ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

Attackers keep finding new keys. The funny part is that defenders keep inventing where to store them. This week, those keys sit in AI tools, exposed services, old bugs, weak logins, and software sold like a monthly subscription. Some attacks use new tricks. Others just reuse what was already lyin...

SUSE: Security Advisory (SUSE-SU-2026:1171-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-1171

CVE-2026-1171 affects birkir prime up to version 0.4.0.beta.0, specifically the GraphQL Field Handler in the /graphql file. The root cause is a manipulation of an unknown function within that component which can lead to remote denial of service. An exploit has been published and may be used in th...

MiracleLinux 7 : firewalld-0.4.3.2-8.el7 (AXSA:2016-1171:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-1171:01 advisory. firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Security issues fixed with this release:...

EUVD-2026-1171

MicroServer copies parts of the system firmware to an unencrypted external SD card on boot, which contains user and vendor secrets. An attacker can utilize these plaintext secrets to modify the vendor firmware, or gain admin access to the web portal...

CVE-2025-14496

creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1171/...

CVE-2025-1171

A vulnerability classified as problematic was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/CustomerReport.php. The manipulation of the argument Address leads to cross site scripting. The attack can...

CVE-2025-1171 code-projects Real Estate Property Management System CustomerReport.php cross site scripting

A vulnerability classified as problematic was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/CustomerReport.php. The manipulation of the argument Address leads to cross site scripting. The attack can...

CVE-2025-1171

CVE-2025-1171 affects Code-Projects Real Estate Property Management System 1.0. The vulnerability is an cross-site scripting (XSS) flaw in an unknown function of /Admin/CustomerReport.php, triggered by manipulating the Address parameter. It is exploitable remotely and the exploit has been disclos...

CVE-2024-1171

creationtimestamp| type| source ---|---|--- 2024-03-08 23:26:07+00:00| seen| https://t.me/ctinow/203651...

CVE-2024-1171

The CVE-2024-1171 entry concerns the WordPress plugin Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders. A Stored Cross-Site Scripting (XSS) vulnerability exists in the Filterable Gallery Widget for versions up to and including 5.9.8, caused by insuff...

CVE-2022-1171

The Vertical scroll recent post WordPress plugin before 14.0 does not sanitise and escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting...

CVE-2022-1171

The Vertical scroll recent post WordPress plugin before 14.0 does not sanitise and escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting...

CVE-2022-1171 Vertical scroll recent post < 14.0 - Reflected Cross-Site Scripting

The Vertical scroll recent post WordPress plugin before 14.0 does not sanitise and escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting...

CVE-2022-1171

CVE-2022-1171 concerns the WordPress plugin “Vertical scroll recent post” (versions prior to 14.0). The vulnerability is a Reflected Cross‑Site Scripting caused by the plugin not sanitising and escaping a parameter before outputting it in an attribute. Impact described across sources is a client‑...

MSC-2021-1171

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

SUSE: Security Advisory (SUSE-SU-2012:0115-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2012:0115-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : kernel (RHSA-2021:1171)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1171 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: out-of-bounds read in libiscsi...

CVE-2021-1171

The CVE-2021-1171 entry concerns Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers. The issue stems from improper validation of user-supplied input in the web-based management interface, allowing an authenticated attacker with valid administrator credentials to send crafted HTTP requ...