Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

362 articles

Multiple vulnerabilities in Sparx Pro Cloud Server and Enterprise Architect

Posted by Adamczyk Blazej on May 25 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Multiple vulnerabilities in Sparx…

VULNExploit-DB16 days ago

[webapps] Grav CMS 2.0.0-beta.2 - Remote Code Execution

Grav CMS 2.0.0-beta.2 - Remote Code Execution

VULNExploit-DB16 days ago

[webapps] Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service

Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service

VULNExploit-DB16 days ago

[hardware] D-Link DSL2600U - 'rom-0' Admin Password Disclosure

D-Link DSL2600U - 'rom-0' Admin Password Disclosure

VULNExploit-DB16 days ago

[webapps] Wordpress Temporary Login Plugin 1.0.0 - 'temp-login-token' Authentication Bypass to Account Takeover

Wordpress Temporary Login Plugin 1.0.0 - 'temp-login-token' Authentication Bypass to Account Takeover

VULNExploit-DB16 days ago

[webapps] cPanel - CRLF Injection

cPanel - CRLF Injection

VULNExploit-DB16 days ago

[local] Linux Kernel 6.8 - Local Privilege Escalation

Linux Kernel 6.8 - Local Privilege Escalation

VULNCheck Point Research16 days ago

25th May – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 25th May, please download our Threat Intelligence Bulletin. TOP ATTAC…

VULNhighMandiant16 days ago

Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability

Written by: Takahiro Sugiyama, Peter Revelant, Mathew Potaczek Introduction In late 2025, Mandiant responded to a security incid…

VULNhighMandiant16 days ago

2 PhaaS 2 Furious: The Evolution of Chinese-Language Phishing Services

While Russian-speaking threat actors have historically dominated the phishing-as-a-service (PhaaS) landscape, a rival ecosystem is…

VULNCheck Point Research19 days ago

Fast and Furious – Nimbus Manticore Operations During the Iranian Conflict

Key Findings Introduction During the recent geopolitical tensions in the Middle East, we reported on multiple Iran-nexus threat ac…

VULNPalo Alto Unit 4219 days ago

Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns

Unit 42 details Screening Serpens' use of AppDomainManager hijacking and new RAT variants to target tech and defense sectors in re…

VULNPalo Alto Unit 4219 days ago

Paved With Intent: ROADtools and Nation-State Tactics in the Cloud

Open-source framework ROADtools is being misused by threat actors for cloud intrusions. Learn how to identify its malicious use. T…

VULNhighZero Day Initiative21 days ago

ZDI-26-318: Progress Software Kemp LoadMaster ssodomain_killsession Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaste…

VULNhighZero Day Initiative21 days ago

ZDI-26-319: Progress Software Kemp LoadMaster addcountry Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaste…

VULNExploit-DB21 days ago

[webapps] solaredge - (CSRF-OOB-Injection)

solaredge - (CSRF-OOB-Injection)

VULNExploit-DB21 days ago

[local] Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path

Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path

VULNExploit-DB21 days ago

[webapps] BookStack 25.12.1 - Denial of Service

BookStack 25.12.1 - Denial of Service

VULNExploit-DB21 days ago

[webapps] Cockpit 359 - RCE

Cockpit 359 - RCE

VULNExploit-DB21 days ago

[webapps] FUXA 1.2.9 - RCE

FUXA 1.2.9 - RCE

VULNPalo Alto Unit 4221 days ago

Tracking TamperedChef Clusters via Certificate and Code Reuse

Unit 42 analyzes TamperedChef malware clusters that use trojanized productivity apps and malvertising to deliver stealthy payloads…

VULNCheck Point Research23 days ago

18th May – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 18th May, please download our Threat Intelligence Bulletin. TOP ATTAC…

VULNFull Disclosure24 days ago

APPLE-SA-05-13-2026-1 Safari 26.5

Posted by Apple Product Security via Fulldisclosure on May 17 APPLE-SA-05-13-2026-1 Safari 26.5 https://support.apple.com/en-us/12…

VULNFull Disclosure24 days ago

APPLE-SA-05-11-2026-11 visionOS 26.5

Posted by Apple Product Security via Fulldisclosure on May 17 APPLE-SA-05-11-2026-11 visionOS 26.5 https://support.apple.com/en-us…

VULNFull Disclosure24 days ago

APPLE-SA-05-11-2026-10 watchOS 26.5

Posted by Apple Product Security via Fulldisclosure on May 17 APPLE-SA-05-11-2026-10 watchOS 26.5 https://support.apple.com/en-us/…

VULNMandiant26 days ago

Welcome to BlackFile: Inside a Vishing Extortion Operation

Written by: Austin Larsen, Tyler McLellan, Genevieve Stark, Dan Ebreo Introduction Google Threat Intelligence Group (GTIG) has…

VULNPalo Alto Unit 4226 days ago

Gremlin Stealer's Evolved Tactics: Hiding in Plain Sight With Resource Files

Unit 42 analyzes the evolution of Gremlin stealer. This variant uses advanced obfuscation, crypto clipping and session hijacking t…

VULNExploit-DB27 days ago

[local] Remote Sunrise Helper for Windows 2026.14 - Unauthenticated File/Directory Listing

Remote Sunrise Helper for Windows 2026.14 - Unauthenticated File/Directory Listing

VULNExploit-DB27 days ago

[local] Remote Sunrise Helper for Windows 2026.14 - Remote Code Execution

Remote Sunrise Helper for Windows 2026.14 - Remote Code Execution

VULNExploit-DB27 days ago

[local] Windows Snipping Tool - NTLMv2 Hash Hijack

Windows Snipping Tool - NTLMv2 Hash Hijack