Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

363 articles

VULNExploit-DB27 days ago

[local] Windows Snipping Tool - NTLMv2 Hash Hijack

Windows Snipping Tool - NTLMv2 Hash Hijack

VULNExploit-DB28 days ago

[webapps] WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI

WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI

VULNExploit-DB28 days ago

[webapps] Apache HertzBeat 1.8.0 - Remote Code Execution

Apache HertzBeat 1.8.0 - Remote Code Execution

VULNExploit-DB28 days ago

[webapps] ePati Antikor NGFW 2.0.1301 - Authentication Bypass

ePati Antikor NGFW 2.0.1301 - Authentication Bypass

VULNExploit-DB28 days ago

[webapps] PJPROJECT 2.16 - Heap Bufferoverflow

PJPROJECT 2.16 - Heap Bufferoverflow

VULNCheck Point Research28 days ago

Thus Spoke…The Gentlemen

Key Points Introduction The Gentlemen ransomware‑as‑a‑service (RaaS) operation is a relatively new group that emerged around mid‑2…

VULNhighGoogle Project Zero29 days ago

A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens

We recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible to go from a zero-click context to…

VULNExploit-DB29 days ago

[webapps] Ninja Forms Uploads - Unauthenticated PHP File Upload

Ninja Forms Uploads - Unauthenticated PHP File Upload

VULNExploit-DB29 days ago

[webapps] glances 4.5.2 - command injection

glances 4.5.2 - command injection

VULNhighZero Day Initiative30 days ago

ZDI-26-309: Microsoft Windows Message Queueing Double Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows that run Message Q…

VULNhighZero Day Initiative30 days ago

ZDI-26-317: Siemens Simcenter Femap IPT File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User in…

VULNhighZero Day Initiative30 days ago

ZDI-26-315: Apple macOS USD Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction…

VULNhighZero Day Initiative30 days ago

ZDI-26-314: Apple macOS USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with th…

VULNhighZero Day Initiative30 days ago

ZDI-26-316: Siemens Simcenter Femap IPT File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User in…

VULNhighZero Day Initiative30 days ago

ZDI-26-310: Microsoft Windows splwow64 Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must…

VULNhighZero Day Initiative30 days ago

ZDI-26-313: Apple Safari Regular Expression Duplicate Named Groups Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction i…

VULNhighZero Day Initiative30 days ago

ZDI-26-308: Ivanti Endpoint Manager RemoteControlAuth Exposed Dangerous Method Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Ivanti Endpoint Manager.…

VULNhighZero Day Initiative30 days ago

ZDI-26-312: Apple Safari Web Inspector WebCore Style Resolver Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction i…

VULNhighZero Day Initiative30 days ago

ZDI-26-311: Apple macOS CoreSymbolication Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction…

VULNPalo Alto Unit 42about 1 month ago

Inside AD CS Escalation: Unpacking Advanced Misuse Techniques and Tools

Unit 42 analyzes AD CS exploitation through template misconfigurations and shadow credential misuse while offering behavioral dete…

VULNhighMandiantabout 1 month ago

GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access

Executive Summary Since our February 2026 report on AI-related threat activity, Google Threat Intelligence Group (GTIG) has contin…

VULNCheck Point Researchabout 1 month ago

11th May – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 11th May, please download our Threat Intelligence Bulletin. TOP ATTAC…

VULNCheck Point Researchabout 1 month ago

The State of Ransomware – Q1 2026

Key Findings Ransomware in Q1 2026: Consolidation at Scale During the first quarter of 2026, we monitored more than 70 active data…

VULNcriticalPalo Alto Unit 42about 1 month ago

Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution

Unit 42 details CVE-2026-0300, a buffer overflow vulnerability in the PAN-OS User-ID Authentication Portal. Read now for details.…

VULNPalo Alto Unit 42about 1 month ago

Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years

Copy Fail (CVE-2026-31431) is a critical Linux kernel LPE that allows stealthy root access. This flaw impacts millions of systems.…

VULNCheck Point Researchabout 1 month ago

4th May – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 4th May, please download our Threat Intelligence Bulletin. TOP ATTACK…

VULNPalo Alto Unit 42about 1 month ago

Essential Data Sources for Detection Beyond the Endpoint

Unit 42 highlights the need for a comprehensive security strategy that spans every IT zone. Explore the full details here. The pos…

VULNhighZero Day Initiativeabout 1 month ago

ZDI-26-307: FlowiseAI Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is not r…

VULNPalo Alto Unit 42about 1 month ago

That AI Extension Helping You Write Emails? It’s Reading Them First

Unit 42 uncovers high-risk AI browser extensions. Disguised as productivity tools, they steal data, intercept prompts, and exfiltr…

VULNhighwatchTowr Labsabout 1 month ago

The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)

Hello! Yes, it's all a disaster again! Let's get this party started: 0:00…