Fortinet FortiSOAR PaaS和Fortinet FortiSOAR on-premise 代码问题漏洞

Fortinet FortiSOAR PaaS and Fortinet FortiSOAR on-premise are security orchestration, automation, and response software developed by Fortinet, a US-based company. Both versions of Fortinet FortiSOAR PaaS and FortiSOAR on-premise have code vulnerabilities that stem from server-side request forgery...

PT-2026-32812

CVE-2026-32086 Concurrent execution using shared resource with improper synchronization 'race condition' in Function Discovery Service fdwsd.dll allows an authorized attacker to… https://t.co/AVyM2yQmdJ...

PT-2026-32794

CVE-2026-32068 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privilege… https://t.co/txSwKIdsD7...

Microsoft Windows SSDP 竞争条件问题漏洞

Microsoft Windows SSDP is a simple service discovery provider program from Microsoft USA. Microsoft Windows SSDP suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

PT-2026-32818

Name of the Vulnerable Software and Affected Versions Function Discovery Service fdwsd.dll affected versions not specified Description A race condition occurs in the Function Discovery Service fdwsd.dll due to concurrent execution using a shared resource with improper synchronization. This allows...

Microsoft Function Discovery Service 安全漏洞

The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Function Discovery Service fdwsd.dll. Attackers can exploit these vulnerabilities to gain elevated privileges. The following product...

Microsoft Function Discovery Service 竞争条件问题漏洞

The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are vulnerabilities related to competition conditions in the Microsoft Function Discovery Service fdwsd.dll. Attackers can exploit these vulnerabilities to gain elevated privileges. The...

Microsoft Function Discovery Service 安全漏洞

The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Function Discovery Service. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versio...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in pyasn1-0.6.1.tar.gz

Summary IBM Watson Discovery Cartridge affected by vulnerability in pyasn1-0.6.1.tar.gz Vulnerability Details CVEID:CVE-2026-23490 DESCRIPTION: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed...

Exploit for Code Injection in Langflow

🎯 FlowBreaker CVE-2026-33017 — HTB-Style Pentest Lab...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in filelock-3.12.2-py3-none-any.whl

Summary IBM Watson Discovery Cartridge affected by vulnerability in filelock-3.12.2-py3-none-any.whl Vulnerability Details CVEID:CVE-2026-22701 DESCRIPTION: filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the...

WordPress GeoDirectory plugin <= 2.8.152 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Tin Pham aka TF1T in WordPress Plugin GeoDirectory versions = 2.8.152...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tar-6.2.1.tgz

Summary IBM Watson Discovery Cartridge affected by vulnerability in tar-6.2.1.tgz Vulnerability Details CVEID:CVE-2026-23950 DESCRIPTION: node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path...

argus

Argus Autonomous vulnerability discovery and exploit validati...

WordPress YML for Yandex Market plugin < 5.0.26 - Shop Manager+ RCE via Feed Generation vulnerability

Shop Manager+ RCE via Feed Generation vulnerability discovered by Alex Tselevich nos3curity in WordPress Plugin YML for Yandex Market versions 5.0.26...

Vulnerability Assessment vs Penetration Testing: What Security Leaders Need to Know

Your organization runs quarterly vulnerability scans. You get a report with hundreds, sometimes thousands, of findings. Your team patches what they can and moves on. Six months later, you bring in a penetration testing firm, and they walk right through your defenses using a chain of...

The vulnerability of the Avahi service detection system in local networks, related to uncontrolled recursion, allows a hacker to trigger a service failure.

The vulnerability of the Avahi service detection system in local networks is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

WordPress LifterLMS plugin <= 9.2.1 - Authenticated (Custom+) SQL Injection via 'order' Parameter vulnerability

Authenticated Custom+ SQL Injection via 'order' Parameter vulnerability discovered by momopon1415 in WordPress Plugin LifterLMS versions = 9.2.1...

The Complete Vulnerability Management Lifecycle: A 6-Stage Framework for Proactive Security

The National Vulnerability Database adds over 2,000 new CVEs every month. No security team can patch them all, and trying to do so is a fast track to burnout. The organizations that stay ahead of breaches aren't the ones that scan the most. They're the ones that follow a structured, repeatable...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: maru, bazelisk, spire-server, spicedb-operator, nri-elasticsearch, nats, sftpgo-plugin-geoipfilter, nuclei, yunikorn-k8shim, spiffe-helper, kyverno-notation-aws, cloud-provider-azure, mockery, q, lazygit, act, dbmate, sftpgo-plugin-eventstore, tofu-controller,...