attack_FeedLIVE

Vulnerability Alerts

Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

666 articles

VULNExploit-DB20 days ago

[webapps] Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass

Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass

VULNExploit-DB20 days ago

[local] MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation

MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation

VULNExploit-DB20 days ago

[webapps] KeepInMind 0.8.4.2 - Stored XSS

KeepInMind 0.8.4.2 - Stored XSS

VULNPalo Alto Unit 4223 days ago

How We Added WebAuthn to a Browser-Based RDP Client

A look inside the reverse-engineering journey of building the first RDP client outside of Windows to support WebAuthn redirection.…

VULNFull Disclosure23 days ago

Whistleblowersoftware.com: confidentiality and anonymity leakage to third parties

Posted by Red Nanaki via Fulldisclosure on Jul 02 Whistleblowersoftware.com: confidentiality and anonymity leakage to third partie…

VULNhighFull Disclosure23 days ago

OpenBlow Multiple Deanonymization Vulnerabilities

Posted by Red Nanaki via Fulldisclosure on Jul 02 OpenBlow Multiple Deanonymization Vulnerabilities Summary A production deploym…

VULNFull Disclosure23 days ago

Whistlelink: Site-access password exposed in web server access logs via GET query string

Posted by Red Nanaki via Fulldisclosure on Jul 02 Whistlelink: Site-access password exposed in web server access logs via GET quer…

VULNFull Disclosure23 days ago

APPLE-SA-06-29-2026-3 Safari 26.5.2

Posted by Apple Product Security via Fulldisclosure on Jul 02 APPLE-SA-06-29-2026-3 Safari 26.5.2 https://support.apple.com/en-us/…

VULNFull Disclosure23 days ago

APPLE-SA-06-29-2026-2 macOS Tahoe 26.5.2

Posted by Apple Product Security via Fulldisclosure on Jul 02 APPLE-SA-06-29-2026-2 macOS Tahoe 26.5.2 https://support.apple.com/e…

VULNFull Disclosure23 days ago

APPLE-SA-06-29-2026-1 iOS 26.5.2 and iPadOS 26.5.2

Posted by Apple Product Security via Fulldisclosure on Jul 02 APPLE-SA-06-29-2026-1 iOS 26.5.2 and iPadOS 26.5.2 https://support.a…

VULNCVE-2026-568157.4 HIGHFull Disclosure23 days ago

pwnlift: symlink following and TOCTOU in privileged upload handler allow arbitrary file write as root

Posted by Greg via Fulldisclosure on Jul 02 1. Advisory information https://github.com/GregDurys/security-advisories GHSA: GHSA-2v…

VULNhighFull Disclosure23 days ago

[KIS-2026-12] Control Web Panel <= 0.9.8.1224 (userRes) SQL Injection Vulnerability

Posted by Egidio Romano on Jul 02 --------------------------------------------------------------------- https://control-webpanel.c…

VULNhighCVE-2026-584516.5 MEDIUMFull Disclosure23 days ago

[fulldis] CVE-2026-58451 - Horde Groupware IMP path traversal vuln

Posted by ㅤevan via Fulldisclosure on Jul 02 this is my first time sending to a mailing list so ive chosen something easy. here go…

VULNFull Disclosure23 days ago

Samsung Galaxy Buds – Zero-Click HFP/A2DP Takeover via L2CAP Session Preemption (Vendor Response: Working as Intended)

Posted by 490h3fqwomf via Fulldisclosure on Jul 02 Hello Full Disclosure, The following publicly available research describes a B…

VULNFull Disclosure23 days ago

Asterisk Security Release 23.4.1

Posted by Asterisk Development Team via Fulldisclosure on Jul 02 The Asterisk Development Team would like to announce security rel…

VULNFull Disclosure23 days ago

Asterisk Security Release 22.10.1

Posted by Asterisk Development Team via Fulldisclosure on Jul 02 The Asterisk Development Team would like to announce security rel…

VULNFull Disclosure23 days ago

Asterisk Security Release 21.12.3

Posted by Asterisk Development Team via Fulldisclosure on Jul 02 The Asterisk Development Team would like to announce security rel…

VULNFull Disclosure23 days ago

Asterisk Security Release 20.20.1

Posted by Asterisk Development Team via Fulldisclosure on Jul 02 The Asterisk Development Team would like to announce security rel…

VULNFull Disclosure23 days ago

Certified Asterisk Security Release certified-22.8-cert3

Posted by Asterisk Development Team via Fulldisclosure on Jul 02 The Asterisk Development Team would like to announce security rel…

VULNFull Disclosure23 days ago

Certified Asterisk Security Release certified-20.7-cert11

Posted by Asterisk Development Team via Fulldisclosure on Jul 02 The Asterisk Development Team would like to announce security rel…

VULNFull Disclosure23 days ago

Zig std.http chunked reader integer overflow -> unauthenticated remote DoS

Posted by Agent Spooky's Fun Parade via Fulldisclosure on Jul 02 Agent Spooky’s Fun Parade hereby reports, with the solemnity of a…

VULNwatchTowr Labs23 days ago

It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza)

We’re back, melting - we’ve tried shouting, screaming, and throwing things at the Sun, and it is just not working. Before we begin…

VULNMicrosoft Security23 days ago

Improving security posture across the Microsoft partner ecosystem

Read how Microsoft strengthens partner ecosystem security with CSP vetting, least privilege access, monitoring, and risk managemen…

VULNhighSentinelOne Labs23 days ago

Context Engineering | Compaction & Agent Memory for Automated Malware Analysis

Compaction cut input tokens 86% across long-running agent evals with no quality loss. Context discipline matters as much as model…

VULNRecorded Future24 days ago

Recorded FutureがGartner® サイバー脅威インテリジェンス・テクノロジー部門のMagic Quadrant™のリーダーの１社に位置づけられました。

Gartnerがサイバー脅威インテリジェンスのマジック・クアドラントのリーダーの１社と評価 — 能動的サイバー防御法施行を前に、日本企業が今すべきこと

VULNMicrosoft Security24 days ago

Microsoft named a leader in the Frost Radar for cloud and application runtime security

Frost & Sullivan names Microsoft a leader as cloud and application security converge into unified, runtime risk reduction. The pos…

VULNCheck Point Research25 days ago

Browser-Only Ransomware: From LLM Hallucinations to a Practical Attack Technique

Research by: Alexey Bukhteyev Key Takeaways Introduction Over the past several years, large language models have reshaped software…

VULNPalo Alto Unit 4225 days ago

Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector

Attackers can exploit LLM domain hallucinations through phantom squatting to target supply chains. Read the analysis to learn more…

VULNRecorded Future25 days ago

Iran-Nexus TAG-182 Disseminates MarkiRAT Surveillance Tool

Discover how Iranian-nexus threat cluster TAG-182 uses MarkiRAT malware and fake VPN/media apps to conduct cyber surveillance oper…

VULNhighCVE-2026-84517.5 HIGHwatchTowr Labs25 days ago

CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)

Well, well, well - once again, the cat has dragged us in, and spat us out. Today, we find ourselves questioning the reality we sit…