Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

VULNExploit-DB4 months ago

[webapps] Langflow 1.9.0 - RCE

Langflow 1.9.0 - RCE

VULNExploit-DB4 months ago

[webapps] Krayin CRM v2.2.x - Authenticated Remote Code Execution

Krayin CRM v2.2.x - Authenticated Remote Code Execution

VULNPalo Alto Unit 424 months ago

Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation

A cybercrime campaign combined a loader-as-a-service framework and DLL sideloading via a Go-compiled fake MpClient.dll, a novel ev…

VULNhighCVE-2026-53582Full Disclosure4 months ago

OPNsense XPATH Injection (CVE-2026-53582)

Posted by evan on Jul 06 SUMMARY: a stored XPATH injection allows any user with just ca https://github.com/opnsense/core/security/…

VULNFull Disclosure4 months ago

SCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+

Posted by Jan Hüber via Fulldisclosure on Jul 06 Authentication Bypass for SafeLine SL6 and SL6+ =================================…

VULNExploit-DB4 months ago

[webapps] MCPJam Inspector - Remote Code Execution

MCPJam Inspector - Remote Code Execution

VULNExploit-DB4 months ago

[local] ProtonVPN v4.4.1 - Unquoted Service Path

ProtonVPN v4.4.1 - Unquoted Service Path

VULNExploit-DB4 months ago

[remote] Hydra - Stack Buffer Overflow

Hydra - Stack Buffer Overflow

VULNExploit-DB4 months ago

[webapps] Flowise 3.1.3 - arbitrary code execution

Flowise 3.1.3 - arbitrary code execution

VULNhighExploit-DB4 months ago

[remote] iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter

iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter

VULNExploit-DB4 months ago

[webapps] WordPress Bricks Builder Theme - RCE

WordPress Bricks Builder Theme - RCE

VULNExploit-DB4 months ago

[webapps] Tenable Nessus 10.12.1 - SQL Injection

Tenable Nessus 10.12.1 - SQL Injection

VULNExploit-DB4 months ago

[webapps] Discuz! X5.0 - Authentication Bypass

Discuz! X5.0 - Authentication Bypass

VULNMicrosoft Security4 months ago

5 insights from Frost & Sullivan’s 2025 Frost Radar™ for Cloud Security Posture Management

Read five key learnings from the Frost & Sullivan 2025 Frost Radar™ for CSPM to learn how CSPM is evolving from point-in-time comp…

VULNCheck Point Research4 months ago

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

Key Points Introduction Since early 2026, Check Point Research (CPR) has tracked a new modular command-and-control framework used…

VULNCheck Point Research4 months ago

6th July – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 6th July, please download our Threat Intelligence Bulletin. TOP ATTAC…

VULNExploit-DB4 months ago

[webapps] Joomla Extension 4.1.4 - PHP Object injection

Joomla Extension 4.1.4 - PHP Object injection

VULNExploit-DB4 months ago

[webapps] Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass

Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass

VULNExploit-DB4 months ago

[local] MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation

MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation

VULNExploit-DB4 months ago

[webapps] KeepInMind 0.8.4.2 - Stored XSS

KeepInMind 0.8.4.2 - Stored XSS

VULNExploit-DB4 months ago

[webapps] WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS)

WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS)

VULNExploit-DB4 months ago

[local] Windows Defender (MsMpEng.exe) - Race Condition

Windows Defender (MsMpEng.exe) - Race Condition

VULNExploit-DB4 months ago

[webapps] KNX visualisering - Broken Access Control

KNX visualisering - Broken Access Control

VULNPalo Alto Unit 424 months ago

How We Added WebAuthn to a Browser-Based RDP Client

A look inside the reverse-engineering journey of building the first RDP client outside of Windows to support WebAuthn redirection.…

VULNFull Disclosure4 months ago

Whistleblowersoftware.com: confidentiality and anonymity leakage to third parties

Posted by Red Nanaki via Fulldisclosure on Jul 02 Whistleblowersoftware.com: confidentiality and anonymity leakage to third partie…

VULNhighFull Disclosure4 months ago

OpenBlow Multiple Deanonymization Vulnerabilities

Posted by Red Nanaki via Fulldisclosure on Jul 02 OpenBlow Multiple Deanonymization Vulnerabilities Summary A production deploym…

VULNFull Disclosure4 months ago

Whistlelink: Site-access password exposed in web server access logs via GET query string

Posted by Red Nanaki via Fulldisclosure on Jul 02 Whistlelink: Site-access password exposed in web server access logs via GET quer…

VULNFull Disclosure4 months ago

APPLE-SA-06-29-2026-3 Safari 26.5.2

Posted by Apple Product Security via Fulldisclosure on Jul 02 APPLE-SA-06-29-2026-3 Safari 26.5.2 https://support.apple.com/en-us/…

VULNFull Disclosure4 months ago

APPLE-SA-06-29-2026-2 macOS Tahoe 26.5.2

Posted by Apple Product Security via Fulldisclosure on Jul 02 APPLE-SA-06-29-2026-2 macOS Tahoe 26.5.2 https://support.apple.com/e…

VULNFull Disclosure4 months ago

APPLE-SA-06-29-2026-1 iOS 26.5.2 and iPadOS 26.5.2

Posted by Apple Product Security via Fulldisclosure on Jul 02 APPLE-SA-06-29-2026-1 iOS 26.5.2 and iPadOS 26.5.2 https://support.a…