Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

VULNhighCVE-2026-35178.4 HIGHZero Day Initiative5 months ago

ZDI-26-319: Progress Software Kemp LoadMaster addcountry Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaste…

VULNhighCVE-2026-35188.4 HIGHZero Day Initiative5 months ago

ZDI-26-318: Progress Software Kemp LoadMaster ssodomain_killsession Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaste…

VULNExploit-DB5 months ago

[webapps] Cockpit 359 - RCE

Cockpit 359 - RCE

VULNExploit-DB5 months ago

[webapps] FUXA 1.2.9 - RCE

FUXA 1.2.9 - RCE

VULNExploit-DB5 months ago

[webapps] solaredge - (CSRF-OOB-Injection)

solaredge - (CSRF-OOB-Injection)

VULNhighRecorded Future5 months ago

The Vulnerability Flood Is Now a Board Conversation. Here's How to Lead It.

Boards are asking about AI-driven vulnerability discovery. The leaders who answer that question well will come out with more credi…

VULNExploit-DB5 months ago

[local] Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path

Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path

VULNExploit-DB5 months ago

[webapps] BookStack 25.12.1 - Denial of Service

BookStack 25.12.1 - Denial of Service

VULNPalo Alto Unit 425 months ago

Tracking TamperedChef Clusters via Certificate and Code Reuse

Unit 42 analyzes TamperedChef malware clusters that use trojanized productivity apps and malvertising to deliver stealthy payloads…

VULNhighRecorded Future5 months ago

At Mythos Speed: A Defender's Playbook for the AI Vulnerability Surge in 2026

Frontier AI models like Mythos are making vulnerability discovery fast and cheap. Here's how defenders use threat intelligence and…

VULNCheck Point Research5 months ago

18th May – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 18th May, please download our Threat Intelligence Bulletin. TOP ATTAC…

VULNFull Disclosure5 months ago

APPLE-SA-05-13-2026-1 Safari 26.5

Posted by Apple Product Security via Fulldisclosure on May 17 APPLE-SA-05-13-2026-1 Safari 26.5 https://support.apple.com/en-us/12…

VULNFull Disclosure5 months ago

APPLE-SA-05-11-2026-11 visionOS 26.5

Posted by Apple Product Security via Fulldisclosure on May 17 APPLE-SA-05-11-2026-11 visionOS 26.5 https://support.apple.com/en-us…

VULNFull Disclosure5 months ago

APPLE-SA-05-11-2026-10 watchOS 26.5

Posted by Apple Product Security via Fulldisclosure on May 17 APPLE-SA-05-11-2026-10 watchOS 26.5 https://support.apple.com/en-us/…

VULNMandiant5 months ago

Welcome to BlackFile: Inside a Vishing Extortion Operation

Written by: Austin Larsen, Tyler McLellan, Genevieve Stark, Dan Ebreo Introduction Google Threat Intelligence Group (GTIG) has…

VULNPalo Alto Unit 425 months ago

Gremlin Stealer's Evolved Tactics: Hiding in Plain Sight With Resource Files

Unit 42 analyzes the evolution of Gremlin stealer. This variant uses advanced obfuscation, crypto clipping and session hijacking t…

VULNRecorded Future5 months ago

April 2026 CVE Landscape

In April 2026, Insikt Group® identified 37 high-impact vulnerabilities that should be prioritized for remediation, 35 of which had…

VULNExploit-DB5 months ago

[local] Windows Snipping Tool - NTLMv2 Hash Hijack

Windows Snipping Tool - NTLMv2 Hash Hijack

VULNExploit-DB5 months ago

[local] Remote Sunrise Helper for Windows 2026.14 - Remote Code Execution

Remote Sunrise Helper for Windows 2026.14 - Remote Code Execution

VULNExploit-DB5 months ago

[local] Remote Sunrise Helper for Windows 2026.14 - Unauthenticated File/Directory Listing

Remote Sunrise Helper for Windows 2026.14 - Unauthenticated File/Directory Listing

VULNSentinelOne Labs5 months ago

LABScon25 Replay | Breach Alpha: Trading on Cyber Fallout

Mick Baccio and Scott Roberts examine whether public breach signals and market timing models can turn cyber incidents into actiona…

VULNRecorded Future5 months ago

Beyond Acceleration and Automation: How AI + Intelligence Changes Cyber Defense

The real question in modern cyber defense isn't who has more technology. It's who uses their resources more efficiently. Here's ho…

VULNExploit-DB5 months ago

[webapps] WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI

WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI

VULNExploit-DB5 months ago

[webapps] Apache HertzBeat 1.8.0 - Remote Code Execution

Apache HertzBeat 1.8.0 - Remote Code Execution

VULNExploit-DB5 months ago

[webapps] ePati Antikor NGFW 2.0.1301 - Authentication Bypass

ePati Antikor NGFW 2.0.1301 - Authentication Bypass

VULNExploit-DB5 months ago

[webapps] PJPROJECT 2.16 - Heap Bufferoverflow

PJPROJECT 2.16 - Heap Bufferoverflow

VULNhighRecorded Future5 months ago

NIST NVD Enrichment Policy Change: Prioritizing Vulnerabilities with Attacker Behavior Signals

NVD enrichment now covers only 15–20% of CVEs. Learn how Recorded Future Vulnerability Intelligence prioritizes risk using real at…

VULNCheck Point Research6 months ago

Thus Spoke…The Gentlemen

Key Points Introduction The Gentlemen ransomware‑as‑a‑service (RaaS) operation is a relatively new group that emerged around mid‑2…

VULNhighCVE-2025-549579.8 CRITICALGoogle Project Zero6 months ago

A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens

We recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible to go from a zero-click context to…

VULNExploit-DB6 months ago

[webapps] glances 4.5.2 - command injection

glances 4.5.2 - command injection