Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

666 articles

VULNhighCVE-2026-11857Full Disclosureabout 1 month ago

SEC Consult SA-20260617-1 :: Multiple Vulnerabilities in Quanos Content Solutions - SCHEMA ST4

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Jun 20 SEC Consult Vulnerability Lab Security Advisory ============…

VULNcriticalCVE-2022-43339.8 CRITICALFull Disclosureabout 1 month ago

SEC Consult SA-20260617-0 :: Multiple Critical Vulnerabilities in Sprecher Automation SPRECON-E-C/-E-P/-E-T3

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Jun 20 SEC Consult Vulnerability Lab Security Advisory ============…

VULNhighCVE-2026-12225Full Disclosureabout 1 month ago

SEC Consult SA-20260616-0 :: Broken Access Control in syracom AG Secure Login (2FA) for Atlassian Jira / Confluence / Bitbucket #CVE-2026-12225

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Jun 20 SEC Consult Vulnerability Lab Security Advisory ============…

VULNFull Disclosureabout 1 month ago

APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211

Posted by Apple Product Security via Fulldisclosure on Jun 20 APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211 https://support.ap…

VULNFull Disclosureabout 1 month ago

PHP 8.5.7 `levenshtein()` signed-integer overflow

Posted by Khashayar Fereidani on Jun 20 # PHP 8.5.7 `levenshtein()` signed-integer overflow https://fereidani.com/php-857-levensht…

VULNFull Disclosureabout 1 month ago

PHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow

Posted by Khashayar Fereidani on Jun 20 # PHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow https://fereidani.com/php-8…

VULNFull Disclosureabout 1 month ago

PHP 8.5.7 `mb_substr()` 'SJIS-mac' size_t underflow

Posted by Khashayar Fereidani on Jun 20 # PHP 8.5.7 `mb_substr()` 'SJIS-mac' size_t underflow https://fereidani.com/php-857-mbsubs…

VULNFull Disclosureabout 1 month ago

PHP 8.5.7 `FILTER_SANITIZE_ENCODED` uninitialized read

Posted by Khashayar Fereidani on Jun 20 # PHP 8.5.7 `FILTER_SANITIZE_ENCODED` uninitialized read https://fereidani.com/php-857-fil…

VULNhighCVE-2025-68624Full Disclosureabout 1 month ago

CVE-2025-68624: Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure

Posted by Alessandro Bertoldi BCS via Fulldisclosure on Jun 20 CVE-2025-68624: Cross-Tenant Authentication Bypass by Spoofing in N…

VULNPalo Alto Unit 42about 1 month ago

Threat Brief: Mitigating Large-Scale Credential Attacks

We provide guidance for preparing for and mitigating large-scale credential attacks, focusing on recent campaigns targeting securi…

VULNMicrosoft Securityabout 1 month ago

AutoJack: How a single page can RCE the host running your AI agent

AutoJack is a novel exploit chain showing how a single malicious webpage can turn an AI browsing agent into a remote code executio…

VULNRecorded Futureabout 1 month ago

FortiBleed Campaign Exposing Credentials for 73,932 FortiGate Systems

A dataset containing valid administrative and VPN credentials for tens of thousands of Fortinet FortiGate firewalls.

VULNMicrosoft Securityabout 1 month ago

New Forrester Total Economic Impact™ study projects a 124% ROI from unifying with Microsoft Security

New Forrester Total Economic Impact™ study shows Microsoft Security consolidation delivers ROI, lowers risk, and prepares organiza…

VULNMicrosoft Securityabout 1 month ago

From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend agains…

VULNRecorded Futureabout 1 month ago

The Klue Security Incident and Its Impact on Recorded Future

Transparency is core to how we operate. Read our statement on a recent third-party vendor security incident, including our finding…

VULNRecorded Futureabout 1 month ago

KlueセキュリティインシデントとRecorded Futureへの影響

透明性は私たちの企業運営の根幹をなすものです。最近発生したサードパーティベンダーによるセキュリティインシデントに関する声明をご覧ください。調査結果および、お客様の情報を保護するために講じた対策について記載しております。

VULNMicrosoft Securityabout 1 month ago

Crypto Clipper uses Tor and worm-like propagation for persistence and control

Microsoft Threat Intelligence analyzed a cryptocurrency clipper campaign that combines clipboard theft, wallet replacement, Tor-ba…

VULNMicrosoft Securityabout 1 month ago

Beyond the benchmark: Advancing security at AI speed

Read how Microsoft Security has advanced its agentic vulnerability detection system, codename MDASH, integrating into real-world w…

VULNMicrosoft Securityabout 1 month ago

Forrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ report

Microsoft has been named a Leader in The Forrester Wave™: Extended Detection and Response Platforms, Q2 2026. The post Forrester…

VULNCheck Point Researchabout 1 month ago

From Stars to Upvotes: Fake Reputation Fueling a Crypto Clipboard Hijacker

Key Points Introduction In this research, we analyze a clipboard hijacker campaign that is hidden inside a collection of “solution…

VULNRecorded Futureabout 1 month ago

State Digital Surveillance Risk Landscape

Explore the state digital surveillance risk landscape. Learn how governments use spyware, AI, and network interception to monitor…

VULNPalo Alto Unit 42about 1 month ago

Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE

Unit 42 discovered a Vertex AI Python SDK vulnerability that allows remote code execution via bucket squatting. Read the article f…

VULNhighFull Disclosureabout 1 month ago

SEC Consult SA-20260615-1 :: Multiple Vulnerabilities in Wertheim SafeController Hardware for VAULT ROOMS (Safe Deposit Locker System – Microcontroller)

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Jun 15 SEC Consult Vulnerability Lab Security Advisory ============…

VULNcriticalFull Disclosureabout 1 month ago

SEC Consult SA-20260615-0 :: Multiple Critical Vulnerabilities in Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Jun 15 SEC Consult Vulnerability Lab Security Advisory ============…

VULNCVE-2026-240668.4 HIGHFull Disclosureabout 1 month ago

SEC Consult SA-20260610-0 :: Local Privilege Escalation in Slate Digital Connect (macOS)

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Jun 15 SEC Consult Vulnerability Lab Security Advisory ============…

VULNhighCVE-2026-240647.8 HIGHFull Disclosureabout 1 month ago

SEC Consult SA-20260609-0 :: Multiple Local Privilege Escalation Vulnerabilities in Waves Audio - Waves Central

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Jun 15 SEC Consult Vulnerability Lab Security Advisory ============…

VULNhighFull Disclosureabout 1 month ago

[KIS-2026-11] Discuz! <= X5.0 (enable_disable.php) Local File Inclusion Vulnerability

Posted by Egidio Romano on Jun 15 ----------------------------------------------------------------------- https://www.discuz.vip…

VULNhighFull Disclosureabout 1 month ago

[KIS-2026-10] Discuz! <= X5.0 OCR-based CAPTCHA Bypass Vulnerability

Posted by Egidio Romano on Jun 15 ------------------------------------------------------ https://www.discuz.vip [-] Affected Vers…

VULNhighFull Disclosureabout 1 month ago

[KIS-2026-09] Discuz! X5.0 (UC_KEY) Cross-Context Token Reuse Vulnerability

Posted by Egidio Romano on Jun 15 ------------------------------------------------------------- https://www.discuz.vip [-] Affect…

VULNRecorded Futureabout 1 month ago

The Intelligence No One Else Has: Inside Recorded Future’s Proprietary Collection Engine

Learn how Recorded Future’s proprietary collection engine empowers organizations to move beyond reactive security. Discover the po…

Vulnerability Alerts

SEC Consult SA-20260617-1 :: Multiple Vulnerabilities in Quanos Content Solutions - SCHEMA ST4

SEC Consult SA-20260617-0 :: Multiple Critical Vulnerabilities in Sprecher Automation SPRECON-E-C/-E-P/-E-T3

SEC Consult SA-20260616-0 :: Broken Access Control in syracom AG Secure Login (2FA) for Atlassian Jira / Confluence / Bitbucket #CVE-2026-12225

APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211

PHP 8.5.7 `levenshtein()` signed-integer overflow

PHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow

PHP 8.5.7 `mb_substr()` 'SJIS-mac' size_t underflow

PHP 8.5.7 `FILTER_SANITIZE_ENCODED` uninitialized read

CVE-2025-68624: Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure

Threat Brief: Mitigating Large-Scale Credential Attacks

AutoJack: How a single page can RCE the host running your AI agent

FortiBleed Campaign Exposing Credentials for 73,932 FortiGate Systems

New Forrester Total Economic Impact™ study projects a 124% ROI from unifying with Microsoft Security

From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet

The Klue Security Incident and Its Impact on Recorded Future

KlueセキュリティインシデントとRecorded Futureへの影響

Crypto Clipper uses Tor and worm-like propagation for persistence and control

Beyond the benchmark: Advancing security at AI speed

​​Forrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ report

From Stars to Upvotes: Fake Reputation Fueling a Crypto Clipboard Hijacker

State Digital Surveillance Risk Landscape

Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE

SEC Consult SA-20260615-1 :: Multiple Vulnerabilities in Wertheim SafeController Hardware for VAULT ROOMS (Safe Deposit Locker System – Microcontroller)

SEC Consult SA-20260615-0 :: Multiple Critical Vulnerabilities in Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)

SEC Consult SA-20260610-0 :: Local Privilege Escalation in Slate Digital Connect (macOS)

SEC Consult SA-20260609-0 :: Multiple Local Privilege Escalation Vulnerabilities in Waves Audio - Waves Central

[KIS-2026-11] Discuz! <= X5.0 (enable_disable.php) Local File Inclusion Vulnerability

[KIS-2026-10] Discuz! <= X5.0 OCR-based CAPTCHA Bypass Vulnerability

[KIS-2026-09] Discuz! X5.0 (UC_KEY) Cross-Context Token Reuse Vulnerability

The Intelligence No One Else Has: Inside Recorded Future’s Proprietary Collection Engine

Forrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ report