Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,023 articles

VULNExploit-DB7 days ago

[webapps] Ghost_CMS 6.19.0 - Remote Code Execution

Ghost_CMS 6.19.0 - Remote Code Execution

VULNExploit-DB7 days ago

[webapps] Langflow 1.10.0 - RCE

Langflow 1.10.0 - RCE

VULNhighExploit-DB7 days ago

[hardware] Fullhan FH8626V100 - Multiple Vulnerabilities

Fullhan FH8626V100 - Multiple Vulnerabilities

VULNExploit-DB7 days ago

[webapps] Marimo 0.20.4 - RCE

Marimo 0.20.4 - RCE

VULNMicrosoft Security7 days ago

Counterfeit installers to system compromise: Tracking a deceptive software download campaign

An active campaign is impersonating legitimate software vendors to deliver malware through look-alike download pages and regenerat…

VULNMicrosoft Security8 days ago

Cybersecurity IR Workshop: The workshop you shouldn’t miss

Cyber resilience starts before a crisis. Gain practical insights from DART to strengthen readiness and response. The post Cybersec…

VULNExploit-DB8 days ago

[webapps] Wolf CMS 0.8.3.1 - RCE v

Wolf CMS 0.8.3.1 - RCE v

VULNExploit-DB8 days ago

[webapps] Payload CMS 3.72.0 - Blind SQL Injection

Payload CMS 3.72.0 - Blind SQL Injection

VULNExploit-DB8 days ago

[webapps] Bludit CMS - Stored XSS

Bludit CMS - Stored XSS

VULNExploit-DB8 days ago

[webapps] Grav CMS 2.0.7 - RCE

Grav CMS 2.0.7 - RCE

VULNExploit-DB8 days ago

[webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass

miniOrange 5.4.3 - Unauthenticated Auth Bypass

VULNExploit-DB8 days ago

[webapps] EasyAppointments 1.5.1 - Blind SQL Injection

EasyAppointments 1.5.1 - Blind SQL Injection

VULNRecorded Future8 days ago

The Agentic SOC – From AI Theater to Real Defense

Experts from Recorded Future and Accenture offer perspectives on navigating the path to becoming an agentic SOC. Find out how to p…

VULNCheck Point Research9 days ago

Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Research by: hasherezade Key Points Introduction JSCeal is a stealer delivered as compiled V8 bytecode (.jsc) and executed by a bu…

VULNCheck Point Research9 days ago

31th August – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 31st August, please download our Threat Intelligence Bulletin. TOP AT…

VULNhighPalo Alto Unit 429 days ago

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Learn how the Spring Ring campaign abuses Microsoft Teams and voice phishing to deploy malware and target enterprise domain contro…

VULNcriticalZero Day Initiative9 days ago

ZDI-26-615: (0Day) pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker…

VULNcriticalZero Day Initiative9 days ago

ZDI-26-614: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User int…

VULNcriticalZero Day Initiative9 days ago

ZDI-26-613: (0Day) pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User int…

VULNcriticalZero Day Initiative9 days ago

ZDI-26-612: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User int…

VULNcriticalZero Day Initiative9 days ago

ZDI-26-611: (0Day) pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User int…

VULNExploit-DB9 days ago

[webapps] CubeCart 6.7.4 - SQL injection

CubeCart 6.7.4 - SQL injection

VULNExploit-DB9 days ago

[webapps] CubeCart 6.7.4 - SQL

CubeCart 6.7.4 - SQL

VULNExploit-DB9 days ago

[webapps] CubeCart 6.7.4 - Stored XSS

CubeCart 6.7.4 - Stored XSS

VULNExploit-DB9 days ago

[webapps] CubeCart 6.7.4 - Cross-Site Scripting

CubeCart 6.7.4 - Cross-Site Scripting

VULNExploit-DB9 days ago

[webapps] Linksys E1200_2.0.04 - Unauthenticated OS Command Injection

Linksys E1200_2.0.04 - Unauthenticated OS Command Injection

VULNExploit-DB9 days ago

[webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution

Langflow 1.8.4 - Path Traversal to Remote Code Execution

VULNExploit-DB9 days ago

[webapps] C-MOR 6.0104 - Directory Traversal

C-MOR 6.0104 - Directory Traversal

VULNExploit-DB9 days ago

[webapps] C-MOR 6.0104 - Cross-Site Scripting (XSS)

C-MOR 6.0104 - Cross-Site Scripting (XSS)

VULNhighFull Disclosure10 days ago

CyberDanube Security Research 20260611-0 | Multiple Denial of Service Vulnerabilities in Dahua IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC Camera Series

Posted by Thomas Weber | CyberDanube via Fulldisclosure on Aug 29 CyberDanube Security Research 20260611-0 https://www.dahuasecuri…