CVE-2026-20131

🚨 CVE-2026-20131 | Критическая RCE в Cisco FMC Неаутентифицированное удаленное выполнение кода в Cisco Secure Firewall Management Center 📌 Обзор Критическая уязвимость десериализации Java до аутентификации , позволяющая удаленным злоумышленникам выполнить код с правами root на устройствах Cisco...

Blackash-CVE-2025-61882

🛡️🚨 CVE‑2025‑61882 — Критическое удалённое выполнение кода без аутентификации в Oracle E‑Business Suite EBS 🚨🛡️ Краткое описание: Критическое удалённое выполнение кода без аутентификации в Oracle E‑Business Suite EBS — затрагивает версии 12.2.3 → 12.2.14, CVSS 9.8 , активно эксплуатируется в...

CVE-2025-55182

📌 CVE-2025-55182 — React2Shell Критическое неаутентифицированное удаленное выполнение кода RCE в React Server Components 📖 Обзор CVE-2025-55182, неофициально названная React2Shell, представляет собой критическую уязвимость удаленного выполнения кода RCE, раскрытую 3 декабря 2025 года в React Serv...

cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Эксплуатируемая уязвимость обхода пути нулевого дня в Apache HTTP Server Apache HTTP Server CVE-2021-41773 эксплуатируется в реальных условиях CVE-2021-42013: Обход пути и удаленное выполнение кода в Apache HTTP Server 2.4.49 и 2.4.50 неполное исправление...

CVE-2018-17456

CVE-2018-17456 1-дневная...

CVE-2021-41773-Apache-RCE

CVE-2021-41773-Apache-RCE В изменении, внесённом в нормализацию путей в Apache HTTP Server 2.4.49, была обнаружена уязвимость. Злоумышленник может использовать атаку обхода пути path traversal, чтобы сопоставлять URL с файлами за пределами каталогов, заданных директивами, подобными Alias. Если...

CVE-2018-10736

creationtimestamp| type| source ---|---|--- 2026-09-15 11:00:47+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4c2acc9-6e65-4f57-906d-6e641b6e31d1 2026-09-22 10:00:07+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-21...

CVE-2018-10735

creationtimestamp| type| source ---|---|--- 2026-09-15 10:00:04+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-14 2026-09-15 11:00:48+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4e434f0-da60-4555-9882-9715560ea4cb 2026-09-17...

CVE-2017-17731

creationtimestamp| type| source ---|---|--- 2026-09-15 10:00:03+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-14 2026-09-15 11:00:44+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0d89868-ad3a-4d69-bd11-cd0baa9058a2 2026-09-17...

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-76461 , carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of...

Astra Linux – Vulnerability in Firefox

An unexpected message in the WebGPU IPC framework could lead to a use-after-free error and an exploitable sandbox escape. There have been reports of attacks exploiting this flaw in real-world scenarios. This vulnerability affects Firefox versions earlier than 97.0.2, Firefox ESR versions earlier...

Astra Linux – Vulnerability in WebKit2GTK

A memory management issue related to “use after free” operations has been addressed through improved memory management practices. This issue is fixed in Safari 16.4.1, iOS 15.7.5, and iPadOS 15.7.5; iOS 16.4.1, and iPadOS 16.4.1; as well as macOS Ventura 13.3.1. Processing maliciously crafted web...

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

Overview On September 10, 2026, GitLab published a critical patch release for GitLab Community Edition CE and Enterprise Edition EE. The release addresses CVE-2026-85706, a critical path traversal vulnerability CWE-22 in the repository commits API with a CVSSv3.1 score of 10.0. According to GitLa...

Exploit for CVE-2026-85706

CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection...

Exploit for CVE-2026-85706

cve-2026-85706 Unauthenticated arbitrary local file read in G...

Cisco IOS XE Web UI - Command Injection

A vulnerability in the web UI component of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to improper input validation in the web UI. An attacker could exploit...

CVE-2024-2851

creationtimestamp| type| source ---|---|--- 2026-09-10 11:00:46+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/64394a9a-b4a1-4a61-ba7b-af896277501e...

Update Chrome now to protect against an actively exploited vulnerability

Chrome is rolling out an update for its desktop browser. The update includes 230 security fixes, one of which is known to be actively exploited. The stable channel has been updated to 153.0.8010.36/.37 for Windows and Mac, and 153.0.8010.36 for Linux. How to update Chrome If you don’t want to wai...

Vulnerability handling in Google Chrome

Google has discovered a vulnerability in the V8 JavaScript engine of Google Chrome. Google reports that this vulnerability is actively exploited with the identifier CVE-2026-87491. It involves an out-of-bounds write operation in the V8 engine of Google Chrome, which occurs in versions prior to...

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

Google on Tuesday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild. The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 CVSS score: N/A, has been described as an out-of-bounds bug in V8, Chrome's...