescius (GrapeCity))

Posted by disclosure via Fulldisclosure on Aug 17 0day Rubbish Research Team is publicly disclosing a vulnerability in Wyn Enterpr…

VULNFull Disclosure2 months ago

Security advisory: Pre-authentication RCE (default credentials) in ObjectDB 2.9.5 server mode (ObjectDB Software)

Posted by disclosure via Fulldisclosure on Aug 17 0day Rubbish Research Team is publicly disclosing a vulnerability in ObjectDB 2.…

VULNFull Disclosure2 months ago

Security advisory: Pre-authentication RCE in nanoDLP stable build #10729 (Nano3Dtech)

Posted by disclosure via Fulldisclosure on Aug 17 0day Rubbish Research Team is publicly disclosing a vulnerability in nanoDLP sta…

VULNFull Disclosure2 months ago

Security advisory: Pre-authentication SYSTEM RCE in MAPS SCADA 4.0.5.5 (Adroit Technologies)

Posted by disclosure via Fulldisclosure on Aug 17 0day Rubbish Research Team is publicly disclosing a vulnerability in MAPS SCADA…

VULNFull Disclosure2 months ago

Security advisory: Pre-authentication RCE in Confluent Platform (ksqlDB) 7.9.1-ce (Confluent, Inc.)

Posted by disclosure via Fulldisclosure on Aug 17 0day Rubbish Research Team is publicly disclosing a vulnerability in Confluent P…

VULNFull Disclosure2 months ago

Security advisory: Pre-authentication SYSTEM RCE in iMonnit Express 4.0.5.5 (Monnit / iMonnit)

Posted by disclosure via Fulldisclosure on Aug 17 0day Rubbish Research Team is publicly disclosing a vulnerability in iMonnit Exp…

VULNFull Disclosure2 months ago

Security advisory: Pre-authentication RCE in Ontotext GraphDB 11.4.3 Free edition (Ontotext / Graphwise)

Posted by disclosure via Fulldisclosure on Aug 17 0day Rubbish Research Team is publicly disclosing a vulnerability in Ontotext Gr…

VULNhighFull Disclosure2 months ago

Re: Security advisory: multiple vulnerabilities including Default-credential RCE, Pre-authentication root RCE in atvise SCADA 3.13.0 (atvise GmbH / Bachmann Visutec)

Posted by LOMOSITS.Daniel via Fulldisclosure on Aug 17 Reference: https://seclists.org/fulldisclosure/2026/Aug/5 I tested both vu…

VULNRecorded Future2 months ago

CopyCop Targets AI Investment in Armenia

The Russian influence network CopyCop is targeting Western-backed AI and infrastructure projects in Armenia, including the Firebir…

VULNExploit-DB2 months ago

[remote] PCMan 2.0.7 - Buffer Overflow

PCMan 2.0.7 - Buffer Overflow

VULNExploit-DB2 months ago

[dos] NanaZip 6.5 - DoS

NanaZip 6.5 - DoS

VULNExploit-DB2 months ago

[webapps] flyto-core 2.26.7 - Arbitrary File Write

flyto-core 2.26.7 - Arbitrary File Write

VULNExploit-DB2 months ago

[webapps] Nodemailer 9.0.0 - File Read/ SSRF

Nodemailer 9.0.0 - File Read/ SSRF

VULNExploit-DB2 months ago

[webapps] Linuxfabrik monitoring_plugins_6.0.0 - SSRF

Linuxfabrik monitoring_plugins_6.0.0 - SSRF

VULNRecorded Future2 months ago

PurpleDelta's Fraudulent Employment Operations

Learn how North Korean IT worker threat cluster "PurpleDelta" uses AI-generated personas, sophisticated tradecraft, and custom Cha…

VULNFull Disclosure2 months ago

APPLE-SA-08-17-2026-2 iOS 18.7.10 and iPadOS 18.7.10

Posted by Apple Product Security via Fulldisclosure on Aug 17 APPLE-SA-08-17-2026-2 iOS 18.7.10 and iPadOS 18.7.10 https://support…

VULNCheck Point Research2 months ago

17th August – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 17th August, please download our Threat Intelligence Bulletin. TOP AT…

VULNExploit-DB2 months ago

[dos] NanaZip 6.5 - DoS

NanaZip 6.5 - DoS

VULNExploit-DB2 months ago

[webapps] flyto_core 2.26.7 - Server-Side Request Forgery

flyto_core 2.26.7 - Server-Side Request Forgery

VULNExploit-DB2 months ago

[webapps] Probo 0.222.2 - IDOR

Probo 0.222.2 - IDOR

VULNExploit-DB2 months ago

[webapps] webpack_devserver 5.2.5 - CSRF

webpack_devserver 5.2.5 - CSRF

VULNExploit-DB2 months ago

[remote] phpSysInfo 3.4.5 - IP Allowlist Bypass

phpSysInfo 3.4.5 - IP Allowlist Bypass

VULNExploit-DB2 months ago

[dos] Nmap 7.99 - Extension Header Integer Underflow

Nmap 7.99 - Extension Header Integer Underflow

VULNExploit-DB2 months ago

[webapps] Duplicati 2.2.0.3 - JWT Signing Key Leak

Duplicati 2.2.0.3 - JWT Signing Key Leak

VULNExploit-DB2 months ago

[webapps] Joomla JCE_2.9.15 - Remote Code Execution

Joomla JCE_2.9.15 - Remote Code Execution

VULNExploit-DB2 months ago

[remote] ipTIME A3004T - Remote Code Execution

ipTIME A3004T - Remote Code Execution

VULNExploit-DB2 months ago

[remote] D-Link DNS_340L - OS Command Injection

D-Link DNS_340L - OS Command Injection