Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

[0day-rubbish] Auerswald COMmander 6000 / 6000R 8.6D unauthenticated provisioning import zip-slip to root binary hijack and root code execution (9.8)

Posted by disclosure via Fulldisclosure on Oct 15 0day Rubbish Research Team is publicly disclosing a vulnerability in Auerswald C…

VULNcriticalFull Disclosure10 days ago

[0day-rubbish] Abyss Web Server X1 2.16.22.0 first-run console credential takeover to configuration-write log-as-CGI command execution (7.5)

Posted by disclosure via Fulldisclosure on Oct 15 0day Rubbish Research Team is publicly disclosing a vulnerability chain in Abyss…

VULNcriticalFull Disclosure10 days ago

SEC Consult SA-20261008-0 :: Multiple critical vulnerabilities in multiple TP-Link device series

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Oct 15 SEC Consult Vulnerability Lab Security Advisory ============…

VULNFull Disclosure10 days ago

1-click MMI/USSD execution in Android via CALL_PHONE and browser-reachable dialer deeplinks (ACR Phone / com.nll.cb)

Posted by Karan Saini on Oct 15 Android's CALL_PHONE permission, shown to users as "make and manage phone calls", also authorises…

VULNcriticalCVE-2026-1111057.0 HIGHZero Day Initiative10 days ago

ZDI-26-757: (0Day) Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Telegram. User interaction is re…

VULNhighCVE-2018-103889.8 CRITICALZero Day Initiative10 days ago

ZDI-26-776: QNAP TS-453E syslog log_message Format String Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-453E devices.…

VULNhighCVE-2026-1111839.8 CRITICALZero Day Initiative10 days ago

ZDI-26-775: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this…

VULNhighCVE-2026-111185Zero Day Initiative10 days ago

ZDI-26-774: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first o…

VULNhighCVE-2026-1111847.8 HIGHZero Day Initiative10 days ago

ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first ob…

VULNhighCVE-2026-1061704.9 MEDIUMZero Day Initiative10 days ago

ZDI-26-772: Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Fortinet FortiSand…

VULNhighCVE-2026-107656Zero Day Initiative10 days ago

ZDI-26-771: Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Fortinet FortiSandbox. Authentica…

VULNhighCVE-2026-1022577.2 HIGHZero Day Initiative10 days ago

ZDI-26-770: SonicWall Secure Mobile Access unzip Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SonicWall Secure Mobile Access.…

VULNhighCVE-2026-93524Zero Day Initiative10 days ago

ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker…

VULNhighCVE-2026-93523Zero Day Initiative10 days ago

ZDI-26-768: X.Org Server XInput ProcXIPassiveUngrabDevice Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-93522Zero Day Initiative10 days ago

ZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-93521Zero Day Initiative10 days ago

ZDI-26-766: X.Org Server RandR Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-93520Zero Day Initiative10 days ago

ZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-93519Zero Day Initiative10 days ago

ZDI-26-764: X.Org Server XFixes Pointer Barrier Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-93518Zero Day Initiative10 days ago

ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-93517Zero Day Initiative10 days ago

ZDI-26-762: X.Org Server GLX RenderLarge Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-93516Zero Day Initiative10 days ago

ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker…

VULNhighCVE-2026-93515Zero Day Initiative10 days ago

ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker…

VULNhighCVE-2026-88812Zero Day Initiative10 days ago

ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-93325Zero Day Initiative10 days ago

ZDI-26-758: Docker Buildx Filesystem Entitlements Protection Mechanism Failure Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Docker Buildx. User interaction…

VULNhighCVE-2026-956367.8 HIGHZero Day Initiative10 days ago

ZDI-26-778: Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interactio…

VULNhighCVE-2026-836617.8 HIGHZero Day Initiative10 days ago

ZDI-26-777: Adobe Photoshop AdobePDFL PDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interactio…

VULNRecorded Future11 days ago

Working in Boston at the World’s Largest Intelligence Company

Discover Recorded Future's new Boston headquarters at Post Office Square. Explore our journey from a Somerville laundromat, vibran…

VULNRecorded Future11 days ago

Russia Is Tightening Internet Controls, Leading to Operational Risks

Explore Russia's escalating internet restrictions, VPN bans, and outages, and understand the growing operational and surveillance…

VULNCVE-2024-475759.8 CRITICALPalo Alto Unit 4211 days ago

Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant

We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-res…

VULNhighMicrosoft Security11 days ago

The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime

Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tracked as St…