Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

VULNhighCVE-2026-150139.8 CRITICALFull Disclosure3 months ago

CVE-2026-15013 – miniOrange SAML SSO <= 5.4.3 Unauthenticated Authentication Bypass (PoC)

Posted by Öner Efe Güngör on Aug 06 Hello Full Disclosure, I'd like to share an independent lab Proof-of-Concept for CVE-2026-150…

VULNhighFull Disclosure3 months ago

[KIS-2026-16] Telenia Software TVox <= 26.5.3 (nice) Local Privilege Escalation Vulnerability

Posted by Egidio Romano on Aug 06 ------------------------------------------------------------------------------- https://www.tele…

VULNhighFull Disclosure3 months ago

[KIS-2026-15] Telenia Software TVox <= 26.5.3 (action_audio.php) OS Command Injection Vulnerability

Posted by Egidio Romano on Aug 06 ------------------------------------------------------------------------------------- https://ww…

VULNhighFull Disclosure3 months ago

[KIS-2026-14] Telenia Software TVox <= 26.5.3 (set_env.php) Authentication Bypass Vulnerability

Posted by Egidio Romano on Aug 06 --------------------------------------------------------------------------------- https://www.te…

VULNhighFull Disclosure3 months ago

[KIS-2026-13] vBulletin <= 6.2.1 (runMaths) Remote Code Execution Vulnerability

Posted by Egidio Romano on Aug 06 ----------------------------------------------------------------- https://www.vbulletin.com [-]…

VULNFull Disclosure3 months ago

[SYSS-2026-050]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)

Posted by Matthias Deeg via Fulldisclosure on Aug 06 Advisory ID: SYSS-2026-050 Product: DCMTK (DI…

VULNFull Disclosure3 months ago

[SYSS-2026-049]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)

Posted by Matthias Deeg via Fulldisclosure on Aug 06 Advisory ID: SYSS-2026-049 Product: DCMTK (DI…

VULNFull Disclosure3 months ago

[SYSS-2026-048]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)

Posted by Matthias Deeg via Fulldisclosure on Aug 06 Advisory ID: SYSS-2026-048 Product: DCMTK (DI…

VULNFull Disclosure3 months ago

[SYSS-2026-047]: DICOM Toolkit (DCMTK) - Path traversal (CWE-22)

Posted by Matthias Deeg via Fulldisclosure on Aug 06 Advisory ID: SYSS-2026-047 Product: DCMTK (DI…

VULNFull Disclosure3 months ago

[SYSS-2026-046]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)

Posted by Matthias Deeg via Fulldisclosure on Aug 06 Advisory ID: SYSS-2026-046 Product: DCMTK (DI…

VULNFull Disclosure3 months ago

APPLE-SA-07-27-2026-8 Safari 26.6

Posted by Apple Product Security via Fulldisclosure on Aug 06 APPLE-SA-07-27-2026-8 Safari 26.6 https://support.apple.com/en-us/12…

VULNFull Disclosure3 months ago

APPLE-SA-07-27-2026-7 visionOS 26.6

Posted by Apple Product Security via Fulldisclosure on Aug 06 APPLE-SA-07-27-2026-7 visionOS 26.6 https://support.apple.com/en-us/…

VULNFull Disclosure3 months ago

APPLE-SA-07-27-2026-6 watchOS 26.6

Posted by Apple Product Security via Fulldisclosure on Aug 06 APPLE-SA-07-27-2026-6 watchOS 26.6 https://support.apple.com/en-us/1…

VULNPalo Alto Unit 423 months ago

Token Jacking: Cybercriminals Could Be Stealing Your AI Resources

Discover how attackers hijack AI tokens to fuel gray market transfer stations by stealing developer API keys. The post Token Jacki…

VULNRecorded Future3 months ago

Emerging Threats to Neurotechnology

Explore the evolving security landscape of neurotechnology, including risks like IP theft, data extortion, and regulatory challeng…

VULNMicrosoft Security3 months ago

Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)

Learn why KuppingerCole named Microsoft a Leader in its Leadership Compass: Cloud Native Application Protection Platforms report.…

VULNMicrosoft Security3 months ago

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gat…

VULNcriticalZero Day Initiative3 months ago

ZDI-26-524: (0Day) PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information and modify configuration on affected instal…

VULNcriticalZero Day Initiative3 months ago

ZDI-26-525: (0Day) PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Au…

VULNcriticalZero Day Initiative3 months ago

ZDI-26-526: (0Day) PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Au…

VULNRecorded Future3 months ago

Hype vs. Reality: What the Hugging Face Incident Means for AI Safety

Discover the security lessons from the recent incident where autonomous AI agents breached Hugging Face infrastructure.

VULNMicrosoft Security3 months ago

ChainDrop supply chain compromise: Anatomy of a self-propagating worm

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems by rep…

VULNMicrosoft Security3 months ago

Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps

Microsoft expands its Zero Trust for AI strategy to enhance security for AI and DevSecOps environments with new tools and guidance…

VULNMicrosoft Security3 months ago

128 Seconds to disruption: Microsoft Defender stops ransomware at QNET

Microsoft Defender automatically isolated a compromised QNET endpoint in 128 seconds, stopping a multi-stage attack before the pay…

VULNcriticalPalo Alto Unit 423 months ago

The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software

Frontier AI is reshaping vulnerability discovery. Learn how our NOVA system found 14,000+ unknown vulnerabilities across the open-…

VULNhighPalo Alto Unit 423 months ago

Almost Half of Malware Samples Communicate Direct to IP

Nearly half of C2 malware bypasses DNS by connecting directly to IP addresses. Zero trust IP enforcement secures networks against…

VULNCheck Point Research3 months ago

3rd August – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 27th July, please download our Threat Intelligence Bulletin. TOP ATTA…

VULNPalo Alto Unit 423 months ago

Pass the Passkey: A Novel Attack Surface in Passwordless Authentication

Explore how passkey implementation gaps undermine security when relying parties fail to validate the User Verified flag, reducing…

VULNRecorded Future3 months ago

8 Ways AI is Changing Threat Intelligence

Explore eight key ways that AI is reshaping the threat intelligence landscape, from creating speed and stealth advantages for adve…

VULNhighMicrosoft Security3 months ago

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals of hos…

Vulnerability Alerts

CVE-2026-15013 – miniOrange SAML SSO <= 5.4.3 Unauthenticated Authentication Bypass (PoC)

[KIS-2026-16] Telenia Software TVox <= 26.5.3 (nice) Local Privilege Escalation Vulnerability

[KIS-2026-15] Telenia Software TVox <= 26.5.3 (action_audio.php) OS Command Injection Vulnerability

[KIS-2026-14] Telenia Software TVox <= 26.5.3 (set_env.php) Authentication Bypass Vulnerability

[KIS-2026-13] vBulletin <= 6.2.1 (runMaths) Remote Code Execution Vulnerability

[SYSS-2026-050]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)

[SYSS-2026-049]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)

[SYSS-2026-048]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)

[SYSS-2026-047]: DICOM Toolkit (DCMTK) - Path traversal (CWE-22)

[SYSS-2026-046]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)

APPLE-SA-07-27-2026-8 Safari 26.6

APPLE-SA-07-27-2026-7 visionOS 26.6

APPLE-SA-07-27-2026-6 watchOS 26.6

Token Jacking: Cybercriminals Could Be Stealing Your AI Resources

Emerging Threats to Neurotechnology

​​Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

ZDI-26-524: (0Day) PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability

ZDI-26-525: (0Day) PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability

ZDI-26-526: (0Day) PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability

Hype vs. Reality: What the Hugging Face Incident Means for AI Safety

ChainDrop supply chain compromise: Anatomy of a self-propagating worm

Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps

128 Seconds to disruption: Microsoft Defender stops ransomware at QNET

The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software

Almost Half of Malware Samples Communicate Direct to IP

3rd August – Threat Intelligence Report

Pass the Passkey: A Novel Attack Surface in Passwordless Authentication

8 Ways AI is Changing Threat Intelligence

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)