Lucene search
+L

32884 matches found

Qualys Blog
Qualys Blog
•added 2026/07/08 5:38 p.m.•19 views

FortiBleed: Credential Reuse, Legacy Hashes, and the Risk of Internet-Exposed FortiGate Devices

Key Takeaways FortiBleed refers to June 2026 public reporting of large-scale credential exposure and abuse targeting internet-reachable FortiGate management and SSL-VPN gateways driven by credential reuse and brute-force, not a single new zero-day. Risk is highest for internet-exposed FortiGate...

9.8CVSS7.1AI score0.85796EPSS
SaveExploits1
RedHat Linux
RedHat Linux
•added 2026/07/08 3:52 p.m.•52 views

Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update

Red Hat Edge Manager Version 1.0.3 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...

10CVSS6.4AI score0.01625EPSS
SaveExploits4References26
RedHat Linux
RedHat Linux
•added 2026/07/08 10:08 a.m.•33 views

Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update

Red Hat Edge Manager Version 1.0.3 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...

10CVSS6.5AI score0.02618EPSS
SaveExploits8References28
Positive Technologies
Positive Technologies
•added 2026/07/08 12:00 a.m.•27 views

PT-2026-56911

Name of the Vulnerable Software and Affected Versions PAN-OS affected versions not specified Description An issue in the management web interface of PAN-OS software, affecting PA-Series and VM-Series firewalls as well as Panorama virtual and M-Series, allows an unauthenticated attacker with netwo...

6.9CVSS6.6AI score0.00293EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/07/08 12:00 a.m.•11 views

The vulnerability of the clone_dtr() function in the drivers/md/dm-clone-target.c file of the Linux kernel driver for multiple device types (RAID and LVM), which allows a hacker to cause service failure.

The vulnerability of the clonedtr function in the drivers/md/dm-clone-target.c file of the Linux kernel driver for multiple device types RAID and LVM is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00244EPSS
SaveExploits0References10Affected Software2
HackRead
HackRead
•added 2026/07/07 10:24 p.m.•45 views

Why Unity Remains the Most Popular Engine for Mobile Games

Learn why Unity is still a trusted engine for mobile games, from faster prototyping and Android and iOS support to tools that help studios scale after releases...

6AI score
SaveExploits0
OSV
OSV
•added 2026/07/07 4:03 p.m.•20 views

PYSEC-2026-1326 ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component

Summary An integer overflow in the API component's protobuf decoder allows denial-of-service attacks when API encryption is not used. Details The bounds check ptr + fieldlength end in components/api/proto.cpp can overflow when a malicious client sends a large fieldlength value. This affects all...

6.8CVSS6AI score0.00305EPSS
SaveExploits0References8
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/07 3:34 p.m.•41 views

Malicious code in nonexistent-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9393b3fc67ac5c169de7089d2f5100b5cb49af4e2b747b46726660bebc2bf66a No a static rule matches and no traced behavioral findings were produced for this package version. Nothing in the analyzed artifacts indicates...

6.2AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/07 3:20 p.m.•37 views

Malicious code in chai-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9192d163b3814064c95a23cb11e218732346628f3109517aab7697c2dcb6d016 On require, index.js spawns a detached background node process that runs lib/initializeCaller.js. That module axios.gets a base64-obfuscated URL...

6.2AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/07/07 2:32 p.m.•20 views

EUVD-2026-42048

A stored cross-site scripting XSS vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the...

4.8CVSS5.8AI score0.00418EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/07 2:32 p.m.•17 views

CVE-2026-12948 Stored Cross-Site Scripting (XSS)

A stored cross-site scripting XSS vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the...

4.8CVSS5.8AI score0.00418EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/07/07 6:23 a.m.•27 views

SEIKO EPSON printers and scanners Web Config vulnerable to cross-site request forgery

Overview Web Config embedded in multiple printers and scanners provided by SEIKO EPSON CORPORATION contains the following vulnerability. Cross-site request forgery CWE-352 - CVE-2026-58315 Kentaro Ishii of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated...

5.1CVSS6.1AI score0.00148EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/07/07 2:35 a.m.•21 views

SUSE CVE-2026-13912

Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6AI score0.00245EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/07/07 12:00 a.m.•19 views

The vulnerability of the amdgpu_cs parser_init() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c driver code allows a hacker to cause a service failure in AMD GPU-based Linux operating system DRI infrastructure.

The vulnerability of the amdgpucs parserinit function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c driver module relates to the pointer manipulation in the AMD GPU kernel support for Linux operating systems. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00278EPSS
SaveExploits0References23Affected Software2
Android Security Bulletins
Android Security Bulletins
•added 2026/07/07 12:00 a.m.•93 views

Pixel Update Bulletin—July 2026Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2026-07-05 or later address all issues in this bulletin and all issues in the July 2026 Android Securit...

6.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/07/07 12:00 a.m.•20 views

Cisco IOS Software TWAMP DoS (cisco-sa-twamp-kV4FHugn)

According to its self-reported version, Cisco IOS is affected by a vulnerability. - A vulnerability in the Two-Way Active Measurement Protocol TWAMP server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reloa...

8.6CVSS6.8AI score0.00514EPSS
SaveExploits0References6
VulnCheck KEV
VulnCheck KEV
•added 2026/07/07 12:00 a.m.•10 views

VulnCheck KEV: CVE-2020-22653

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 SCG200 before 3.6.2.0.795, SmartZone 100 SZ-100 before 3.6.2.0.795, SmartZone 300 SZ300 before 3.6.2.0.795, Virtua...

9.8CVSS5.3AI score0.00553EPSS
SaveIn wildExploits0References3
VulnCheck KEV
VulnCheck KEV
•added 2026/07/07 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-22658

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 SCG200 before 3.6.2.0.795, SmartZone 100 SZ-100 before 3.6.2.0.795, SmartZone 300 SZ300 before 3.6.2.0.795, Virtua...

9.8CVSS5.2AI score0.00511EPSS
SaveIn wildExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/07 12:00 a.m.•13 views

Cisco IOS XE Software TACACS+ Authentication Bypass (cisco-sa-ios-tacacs-hdB7thJw)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass...

8.1CVSS7.3AI score0.00432EPSS
SaveExploits0References4
OSV
OSV
•added 2026/07/06 8:24 p.m.•10 views

GHSA-H444-6J9X-P8VH mv: symlinks expanded during cross-device move (resource exhaustion / data duplication)

When moving directories across filesystems, uutils mv dereferences symlinks inside the tree, copying their targets as real files/dirs instead of preserving the symlinks. GNU preserves symlinks by default. E.g. a etclink - /etc inside the source becomes a full copy of /etc at the destination...

6.6CVSS5.9AI score0.00187EPSS
SaveExploits0References6
Rows per page
Query Builder