CVE-2026-36837

creationtimestamp| type| source ---|---|--- 2026-04-30 04:05:18+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116491675981426045 2026-04-30 21:58:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqmbwcjls2c...

SUSE CVE-2026-6238

The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response,...

[SECURITY] Fedora 42 Update: asterisk-18.26.4-1.fc42

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

[SECURITY] Fedora 43 Update: asterisk-18.26.4-1.fc43

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

[SECURITY] Fedora 44 Update: asterisk-18.26.4-1.fc44

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

A China-aligned threat group is exploiting unpatched Microsoft Exchange vulnerabilities to conduct cyberespionage against government and critical infrastructure targets across Asia and beyond...

CVE-2026-40552

creationtimestamp| type| source ---|---|--- 2026-04-29 16:42:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116488991780858575...

CLSA-2026-1777455730 openssh: Fix of CVE-2026-3497

CVE-2026-3497: fix information disclosure or denial of service due to uninitialized variables in GSSAPI key exchange...

CVE-2026-41526

creationtimestamp| type| source ---|---|--- 2026-04-29 04:21:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116486078154329890...

CVE-2026-7344

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkluz3q2ea2c 2026-04-29 01:30:27+00:00| seen|...

CVE-2026-7343

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:00:44+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkls6yfyxg2p 2026-04-29 00:01:01+00:00| seen|...

CVE-2026-31688

creationtimestamp| type| source ---|---|--- 2026-04-28 16:58:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116483390904195645...

CVE-2026-24231

creationtimestamp| type| source ---|---|--- 2026-04-28 16:55:35+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116483372219679349...

Chinese Silk Typhoon Hacker Extradited to U.S. Over COVID Research Cyberattacks

A Chinese national accused of being a member of the Silk Typhoon hacking group has been extradited to the U.S. from Italy. Xu Zewei, 34, was arrested in July 2025 by Italian authorities for his alleged links to the Chinese state-sponsored threat group and for orchestrating cyber attacks against...

EUVD-2026-26012

In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 fixed in 1.0.6, 1.1.0 - 1.1.4 fixed in 1.1.5...

CVE-2026-40979

In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 fixed in 1.0.6, 1.1.0 - 1.1.4 fixed in 1.1.5...

CVE-2026-7204

creationtimestamp| type| source ---|---|--- 2026-04-28 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116479743048315445 2026-04-28 01:44:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjhishfjn2r 2026-04-28 02:00:31+00:00| seen|...

CVE-2026-7155

creationtimestamp| type| source ---|---|--- 2026-04-28 00:00:45+00:00| seen| https://infosec.exchange/users/offseq/statuses/116479390119769333 2026-04-28 00:00:47+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkjbq6b5vx2o 2026-04-28 01:11:55+00:00| seen|...

Ubuntu 16.04 LTS / 18.04 LTS : GStreamer Bad Plugins vulnerabilities (USN-8205-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8205-1 advisory. It was discovered that multiple plugins in GStreamer contained arithmetic overflows. An attacker could possibly use this issue to cause...

VMware Spring AI 安全漏洞

VMware Spring AI is a development framework by the American company VMware, which integrates artificial intelligence and large language model capabilities into the Spring ecosystem. Versions 1.0.0 to 1.0.5, as well as 1.1.0 to 1.1.4 of VMware Spring AI, have security vulnerabilities. These...