Article: ESP-RFID-Tool v2 PRO — Full Public Disclosure - published 6 months ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Apr/18   
Published: 2026 04 29 17:46:51
Received: 2026 04 30 13:53:15
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: Re: SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App - published 6 months ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Apr/21   
Published: 2026 04 29 17:43:46
Received: 2026 04 30 13:53:15
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App - published 6 months ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Apr/20   
Published: 2026 04 29 17:43:43
Received: 2026 04 30 13:53:16
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Cyber Tzar Free Score Certificate

Article: SEC Consult SA-20260423-0 :: DLL Hijacking in EfficientLab Controlio (cloud-based employee monitoring service) - published 6 months ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Apr/19   
Published: 2026 04 29 17:43:40
Received: 2026 04 30 13:53:16
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: SEC Consult SA-20260421-0 :: Broken Access Control in Config Endpoint in LiteLLM - published 6 months ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Apr/17   
Published: 2026 04 29 17:43:37
Received: 2026 04 30 13:53:16
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: SEC Consult SA-20260415-0 :: Exposed Private Key of X.509 Certificate in SAP HANA Cockpit & SAP HANA Database Explorer - published 6 months ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Apr/16   
Published: 2026 04 29 17:43:35
Received: 2026 04 30 13:53:16
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Cyber Tzar Score Summary

Article: APPLE-SA-04-22-2026-2 iOS 18.7.8 and iPadOS 18.7.8 - published 6 months ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Apr/15   
Published: 2026 04 29 17:43:20
Received: 2026 04 30 13:53:16
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: APPLE-SA-04-22-2026-1 iOS 26.4.2 and iPadOS 26.4.2 - published 6 months ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Apr/14   
Published: 2026 04 29 17:43:17
Received: 2026 04 30 13:53:16
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: Research: When Trusted Tools Become Attack Primitives - published 6 months ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Apr/13   
Published: 2026 04 29 17:35:42
Received: 2026 04 30 13:53:16
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Cyber Tzar Your Score Explained

Article: [KIS-2026-08] SocialEngine <= 7.8.0 (get-memberall) SQL Injection Vulnerability - published 6 months ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Apr/12   
Published: 2026 04 29 17:35:12
Received: 2026 04 30 13:53:16
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: [KIS-2026-07] SocialEngine <= 7.8.0 Blind Server-Side Request Forgery Vulnerability - published 6 months ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Apr/11   
Published: 2026 04 29 17:35:09
Received: 2026 04 30 13:53:17
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: Trojan-Spy.Win32.Small / Remote Command Execution - published 6 months ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Apr/10   
Published: 2026 04 29 17:34:03
Received: 2026 04 30 13:53:17
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Cyber Tzar Gold Score Certificate

Article: [IWCC 2026] CfP: 15th International Workshop on Cyber Crime - Linköping, Sweden, Aug 24-27, 2026 - published 6 months ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Apr/9   
Published: 2026 04 29 17:31:42
Received: 2026 04 30 13:53:17
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: [SBA-ADV-20251120-01] CVE-2026-0972: GoAnywhere MFT Email HTML Injection - published 6 months ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Apr/8   
Published: 2026 04 29 17:30:53
Received: 2026 04 30 13:53:17
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: Apple Has Likely Abandoned 'iPad Ultra' Plans - published 6 months ago.
Content:
Copy Link: https://www.macrumors.com/2026/04/29/apple-likely-abandoned-ipad-ultra-plans/   
Published: 2026 04 29 17:30:14
Received: 2026 04 30 14:02:14
Feed: MacRumors : Mac News and Rumors
Source: MacRumors : Mac News and Rumors
Category: News
Topic: Cyber Security

Cyber Tzar Score Analysis

Article: The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940) - watchTowr Labs - published 6 months ago.
Content: submitted by /u/dx7r__ [link] [comments]...
Copy Link: https://www.reddit.com/r/netsec/comments/1sz5aoi/the_internet_is_falling_down_falling_down_falling/   
Published: 2026 04 29 17:20:21
Received: 2026 04 30 13:58:23
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: Yet another experiment proves it's too damn simple to poison large language models - published 6 months ago.
Content: Unlike search engines that let you judge competing sources, search-backed AI chatbots can turn shaky web material into confident answers. Case in point: A security engineer convinced several bots that he was the reigning world champion of a popular German card game, even though no such championship exists. If you were to check Wikipedia up until the end of ...
Copy Link: https://www.theregister.com/software/2026/04/29/fooling-large-language-models-just-keeps-getting-simpler/5229286   
Published: 2026 04 29 17:00:18
Received: 2026 05 06 09:48:19
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Risk Impact Distribution