PT-2026-2012

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the web-based user interface of the ALGO 8180 IP Audio Alerter that allows remote attackers to execute arbitrary code. Authentication is required for...

PT-2026-2023

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the web-based user interface of the ALGO 8180 IP Audio Alerter that allows remote attackers to execute arbitrary code. Authentication is required for...

PT-2026-1768

Name of the Vulnerable Software and Affected Versions Ollama MCP Server affected versions not specified Description This issue allows remote attackers to execute arbitrary code on affected installations of Ollama MCP Server without authentication. The flaw resides in the execAsync method due to...

PT-2026-2019

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the handling of the Replaces header within SIP INVITE requests. The issue stems from insufficient validation of the length of user-supplied data before...

(0Day) ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the web-based user interface. The issue results from the lack of proper...

PT-2026-1998

Name of the Vulnerable Software and Affected Versions Langflow versions 1.4.2 and earlier Description An unauthenticated remote code execution flaw exists in the custom component editor's code validation logic. The application fails to properly validate user-supplied strings provided to the...

Preparing for Post-Quantum Cryptography

Learn what you can do today to prepare for Q-Day...

gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...

How Cisco Talos powers the solutions protecting your organization

Cisco Talos is Cisco's threat intelligence and security research organization that powers Cisco's product portfolio with that intelligence. While we are well known for the security research in our blog, vulnerability discoveries, and our open-source software, you may not be aware of exactly how o...

CVE-2026-21634

creationtimestamp| type| source ---|---|--- 2026-01-05 18:05:12+00:00| seen| Telegram/QHE3ZGhFyl2T5Z4zPcVefx-4WihQCgoreYtJ2GbiYf5-7cY 2026-02-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-128/...

gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...

rxerium-templates

rxerium-templates N...

PT-2026-25339

GNU inetutils telnetd versions prior to 2.8 Description A buffer overflow exists in the LINEMODE SLC Set Local Characters suboption handler of the telnetd daemon. The issue occurs because the add slc function does not verify if the buffer is full before copying data, leading to an out-of-bounds...

Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert

Outpacing React2Shell using pre-breach alerts from Wiz ASM to eliminate exploitable risk before attackers find them...

CVE-2025-15351

creationtimestamp| type| source ---|---|--- 2025-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1202/ 2026-01-23 13:59:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3ucyyrrs2h 2026-01-23 14:20:25+00:00| seen|...

CVE-2025-15349

creationtimestamp| type| source ---|---|--- 2025-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1200/ 2026-01-23 13:12:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3rp3gubn25...

CVE-2025-15348

creationtimestamp| type| source ---|---|--- 2025-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1199/ 2026-01-23 13:12:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3roumxtc2o...

PT-2025-54184

Name of the Vulnerable Software and Affected Versions Anritsu VectorStar affected versions not specified Description A flaw exists in the parsing of CHX files due to insufficient validation of user-supplied data, leading to deserialization of untrusted data. This can allow remote attackers to...

PT-2025-54182

Name of the Vulnerable Software and Affected Versions Anritsu ShockLine affected versions not specified Description A network-adjacent attacker can execute arbitrary code on affected installations of Anritsu ShockLine without authentication. The issue stems from a race condition within the SCPI...

Critical 0day flaw Exposes 70k XSpeeder Devices as Vendor Ignores Alert

Researchers reveal CVE-2025-54322, a critical unpatched flaw in XSpeeder networking gear found by AI agents. 70,000 industrial and branch devices are exposed...