Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

361 articles

VULNExploit-DB3 days ago

[webapps] OpenEMR 7.0.2 - Arbitrary File Read

OpenEMR 7.0.2 - Arbitrary File Read

VULNMandiant5 days ago

Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms

Written by: Chad Reams, Tufail Ahmed, Keith Knapp, Ashley Frazer, Tyler McLellan Introduction From January through May 2026, Ma…

VULNhighFull Disclosure6 days ago

[REVIVE-SA-2026-002] Revive Adserver Vulnerabilities

Posted by Matteo Beccati on Jun 04 ======================================================================== https://www.revive-ads…

VULNExploit-DB6 days ago

[webapps] WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection

WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection

VULNhighZero Day Initiative7 days ago

ZDI-26-330: (Pwn2Own) Microsoft Edge Navigation Handling Universal Cross-Site Scripting Vulnerability

This vulnerability allows remote attackers to execute arbitrary cross-origin script on affected installations of Microsoft Edge. U…

VULNhighZero Day Initiative7 days ago

ZDI-26-329: (Pwn2Own) Microsoft Edge Origin Validation Error Security Bypass Vulnerability

This vulnerability allows remote attackers to access restricted functionality on affected installations of Microsoft Edge. User in…

VULNhighZero Day Initiative7 days ago

ZDI-26-328: ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of ASUS Business Manager. An attacker m…

VULNhighZero Day Initiative7 days ago

ZDI-26-331: (Pwn2Own) Microsoft Edge Feedback Log File Handling Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction…

VULNhighCheck Point Research7 days ago

Impersonation, Click Hijacking, and TDS: Inside a Malware Distribution Ecosystem

Research by: Alexey Bukhteyev Key Takeaways Introduction When we search Google for a popular piece of software, we usually click t…

VULNhighZero Day Initiative8 days ago

ZDI-26-327: Docker Desktop grpcfuse Kernel Module Uncontrolled Recursion Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Docker Desktop. An…

VULNPalo Alto Unit 428 days ago

The npm Threat Landscape: Attack Surface and Mitigations (Updated June 2)

Unit 42 analyzes npm supply chain evolution post-Shai Hulud. Discover wormable malware, CI/CD persistence, multi-stage attacks and…

VULNhighPalo Alto Unit 428 days ago

Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor

Operation FlutterBridge is a malvertising campaign targeting macOS users. It distributed the new backdoor FlutterShell, built usin…

VULNCheck Point Research9 days ago

1st June – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 1st June, please download our Threat Intelligence Bulletin. TOP ATTAC…

VULNhighFull Disclosure10 days ago

CyberDanube Security Research 20260528-0 | Multiple Vulnerabilities in Multiple Vulnerabilities in Mennekes Amtron Series

Posted by Thomas Weber | CyberDanube via Fulldisclosure on May 31 CyberDanube Security Research 20260528-0 https://www.mennekes.at…

VULNhighFull Disclosure10 days ago

bmcweb (OpenBMC web server): four vulnerabilities — two unfixed, GHSA without a CVE

Posted by binreaper via Fulldisclosure on May 31 Hi all, https://binreaper.pages.dev/posts/2026-05-27-bmcweb-disclosure/ ## Why b…

VULNExploit-DB10 days ago

[webapps] Drupal Core 10.5.5 - Error-Based SQL Injection

Drupal Core 10.5.5 - Error-Based SQL Injection

VULNExploit-DB10 days ago

[webapps] WordPress OrderConvo 14 - Path Traversal

WordPress OrderConvo 14 - Path Traversal

VULNExploit-DB12 days ago

[webapps] YAMCS yamcs-core 5.12.7 - No Rate Limiting

YAMCS yamcs-core 5.12.7 - No Rate Limiting

VULNExploit-DB12 days ago

[webapps] YAMCS yamcs-core 5.12.7 - User Enumeration

YAMCS yamcs-core 5.12.7 - User Enumeration

VULNExploit-DB12 days ago

[webapps] YAMCS yamcs-core 5.12.7 - LDAP Injection

YAMCS yamcs-core 5.12.7 - LDAP Injection

VULNExploit-DB12 days ago

[remote] Notepad++ 8.9.6 - Arbitrary Code Execution

Notepad++ 8.9.6 - Arbitrary Code Execution

VULNExploit-DB13 days ago

[remote] Microsoft - NTLMv2 Hash Capture

Microsoft - NTLMv2 Hash Capture

VULNExploit-DB13 days ago

[webapps] MikroORM 7.0.13 - SQL Injection

MikroORM 7.0.13 - SQL Injection

VULNExploit-DB13 days ago

[webapps] Prodigy Commerce 3.3.0 - Local File Inclusion

Prodigy Commerce 3.3.0 - Local File Inclusion

VULNExploit-DB13 days ago

[webapps] Langflow 1.3.0 - Remote Code Execution

Langflow 1.3.0 - Remote Code Execution

VULNExploit-DB13 days ago

[webapps] Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution

Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution

VULNExploit-DB13 days ago

[local] ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion

ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion

VULNExploit-DB13 days ago

[local] ZTE Routers - Unauthenticated Denial of Service

ZTE Routers - Unauthenticated Denial of Service

VULNExploit-DB13 days ago

[local] ZTE ZXHN H188A V6 - Authentication Bypass

ZTE ZXHN H188A V6 - Authentication Bypass

VULNExploit-DB13 days ago

[local] ZTE H298A / H108N - Unauthenticated Credential Exposure

ZTE H298A / H108N - Unauthenticated Credential Exposure