40867 matches found
CVE-2025-58136
A bug in POST request handling causes a crash under a certain condition. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.1, from 9.0.0 through 9.2.12. Users are recommended to upgrade to version 10.1.2 or 9.2.13, which fix the issue. A workaround for older versions is to...
Cookie-controlled PHP webshells: A stealthy tradecraft in Linux hosting environments
In this article 1. Cookie-controlled execution behavior 2. Observed variants of cookie-controlled PHP web shells 3. Mitigation and protection guidance 4. Microsoft Defender XDR detections 5. Microsoft Security Copilot prompts 6. Microsoft Defender XDR threat analytics 7. MITRE ATT&CK™ Techniques...
CVE-2024-44020
creationtimestamp| type| source ---|---|--- 2026-04-02 15:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mijiy7raoq2w...
CVE-2026-0828
creationtimestamp| type| source ---|---|--- 2026-04-02 14:52:55+00:00| seen| https://bsky.app/profile/oxfemale.bsky.social/post/3mijhhjdi3f2u 2026-04-02 16:54:00+00:00| published-proof-of-concept| https://t.me/P0x3k1N73LL1G3NC3/310 2026-04-02 21:00:04+00:00| published-proof-of-concept|...
CVE-2026-23417
creationtimestamp| type| source ---|---|--- 2026-04-02 14:02:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijen2o7ei23 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...
CVE-2026-4634
Keycloak exposes a Denial of Service vulnerability (CVE-2026-4634) where an unauthenticated attacker can trigger excessive resource consumption by sending a specially crafted POST to the OpenID Connect token endpoint with an excessively long scope parameter, causing prolonged processing and servi...
cpython: POP3 command injection in user-controlled commands
A flaw was found in the poplib module in the Python standard library. The poplib module does not reject control characters, such as newlines, in user-controlled input passed to POP3 commands. This issue allows an attacker to inject additional commands to be executed in the POP3 server...
CVE-2026-35394
creationtimestamp| type| source ---|---|--- 2026-04-02 11:04:41+00:00| published-proof-of-concept| https://github.com/mobile-next/mobile-mcp/security/advisories/GHSA-5qhv-x9j4-c3vm 2026-04-06 23:07:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuexqa2cz25 2026-04-06...
CVE-2026-29144
creationtimestamp| type| source ---|---|--- 2026-04-02 11:00:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mij2ipolcd2s 2026-04-02 11:20:38+00:00| seen| Telegram/gqnqvxcLpfM-QzjKR2b1lJqF9lh4WXmMivWkzQg3SSVoSEI...
CVE-2026-29135
creationtimestamp| type| source ---|---|--- 2026-04-02 10:40:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miizevl4x42n 2026-04-16 21:19:51+00:00| seen| Telegram/3Rneua8sJN4acwbkH9WJwYA0S4fbpKs2cDcX7PKNKVaNXM...
CVE-2026-29136
creationtimestamp| type| source ---|---|--- 2026-04-02 10:35:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miiz3x5tx72d...
An overview of ransomware threats in Japan in 2025 and early detection insights from Qilin cases
In 2025, a total of 134 ransomware incidents were reported in Japan, marking a 17.5% increase compared to 2024. Among these, 22 incidents were attributed to Qilin, representing 16.4% of the total. In 2025, Qilin ransomware was highly active. Looking ahead to 2026, unless there is significant...
EUVD-2026-18132
The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parseauthorpage' function via the 'Receiver::post' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...
lightweight-msf
Lightweight-MSF !License: MIThttps://img.shields.io/badge...
CVE-2026-0686
creationtimestamp| type| source ---|---|--- 2026-04-02 09:15:50+00:00| seen| Telegram/mGlLp0izI3D0-5yUiuFR5RNrOUKpF492R3nyj4h4cSwXA 2026-04-02 10:00:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3miix3yef632n 2026-04-08 14:30:08+00:00| seen|...
CVE-2026-5032
creationtimestamp| type| source ---|---|--- 2026-04-02 08:19:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miiri64r572s 2026-04-02 09:15:50+00:00| seen| Telegram/mGlLp0izI3D0-5yUiuFR5RNrOUKpF492R3nyj4h4cSwXA 2026-04-08 15:30:11+00:00| seen|...
CVE-2026-0686 Webmention <= 5.6.2 - Unauthenticated Blind Server-Side Request Forgery
The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parseauthorpage' function via the 'Receiver::post' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...
CVE-2026-0686 Webmention <= 5.6.2 - Unauthenticated Blind Server-Side Request Forgery
The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parseauthorpage' function via the 'Receiver::post' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...