Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

666 articles

Protecting Microsoft at AI speed: How SFI proactively hardens our cloud

At Microsoft we encompass these security requirements, along with threat knowledge, and operational frameworks in our Secure Futur…

VULNcriticalZero Day Initiative18 days ago

ZDI-26-403: (0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentica…

VULNcriticalZero Day Initiative18 days ago

ZDI-26-402: (0Day) Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An attack…

VULNcriticalZero Day Initiative18 days ago

ZDI-26-401: (0Day) AnyDesk Support Information Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacke…

VULNcriticalZero Day Initiative18 days ago

ZDI-26-400: (0Day) AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacke…

VULNcriticalZero Day Initiative18 days ago

ZDI-26-399: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi…

VULNcriticalZero Day Initiative18 days ago

ZDI-26-398: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi…

VULNExploit-DB18 days ago

[webapps] Krayin CRM v2.2.x - Authenticated Remote Code Execution

Krayin CRM v2.2.x - Authenticated Remote Code Execution

VULNExploit-DB18 days ago

[webapps] Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure

Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure

VULNExploit-DB18 days ago

[webapps] Langflow 1.9.0 - RCE

Langflow 1.9.0 - RCE

VULNExploit-DB18 days ago

[webapps] Joomla Page Builder CK 3.5.10 - Arbitrary File Upload

Joomla Page Builder CK 3.5.10 - Arbitrary File Upload

VULNRecorded Future18 days ago

The Threat Isn’t the Frontier Model

The real AI threat isn't frontier models. It's cheap local models getting easier to run. Here's why CISOs should build defensive a…

VULNPalo Alto Unit 4218 days ago

Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation

A cybercrime campaign combined a loader-as-a-service framework and DLL sideloading via a Go-compiled fake MpClient.dll, a novel ev…

VULNhighCVE-2026-53582Full Disclosure19 days ago

OPNsense XPATH Injection (CVE-2026-53582)

Posted by evan on Jul 06 SUMMARY: a stored XPATH injection allows any user with just ca https://github.com/opnsense/core/security/…

VULNFull Disclosure19 days ago

SCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+

Posted by Jan Hüber via Fulldisclosure on Jul 06 Authentication Bypass for SafeLine SL6 and SL6+ =================================…

VULNExploit-DB19 days ago

[webapps] Discuz! X5.0 - Authentication Bypass

Discuz! X5.0 - Authentication Bypass

VULNExploit-DB19 days ago

[webapps] Tenable Nessus 10.12.1 - SQL Injection

Tenable Nessus 10.12.1 - SQL Injection

VULNExploit-DB19 days ago

[webapps] WordPress Bricks Builder Theme - RCE

WordPress Bricks Builder Theme - RCE

VULNhighExploit-DB19 days ago

[remote] iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter

iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter

VULNExploit-DB19 days ago

[webapps] Flowise 3.1.3 - arbitrary code execution

Flowise 3.1.3 - arbitrary code execution

VULNExploit-DB19 days ago

[remote] Hydra - Stack Buffer Overflow

Hydra - Stack Buffer Overflow

VULNExploit-DB19 days ago

[webapps] MCPJam Inspector - Remote Code Execution

MCPJam Inspector - Remote Code Execution

VULNExploit-DB19 days ago

[local] ProtonVPN v4.4.1 - Unquoted Service Path

ProtonVPN v4.4.1 - Unquoted Service Path

VULNMicrosoft Security19 days ago

5 insights from Frost & Sullivan’s 2025 Frost Radar™ for Cloud Security Posture Management

Read five key learnings from the Frost & Sullivan 2025 Frost Radar™ for CSPM to learn how CSPM is evolving from point-in-time comp…

VULNCheck Point Research19 days ago

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

Key Points Introduction Since early 2026, Check Point Research (CPR) has tracked a new modular command-and-control framework used…

VULNCheck Point Research19 days ago

6th July – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 6th July, please download our Threat Intelligence Bulletin. TOP ATTAC…

VULNExploit-DB20 days ago

[webapps] KNX visualisering - Broken Access Control

KNX visualisering - Broken Access Control

VULNExploit-DB20 days ago

[local] Windows Defender (MsMpEng.exe) - Race Condition

Windows Defender (MsMpEng.exe) - Race Condition

VULNExploit-DB20 days ago

[webapps] WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS)

WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS)

VULNExploit-DB20 days ago

[webapps] Joomla Extension 4.1.4 - PHP Object injection

Joomla Extension 4.1.4 - PHP Object injection