|
Article: Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability - published 8 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Firewall%20Management%20Center%20Software%20Remote%20Code%20Execution%20Vulnerability%26vs_k=1 Published: 2026 03 25 14:21:24 Received: 2026 04 12 23:52:10 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
Article: Cisco IOS XE Software Secure Copy Protocol Server Denial of Service Vulnerability - published 8 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-scp-dos-duAdXtCg?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XE%20Software%20Secure%20Copy%20Protocol%20Server%20Denial%20of%20Service%20Vulnerability%26vs_k=1 Published: 2026 03 25 16:00:00 Received: 2026 04 12 23:52:10 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco IOS XE Software Secure Channel for Meraki Information Disclosure Vulnerability - published 8 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe_infodis-6J847uEB?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XE%20Software%20Secure%20Channel%20for%20Meraki%20Information%20Disclosure%20Vulnerability%26vs_k=1 Published: 2026 03 25 16:00:00 Received: 2026 04 12 23:52:10 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco IOS XE Software TLS Memory Exhaustion Denial of Service Vulnerability - published 8 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-tls-dos-TVgLDEZL?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XE%20Software%20TLS%20Memory%20Exhaustion%20Denial%20of%20Service%20Vulnerability%26vs_k=1 Published: 2026 03 25 16:00:00 Received: 2026 04 12 23:52:10 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
Article: Cisco IOS XE Software for Cisco Catalyst and Rugged Series Switches Secure Boot Bypass Vulnerability - published 8 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-secureboot-bypass-B6uYxYSZ?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XE%20Software%20for%20Cisco%20Catalyst%20and%20Rugged%20Series%20Switches%20Secure%20Boot%20Bypass%20Vulnerability%26vs_k=1 Published: 2026 03 25 16:00:00 Received: 2026 04 12 23:52:10 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco IOS XE Wireless Controller Software for the Catalyst CW9800 Family CAPWAP Denial of Service Vulnerability - published 8 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-dos-hnX5KGOm?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XE%20Wireless%20Controller%20Software%20for%20the%20Catalyst%20CW9800%20Family%20CAPWAP%20Denial%20of%20Service%20Vulnerability%26vs_k=1 Published: 2026 03 25 16:00:00 Received: 2026 04 12 23:52:10 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco Catalyst SD-WAN Manager Cross-Site Scripting Vulnerability - published 8 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-xss-ZqkhP9W9?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Manager%20Cross-Site%20Scripting%20Vulnerability%26vs_k=1 Published: 2026 03 25 16:00:00 Received: 2026 04 12 23:52:09 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
Article: Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerability - published 8 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS,%20IOS%20XE,%20Secure%20Firewall%20Adaptive%20Security%20Appliance,%20and%20Secure%20Firewall%20Threat%20Defense%20Software%20IKEv2%20Denial%20of%20Service%20Vulnerability%26vs_k=1 Published: 2026 03 25 16:00:00 Received: 2026 04 12 23:52:09 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco IOS Software and IOS XE Software Release 3E HTTP Server Denial of Service Vulnerability - published 8 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-http-dos-sbv8XRpL?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20Software%20and%20IOS%20XE%20Software%20Release%203E%20HTTP%20Server%20Denial%20of%20Service%20Vulnerability%26vs_k=1 Published: 2026 03 25 16:00:00 Received: 2026 04 12 23:52:09 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco IOS XE Software for Catalyst 9000 Series Switches DHCP Snooping Denial of Service Vulnerability - published 8 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bootp-WuBhNBxA?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XE%20Software%20for%20Catalyst%209000%20Series%20Switches%20DHCP%20Snooping%20Denial%20of%20Service%20Vulnerability%26vs_k=1 Published: 2026 03 25 16:00:00 Received: 2026 04 12 23:52:09 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
Article: Cisco IOx Application Hosting Environment Stored Cross-Site Scripting Vulnerability - published 8 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-xss-LpGkzwtJ?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOx%20Application%20Hosting%20Environment%20%20Stored%20Cross-Site%20Scripting%20Vulnerability%26vs_k=1 Published: 2026 03 25 16:00:00 Received: 2026 04 12 23:52:09 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco IOx Application Hosting Environment Carriage Return Line Feed Injection Vulnerability - published 8 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-crlf-NvgKTKJZ?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOx%20Application%20Hosting%20Environment%20Carriage%20Return%20Line%20Feed%20Injection%20Vulnerability%26vs_k=1 Published: 2026 03 25 16:00:00 Received: 2026 04 12 23:52:09 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco IOS XE Software Lobby Ambassador Privilege Escalation Vulnerability - published 8 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-lobby-privesc-KwxBqJy?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XE%20Software%20Lobby%20Ambassador%20Privilege%20Escalation%20Vulnerability%26vs_k=1 Published: 2026 03 25 16:00:00 Received: 2026 04 12 23:52:09 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
Article: Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution Vulnerability - published 7 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-cmdinj-UvYZrKfr?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Nexus%20Dashboard%20Fabric%20Controller%20Arbitrary%20Command%20Execution%20Vulnerability%26vs_k=1 Published: 2026 03 31 18:47:53 Received: 2026 04 12 23:52:09 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability - published 7 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-improp-auth-mUwFWUU3?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Evolved%20Programmable%20Network%20Manager%20Improper%20Authorization%20Vulnerability%26vs_k=1 Published: 2026 04 01 16:00:00 Received: 2026 04 12 23:52:09 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability - published 7 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-priv-esc-xRAnOuO8?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Smart%20Software%20Manager%20On-Prem%20Privilege%20Escalation%20Vulnerability%26vs_k=1 Published: 2026 04 01 16:00:00 Received: 2026 04 12 23:52:09 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
Article: Cisco Integrated Management Controller Cross-Site Scripting Vulnerabilities - published 7 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-xss-A2tkgVAB?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Integrated%20Management%20Controller%20Cross-Site%20Scripting%20Vulnerabilities%26vs_k=1 Published: 2026 04 01 16:00:00 Received: 2026 04 12 23:52:09 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco Integrated Management Controller Command Injection and Remote Code Execution Vulnerabilities - published 7 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Integrated%20Management%20Controller%20Command%20Injection%20and%20Remote%20Code%20Execution%20Vulnerabilities%26vs_k=1 Published: 2026 04 01 16:00:00 Received: 2026 04 12 23:52:09 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco Integrated Management Controller Authentication Bypass Vulnerability - published 7 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-auth-bypass-AgG2BxTn?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Integrated%20Management%20Controller%20Authentication%20Bypass%20Vulnerability%26vs_k=1 Published: 2026 04 01 16:00:00 Received: 2026 04 12 23:52:09 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
Article: Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability - published 7 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndi-afw-rJuRC5dZ?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Nexus%20Dashboard%20Insights%20Arbitrary%20File%20Write%20Vulnerability%26vs_k=1 Published: 2026 04 01 16:00:00 Received: 2026 04 12 23:52:09 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco Nexus Dashboard and Nexus Dashboard Insights Server-Side Request Forgery Vulnerability - published 7 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nd-ssrf-NAen4O7r?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Nexus%20Dashboard%20and%20Nexus%20Dashboard%20Insights%20Server-Side%20Request%20Forgery%20Vulnerability%26vs_k=1 Published: 2026 04 01 16:00:00 Received: 2026 04 12 23:52:08 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco Nexus Dashboard Configuration Backup REST API Unauthorized Access Vulnerability - published 7 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nd-cbid-5YqkOSHu?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Nexus%20Dashboard%20Configuration%20Backup%20REST%20API%20Unauthorized%20Access%20Vulnerability%26vs_k=1 Published: 2026 04 01 16:00:00 Received: 2026 04 12 23:52:08 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
Article: Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability - published 7 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssm-cli-execution-cHUcWuNr?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Smart%20Software%20Manager%20On-Prem%20Arbitrary%20Command%20Execution%20Vulnerability%26vs_k=1 Published: 2026 04 01 16:00:00 Received: 2026 04 12 23:52:08 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco IOS XE Software Denial of Service Vulnerability - published 7 months ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-mntc-dos-LZweQcyq?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XE%20Software%20Denial%20of%20Service%20Vulnerability%26vs_k=1 Published: 2026 04 02 19:43:54 Received: 2026 04 12 23:52:08 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: APPLE-SA-03-24-2026-1 iOS 26.4 and iPadOS 26.4 - published 8 months ago. Content: https://seclists.org/fulldisclosure/2026/Mar/16 Published: 2026 03 29 03:10:49 Received: 2026 04 12 23:51:58 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
Article: APPLE-SA-03-24-2026-2 iOS 18.7.7 and iPadOS 18.7.7 - published 8 months ago. Content: https://seclists.org/fulldisclosure/2026/Mar/17 Published: 2026 03 29 03:10:52 Received: 2026 04 12 23:51:58 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: APPLE-SA-03-24-2026-3 macOS Tahoe 26.4 - published 8 months ago. Content: https://seclists.org/fulldisclosure/2026/Mar/18 Published: 2026 03 29 03:10:55 Received: 2026 04 12 23:51:58 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: APPLE-SA-03-24-2026-4 macOS Sequoia 15.7.5 - published 8 months ago. Content: https://seclists.org/fulldisclosure/2026/Mar/19 Published: 2026 03 29 03:10:57 Received: 2026 04 12 23:51:58 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
Article: APPLE-SA-03-24-2026-5 macOS Sonoma 14.8.5 - published 8 months ago. Content: https://seclists.org/fulldisclosure/2026/Mar/20 Published: 2026 03 29 03:11:00 Received: 2026 04 12 23:51:58 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: APPLE-SA-03-24-2026-6 tvOS 26.4 - published 8 months ago. Content: https://seclists.org/fulldisclosure/2026/Mar/21 Published: 2026 03 29 03:11:03 Received: 2026 04 12 23:51:57 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: APPLE-SA-03-24-2026-7 watchOS 26.4 - published 8 months ago. Content: https://seclists.org/fulldisclosure/2026/Mar/22 Published: 2026 03 29 03:11:05 Received: 2026 04 12 23:51:57 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
Article: APPLE-SA-03-24-2026-8 visionOS 26.4 - published 8 months ago. Content: https://seclists.org/fulldisclosure/2026/Mar/23 Published: 2026 03 29 03:11:08 Received: 2026 04 12 23:51:57 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: APPLE-SA-03-24-2026-9 Safari 26.4 - published 8 months ago. Content: https://seclists.org/fulldisclosure/2026/Mar/24 Published: 2026 03 29 03:11:10 Received: 2026 04 12 23:51:57 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: APPLE-SA-03-24-2026-10 Xcode 26.4 - published 8 months ago. Content: https://seclists.org/fulldisclosure/2026/Mar/25 Published: 2026 03 29 03:11:13 Received: 2026 04 12 23:51:57 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
Article: [CVE-2026-33691] OWASP CRS whitespace padding bypass vulnerability - published 7 months ago. Content: https://seclists.org/fulldisclosure/2026/Apr/0 Published: 2026 04 03 03:52:42 Received: 2026 04 12 23:51:57 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: [KIS-2026-06] MetInfo CMS <= 8.1 (weixinreply.class.php) PHP Code Injection Vulnerability - published 7 months ago. Content: https://seclists.org/fulldisclosure/2026/Apr/1 Published: 2026 04 03 03:53:40 Received: 2026 04 12 23:51:57 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: Apple OHTTP Relay: 14 Third-Party Endpoints, 6 Countries, Zero User Visibility - published 7 months ago. Content: https://seclists.org/fulldisclosure/2026/Apr/2 Published: 2026 04 03 03:54:22 Received: 2026 04 12 23:51:57 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
Article: SEC Consult SA-20260326-0 :: Local Privilege Escalation in Vienna Assistant (MacOS) - Vienna Symphonic Library - published 7 months ago. Content: https://seclists.org/fulldisclosure/2026/Apr/3 Published: 2026 04 03 03:55:14 Received: 2026 04 12 23:51:56 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: SEC Consult SA-20260401-0 :: Broken Access Control in Open WebUI - published 7 months ago. Content: https://seclists.org/fulldisclosure/2026/Apr/4 Published: 2026 04 03 03:55:17 Received: 2026 04 12 23:51:56 Feed: Full Disclosure Source: Full Disclosure Category: Alerts Topic: Vulnerabilities |
|
|
Article: ISC Stormcast For Monday, April 6th, 2026 https://isc.sans.edu/podcastdetail/9880, (Mon, Apr 6th) - published 7 months ago. Content: https://isc.sans.edu/diary/rss/32868 Published: 2026 04 06 02:00:02 Received: 2026 04 12 23:51:54 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
Article: How often are redirects used in phishing in 2026?, (Mon, Apr 6th) - published 7 months ago. Content: In one of his recent diaries, Johannes discussed how open redirects are actively being sought out by threat actors[1], which made me wonder about how commonly these mechanisms are actually misused… https://isc.sans.edu/diary/rss/32870 Published: 2026 04 06 08:50:27 Received: 2026 04 12 23:51:54 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: ISC Stormcast For Tuesday, April 7th, 2026 https://isc.sans.edu/podcastdetail/9882, (Tue, Apr 7th) - published 7 months ago. Content: https://isc.sans.edu/diary/rss/32872 Published: 2026 04 07 02:00:02 Received: 2026 04 12 23:51:54 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: A Little Bit Pivoting: What Web Shells are Attackers Looking for?, (Tue, Apr 7th) - published 7 months ago. Content: Webshells remain a popular method for attackers to maintain persistence on a compromised web server. Many "arbitrary file write" and "remote code execution" vulnerabilities are used to drop small files on systems for later execution of additional payloads. The names of these files keep changing and are often chosen to "fit in" with other files. Webshells the... https://isc.sans.edu/diary/rss/32874 Published: 2026 04 07 18:28:16 Received: 2026 04 12 23:51:53 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
Article: ISC Stormcast For Wednesday, April 8th, 2026 https://isc.sans.edu/podcastdetail/9884, (Wed, Apr 8th) - published 7 months ago. Content: https://isc.sans.edu/diary/rss/32876 Published: 2026 04 08 02:00:02 Received: 2026 04 12 23:51:53 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: More Honeypot Fingerprinting Scans, (Wed, Apr 8th) - published 7 months ago. Content: One question that often comes up when I talk about honeypots: Are attackers able to figure out if they are connected to a honeypot? The answer is pretty simple: Yes! https://isc.sans.edu/diary/rss/32878 Published: 2026 04 08 14:23:28 Received: 2026 04 12 23:51:53 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: TeamPCP Supply Chain Campaign: Update 007 - Cisco Source Code Stolen via Trivy-Linked Breach, Google GTIG Tracks TeamPCP as UNC6780, and CISA KEV Deadline Arrives with No Standalone Advisory, (Wed, Apr 8th) - published 7 months ago. Content: This is the seventh update to the TeamPCP supply chain campaign threat intelligence report, "When the Security Scanner Became the Weapon" (v3.0, March 25, 2026). Update 006 covered developments through April 3, including the CERT-EU European Commission breach disclosure, ShinyHunters' confirmation of credential sharing, Sportradar breach details, and Mandian... https://isc.sans.edu/diary/rss/32880 Published: 2026 04 08 17:15:05 Received: 2026 04 12 23:51:53 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
Article: Number Usage in Passwords: Take Two, (Thu, Apr 9th) - published 7 months ago. Content: In a previous diary [1], we looked to see how numbers were used within passwords submitted to honeypots. One of the items of interest was how dates, and more specifically years, were represented within the data and how that changed over time. It is often seen that years and seasons are used in passwords, especially when password change requirements include f... https://isc.sans.edu/diary/rss/32866 Published: 2026 04 09 00:58:14 Received: 2026 04 12 23:51:53 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: ISC Stormcast For Thursday, April 9th, 2026 https://isc.sans.edu/podcastdetail/9886, (Thu, Apr 9th) - published 7 months ago. Content: https://isc.sans.edu/diary/rss/32882 Published: 2026 04 09 02:00:03 Received: 2026 04 12 23:51:53 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: Obfuscated JavaScript or Nothing, (Thu, Apr 9th) - published 7 months ago. Content: I spotted an interesting piece of JavaScript code that was delivered via a phishing email in a RAR archive. The file was called “cbmjlzan.JS” (SHA256:a8ba9ba93b4509a86e3d7dd40fd0652c2743e32277760c5f7942b788b74c5285) and is only identified as malicious by 15 AV’s on VirusTotal[1]. https://isc.sans.edu/diary/rss/32884 Published: 2026 04 10 06:40:46 Received: 2026 04 12 23:51:53 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
Article: PyJWT < 2.12.0 crit header bypass / Insufficient crit validation - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030017 Published: 2026 03 14 22:33:56 Received: 2026 04 12 23:51:28 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: Frappe Framework < 14.99.0 and < 15.84.0 Unauthenticated SQL Injection - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030018 Published: 2026 03 14 22:34:17 Received: 2026 04 12 23:51:28 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: Qualcomm GPU Driver Memory Corruption Vulnerability in Android Devices - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030019 Published: 2026 03 14 22:35:11 Received: 2026 04 12 23:51:28 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
Article: Microsoft Windows MSHTML Security Feature Bypass Vulnerability - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030020 Published: 2026 03 14 22:35:32 Received: 2026 04 12 23:51:28 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: Splunk Remote Command Execution via Improper Input Validation - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030021 Published: 2026 03 15 16:25:07 Received: 2026 04 12 23:51:28 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: Wekan 8.31.0 - 8.33Meteor DDP notificationUsers Sensitive Data Leak - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030022 Published: 2026 03 15 16:25:36 Received: 2026 04 12 23:51:28 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
Article: zumba/json-serializer zumba/json-serializer < 3.2.3 RCE - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030023 Published: 2026 03 15 16:26:34 Received: 2026 04 12 23:51:28 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: LB-LINK BL-WR9000 V2.4.9 - Unauthenticated / Post-Auth Stack-based Buffer Overflow - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030024 Published: 2026 03 17 22:04:07 Received: 2026 04 12 23:51:28 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: LB-LINK BL-WR9000 V2.4.9 - Stack-based Buffer Overflow in /goform/get_hidessid_cfg - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030025 Published: 2026 03 17 22:04:23 Received: 2026 04 12 23:51:28 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
Article: Glances < = 4.5.2 OS Command Injection via Mustache Template Fields - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030026 Published: 2026 03 18 21:17:22 Received: 2026 04 12 23:51:28 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: Kanboard < = 1.2.50 Authenticated SQL Injection - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030027 Published: 2026 03 18 21:17:40 Received: 2026 04 12 23:51:28 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: Discourse < = 2026.2.1 Authenticated Missing Authorization - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030028 Published: 2026 03 21 22:01:36 Received: 2026 04 12 23:51:28 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
Article: Linux Kernel 5.8 < 5.15.25 - Local Privilege Escalation Exploit - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030029 Published: 2026 03 21 22:01:47 Received: 2026 04 12 23:51:28 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: Windows RRAS Remote Code Execution Vulnerability (CVE-2026-26111) - SE-RCE Exploit - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030030 Published: 2026 03 21 22:02:08 Received: 2026 04 12 23:51:27 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: WWBN AVideo < = 26.0 - Authenticated SQL Injection - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030031 Published: 2026 03 26 08:54:07 Received: 2026 04 12 23:51:27 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
Article: Tenda AC21 V1.0 V16.03.08.16 - Stack Buffer Overflow in SetNetControlList - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030032 Published: 2026 03 26 08:54:45 Received: 2026 04 12 23:51:27 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: SiYuan < = v3.6.1 Note unauthenticated arbitrary file read (path traversal) - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030033 Published: 2026 03 26 08:55:06 Received: 2026 04 12 23:51:27 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: esiclivre 0.2.2 SQL Injection - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030034 Published: 2026 03 26 08:55:51 Received: 2026 04 12 23:51:27 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
Article: Payara Server Cross Site Scripting - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030035 Published: 2026 03 26 08:56:48 Received: 2026 04 12 23:51:27 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: esiclivre 0.2.2 SQL Injection - published 8 months ago. Content: https://cxsecurity.com/issue/WLB-2026030036 Published: 2026 03 26 08:58:54 Received: 2026 04 12 23:51:27 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: Wavlink WL-WN579X3-C firewall.cgi UPNP Stack-based Buffer Overflow - published 7 months ago. Content: https://cxsecurity.com/issue/WLB-2026030037 Published: 2026 03 31 19:38:48 Received: 2026 04 12 23:51:27 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
Article: FreeScout Unauthenticated RCE via ZWSP .htaccess Bypass - published 7 months ago. Content: https://cxsecurity.com/issue/WLB-2026030038 Published: 2026 03 31 19:40:02 Received: 2026 04 12 23:51:27 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: Microsoft SQL Server Privilege Elevation Through - published 7 months ago. Content: https://cxsecurity.com/issue/WLB-2026040001 Published: 2026 04 03 20:23:17 Received: 2026 04 12 23:51:27 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: astrojs/vercel < = 10.0.0 - Unauthenticated x-astro-path Header Path Override - published 7 months ago. Content: https://cxsecurity.com/issue/WLB-2026040002 Published: 2026 04 03 20:23:39 Received: 2026 04 12 23:51:27 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
Article: Linux Kernel mseal Invariant Violation (Linux kernel 6.17-7.0 rc5) - published 7 months ago. Content: https://cxsecurity.com/issue/WLB-2026040003 Published: 2026 04 04 16:01:28 Received: 2026 04 12 23:51:27 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: esm-dev 136 Path Traversal - published 7 months ago. Content: https://cxsecurity.com/issue/WLB-2026040004 Published: 2026 04 09 20:52:12 Received: 2026 04 12 23:51:27 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: OctoPrint 1.11.2 File Upload - published 7 months ago. Content: https://cxsecurity.com/issue/WLB-2026040005 Published: 2026 04 09 20:52:26 Received: 2026 04 12 23:51:26 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
Article: Grafana 11.6.0 SSRF - published 7 months ago. Content: https://cxsecurity.com/issue/WLB-2026040006 Published: 2026 04 09 20:52:38 Received: 2026 04 12 23:51:26 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: MaNGOSWebV4 4.0.6 Reflected XSS - published 7 months ago. Content: https://cxsecurity.com/issue/WLB-2026040007 Published: 2026 04 09 20:52:55 Received: 2026 04 12 23:51:26 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
|
Article: Docker Desktop 4.44.3 Unauthenticated API Exposure - published 7 months ago. Content: https://cxsecurity.com/issue/WLB-2026040008 Published: 2026 04 09 20:53:26 Received: 2026 04 12 23:51:26 Feed: WLB2 Database - CXSecurity.com Source: WLB2 Database - CXSecurity.com Category: Alerts Topic: Vulnerabilities |
|
Article: CISA Adds Two Known Exploited Vulnerabilities to Catalog - published 8 months ago. Content: https://www.cisa.gov/news-events/alerts/2026/03/13/cisa-adds-two-known-exploited-vulnerabilities-catalog Published: 2026 03 13 12:00:00 Received: 2026 04 12 23:41:21 Feed: CISA Current Activity Source: Cybersecurity and Infrastructure Security Agency (CISA) Category: News Topic: Cyber Security |
|
|
Article: CISA Adds One Known Exploited Vulnerability to Catalog - published 8 months ago. Content: https://www.cisa.gov/news-events/alerts/2026/03/16/cisa-adds-one-known-exploited-vulnerability-catalog Published: 2026 03 16 12:00:00 Received: 2026 04 12 23:41:21 Feed: CISA Current Activity Source: Cybersecurity and Infrastructure Security Agency (CISA) Category: News Topic: Cyber Security |
|
|
Article: CISA Urges Endpoint Management System Hardening After Cyberattack Against US Organization - published 8 months ago. Content: https://www.cisa.gov/news-events/alerts/2026/03/18/cisa-urges-endpoint-management-system-hardening-after-cyberattack-against-us-organization Published: 2026 03 18 12:00:00 Received: 2026 04 12 23:41:21 Feed: CISA Current Activity Source: Cybersecurity and Infrastructure Security Agency (CISA) Category: News Topic: Cyber Security |
|
Article: CISA Adds One Known Exploited Vulnerability to Catalog - published 8 months ago. Content: https://www.cisa.gov/news-events/alerts/2026/03/18/cisa-adds-one-known-exploited-vulnerability-catalog Published: 2026 03 18 12:00:00 Received: 2026 04 12 23:41:21 Feed: CISA Current Activity Source: Cybersecurity and Infrastructure Security Agency (CISA) Category: News Topic: Cyber Security |
|
|
Article: CISA Adds Five Known Exploited Vulnerabilities to Catalog - published 8 months ago. Content: https://www.cisa.gov/news-events/alerts/2026/03/20/cisa-adds-five-known-exploited-vulnerabilities-catalog Published: 2026 03 20 12:00:00 Received: 2026 04 12 23:41:21 Feed: CISA Current Activity Source: Cybersecurity and Infrastructure Security Agency (CISA) Category: News Topic: Cyber Security |
|
|
Article: CISA Adds One Known Exploited Vulnerability to Catalog - published 8 months ago. Content: https://www.cisa.gov/news-events/alerts/2026/03/25/cisa-adds-one-known-exploited-vulnerability-catalog Published: 2026 03 25 12:00:00 Received: 2026 04 12 23:41:21 Feed: CISA Current Activity Source: Cybersecurity and Infrastructure Security Agency (CISA) Category: News Topic: Cyber Security |
|
Click to Open Code Editor