attack_FeedLIVE

Vulnerability Alerts

Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

361 articles

VULNExploit-DB13 days ago

[local] Linux Kernel - Local Privilege Escalation

Linux Kernel - Local Privilege Escalation

VULNExploit-DB13 days ago

[webapps] MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution

MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution

VULNExploit-DB13 days ago

[remote] Wing FTP Server 8.1.3 - Authenticated Remote Code Execution

Wing FTP Server 8.1.3 - Authenticated Remote Code Execution

VULNExploit-DB13 days ago

[webapps] CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)

CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)

VULNExploit-DB13 days ago

[remote] strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow

strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow

VULNExploit-DB13 days ago

[dos] strongSwan 5.9.13 - DoS

strongSwan 5.9.13 - DoS

VULNPalo Alto Unit 4213 days ago

2026 World Cup: Discussing The World’s Biggest Game’s Attack Surface

The 2026 World Cup presents major cyber risks from ransomware groups, state-aligned actors, and other groups targeting critical in…

VULNhighZero Day Initiative14 days ago

ZDI-26-326: TrendAI Vision One Security Agent Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. A…

VULNhighZero Day Initiative14 days ago

ZDI-26-325: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. A…

VULNhighZero Day Initiative14 days ago

ZDI-26-321: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. A…

VULNhighZero Day Initiative14 days ago

ZDI-26-324: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. A…

VULNhighZero Day Initiative14 days ago

ZDI-26-322: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. A…

VULNhighZero Day Initiative14 days ago

ZDI-26-320: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. A…

VULNhighZero Day Initiative14 days ago

ZDI-26-323: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. A…

VULNPalo Alto Unit 4214 days ago

Out of the Crypt: The Evolving Cyber Extortion Economy

Unit 42 explores trends in data theft and extortion, outlining key strategies for organizations as frontier AI models advance. The…

VULNExploit-DB15 days ago

[local] Linux Kernel - Local Privilege Escalation

Linux Kernel - Local Privilege Escalation

VULNExploit-DB15 days ago

[webapps] Casdoor 3.54.1 - Arbitrary File Write via Path Traversal

Casdoor 3.54.1 - Arbitrary File Write via Path Traversal

VULNExploit-DB15 days ago

[webapps] EspoCRM 9.3.3 - SSRF

EspoCRM 9.3.3 - SSRF

VULNExploit-DB15 days ago

[webapps] scramble - Remote Code Execution

scramble - Remote Code Execution

VULNExploit-DB15 days ago

[hardware] MeiG Smart FORGE_SLT711 - OS Command Injection

MeiG Smart FORGE_SLT711 - OS Command Injection

VULNExploit-DB15 days ago

[local] Realtek rtl819x - Local Privilege

Realtek rtl819x - Local Privilege

VULNExploit-DB15 days ago

[webapps] OpenCATS 0.9.7.4 - SQL Injection

OpenCATS 0.9.7.4 - SQL Injection

VULNCheck Point Research15 days ago

AI Threat Landscape Digest March-April 2026

Executive Summary During the March–April 2026 reporting period, AI use in offensive operations advanced from development and plann…

VULNFull Disclosure16 days ago

Re: Dovecot Security Advisory OXDC-2026-0002

Posted by Noel Butler via Fulldisclosure on May 25 So when is the fix for dovecot 2.3 source code due to be released? Since by yo…

VULNFull Disclosure16 days ago

SSRF in Anthropic mcp-server-fetch and Microsoft playwright-mcp — publicly disclosed via GitHub issues

Posted by outreach on May 25 -----BEGIN SECURITY ADVISORY----- Title: Server-Side Request Forgery (SSRF) in Anthropic mcp-server-…

VULNhighFull Disclosure16 days ago

[SECURITY ADVISORY] CVE-2021-21735 - ZTE ZXHN H168N V3.5 Unauthenticated Admin Credential Leak

Posted by m.nageh on May 25 -----BEGIN SECURITY ADVISORY----- Advisory ID: MONX-2021-001 CVE ID: CVE-2021-21735 Title:…

VULNhighFull Disclosure16 days ago

[SECURITY ADVISORY] CVE-2026-34474 - ZTE H298A/H108N Unauthenticated Admin Credential Exposure

Posted by m.nageh on May 25 -----BEGIN SECURITY ADVISORY----- Advisory ID: MONX-2026-003 CVE ID: CVE-2026-34474 Title:…

VULNhighFull Disclosure16 days ago

[SECURITY ADVISORY] CVE-2026-34472 - ZTE ZXHN H188A V6 Authentication Bypass via Pre-Login Wizard

Posted by m.nageh on May 25 -----BEGIN SECURITY ADVISORY----- Advisory ID: MONX-2026-002 CVE ID: CVE-2026-34472 Title:…

VULNhighFull Disclosure16 days ago

[SECURITY ADVISORY] CVE-2026-34473 - Unauthenticated DoS in 17+ ZTE Router Models (140K+ Devices)

Posted by m.nageh on May 25 -----BEGIN SECURITY ADVISORY----- Advisory ID: MONX-2026-001 CVE ID: CVE-2026-34473 Title:…

VULNhighFull Disclosure16 days ago

Multiple vulnerabilities in Sparx Pro Cloud Server and Enterprise Architect

Posted by Adamczyk Blazej on May 25 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Multiple vulnerabilities in Sparx…