Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,024 articles

[0day-rubbish] Maian Gallery v2.1 Authenticated unrestricted file upload to PHP RCE (7.2)

Posted by disclosure via Fulldisclosure on Aug 26 0day Rubbish Research Team is publicly disclosing a vulnerability in Maian Galle…

VULNcriticalFull Disclosure14 days ago

[0day-rubbish] NCache Enterprise 5.3.6 (other versions with the same default-disabled security and handler logic are likely affected) Pre-authentication RCE (missing auth + attacker assembly load) (9.8)

Posted by disclosure via Fulldisclosure on Aug 26 0day Rubbish Research Team is publicly disclosing a vulnerability in NCache Ente…

VULNcriticalFull Disclosure14 days ago

[0day-rubbish] myDBR 7.5.4 (build 5454) (other versions with the same file-editor are likely affected) Authenticated RCE (admin file editor + default credentials) (8.8)

Posted by disclosure via Fulldisclosure on Aug 26 0day Rubbish Research Team is publicly disclosing a vulnerability in myDBR 7.5.4…

VULNcriticalFull Disclosure14 days ago

[0day-rubbish] Microsip 2026 (ASD data-service agent) 2026 Eval (other builds with the same backup-runner path handling are likely affected) Pre-authentication RCE (attacker-controlled binary path, LocalSystem) (9.8)

Posted by disclosure via Fulldisclosure on Aug 26 0day Rubbish Research Team is publicly disclosing a vulnerability in Microsip 20…

VULNcriticalCVE-2024-544487.2 HIGHFull Disclosure14 days ago

[0day-rubbish] LogicalDOC Enterprise Edition 9.3 (the incomplete CVE-2024-54448 fix suggests earlier 9.x versions are likely affected) Authenticated RCE (automation sandbox bypass + default credentials) (8.8)

Posted by disclosure via Fulldisclosure on Aug 26 0day Rubbish Research Team is publicly disclosing a vulnerability in LogicalDOC…

VULNcriticalFull Disclosure14 days ago

[0day-rubbish] CFEngine Enterprise Nova Hub 3.27.1 (other versions with the same generateScriptFromTemplates quoting are likely affected) Authenticated RCE (command injection via VCS settings, root) (8.8)

Posted by disclosure via Fulldisclosure on Aug 26 0day Rubbish Research Team is publicly disclosing a vulnerability in CFEngine En…

VULNcriticalFull Disclosure14 days ago

[0day-rubbish] Brekeke PBX 3.19.1.8 (other versions with the same Bean dispatch model are likely affected) Pre-authentication RCE (fail-open auth gate + reflection to exec) (9.8)

Posted by disclosure via Fulldisclosure on Aug 26 0day Rubbish Research Team is publicly disclosing a vulnerability in Brekeke PBX…

VULNhighCVE-2026-2007910.0 CRITICALFull Disclosure14 days ago

CVE-2026-20079 - Cisco Secure Firewall Management Center Authentication Bypass to Root RCE

Posted by Banks Tools on Aug 26 CVE-2026-20079 - Cisco Secure Firewall Management Center Authentication https://github.com/CyberAu…

VULNhighCVE-2026-78331Full Disclosure14 days ago

CVE-2026-78331 / CVE-2026-78332: Multiple Vulnerabilities in NethServer

Posted by Intilangelo, Andrea on Aug 26 Two stored XSS vulnerabilities have been disclosed in the NethServer WebTop module, affect…

VULNFull Disclosure14 days ago

NVIDIA Linux GPU driver: unprivileged Xid 31 MMU fault via undocumented peer-teardown ordering, no CVE (vendor: intended)

Posted by Abhinav Agarwal on Aug 26 NVIDIA Linux GPU driver - unprivileged Xid 31 copy-engine MMU fault during an NVLink peer tran…

VULNFull Disclosure14 days ago

NVIDIA Linux GPU driver: cross-UID GPU process telemetry via NVML, no CVE (vendor: expected behavior)

Posted by Abhinav Agarwal on Aug 26 NVIDIA Linux GPU driver - cross-UID GPU process telemetry disclosure via NVML ================…

VULNRecorded Future14 days ago

Recorded Future Launches AI Alert Filtering

AI Alert Filtering is now available. Powered by Recorded Future AI, it automates the first pass of filtering Alerts by relevance s…

VULNMicrosoft Security15 days ago

The patch window is collapsing: Why security needs a new control plane

Organizations need protection that operates in the gap between discovery and remediation. The post The patch window is collapsing:…

VULNhighPalo Alto Unit 4215 days ago

The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution

Explore Unit 42 research on AI-enabled malware. Learn how existing behavioral detection and endpoint analytics stop AI-authored co…

VULNhighCVE-2026-421678.1 HIGHExploit-DB15 days ago

[remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE

CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE

VULNRecorded Future15 days ago

Mexico’s Cybersecurity Plan 2025-2030: Turning Ambition Into Defense

Explore Mexico’s 2025–2030 Cybersecurity Plan. Learn about key threats, including ransomware, and the roadmap for building durable…

VULNCheck Point Research16 days ago

24th August – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 24th August, please download our Threat Intelligence Bulletin. TOP AT…

VULNhighCVE-2026-572427.8 HIGHZero Day Initiative16 days ago

ZDI-26-598: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNhighCVE-2026-572527.8 HIGHZero Day Initiative16 days ago

ZDI-26-597: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNhighCVE-2026-572536.1 MEDIUMZero Day Initiative16 days ago

ZDI-26-596: Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User i…

VULNhighCVE-2026-572547.8 HIGHZero Day Initiative16 days ago

ZDI-26-595: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNhighCVE-2026-647156.5 MEDIUMZero Day Initiative16 days ago

ZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction i…

VULNhighZero Day Initiative16 days ago

ZDI-26-609: Linux Kernel Net Scheduler Packet Classifier Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first…

VULNhighZero Day Initiative16 days ago

ZDI-26-608: Linux Kernel KVM IOAPIC Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first…

VULNhighZero Day Initiative16 days ago

ZDI-26-607: Microsoft Office HTML Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Office. User i…

VULNhighZero Day Initiative16 days ago

ZDI-26-606: Microsoft Windows Compatibility Appraiser Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must…

VULNhighCVE-2026-505086.5 MEDIUMZero Day Initiative16 days ago

ZDI-26-605: Microsoft Windows Localized Filenames Improper Input Validation NTLM Response Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Microsoft Windows. User interac…

VULNhighCVE-2026-131267.8 HIGHZero Day Initiative16 days ago

ZDI-26-604: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNhighCVE-2026-131277.8 HIGHZero Day Initiative16 days ago

ZDI-26-603: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNhighCVE-2026-131287.8 HIGHZero Day Initiative16 days ago

ZDI-26-602: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…