Lucene search
+L

13611 matches found

The Hacker News
The Hacker News
added 3 days ago7 views

The Network Has Become the Control Plane for AI Security

Network firewalls are the workhorses of modern cybersecurity. They are trusted to protect the network, blocking malicious traffic and preventing intrusions and breaches. And for decades, network security teams have built controls around a relatively stable model: users connect to applications,...

5.9AI score
SaveExploits0
OSV
OSV
added 6 days ago8 views

BIT-DOTNET-2026-50528 .NET Security Feature Bypass Vulnerability

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network...

8.2CVSS7.1AI score0.00551EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 6 days ago8 views

PT-2026-65274

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versions prior to 26.6 Description An app may be able to access sensitive user data because information is sent over t...

6.5CVSS5.4AI score0.00196EPSS
SaveExploits0References6
Circl
Circl
added 2026/07/26 7:1 a.m.9 views

CISCO-SA-20180409-SMI

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:51+00:00| seen| https://t.me/KaitNews/7703 2026-07-27 00:01:35+00:00| seen| https://t.me/KaitNews/7703 2026-07-29 03:00:03+00:00| seen| https://t.me/KaitNews/7703 2026-07-30 00:03:17+00:00| seen| https://t.me/KaitNews/7703...

5.8AI score
SaveExploits0References1
EUVD
EUVD
added 2026/07/24 12:1 a.m.5 views

EUVD-2026-48460

Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network...

10CVSS5.2AI score0.00673EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/21 12:38 p.m.30 views

CVE-2026-16389 Incorrect boundary conditions, integer overflow in the Libraries component in NSS

Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

0.00422EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/21 12:38 p.m.9 views

CVE-2026-16389

Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

9.8CVSS5.2AI score0.00422EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/21 12:38 p.m.24 views

CVE-2026-16389

CVE-2026-16389 affects the Libraries component of NSS. The root cause is described as incorrect boundary conditions that lead to an integer overflow. The vulnerability is rated high (CVSS v3.1 base score 9.8; CRITICAL; network attack vector, no privileges, no user interaction) and would impact sy...

9.8CVSS5.2AI score0.00422EPSS
SaveExploits0References3Affected Software2
Vulnrichment
Vulnrichment
added 2026/07/21 12:38 p.m.7 views

CVE-2026-16389 Incorrect boundary conditions, integer overflow in the Libraries component in NSS

Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

5.2AI score0.00422EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/21 12:38 p.m.7 views

CVE-2026-16389

Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

9.8CVSS5.3AI score0.00422EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.7 views

PT-2026-61901

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description An integer overflow occurs in the Libraries component of NSS due to incorrect boundary conditions. An integer overflow is a condition where an arithmetic operation...

10CVSS5.9AI score0.09348EPSS
SaveExploits0References264
RedHat Linux
RedHat Linux
added 2026/07/20 7:32 p.m.10 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS5.6AI score0.00655EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/20 12:4 p.m.5 views

CVE-2026-64623 Network-AI before 5.13.4 Cryptographic Signature Verification Bypass

Network-AI before 5.13.4 contains an improper cryptographic signature verification vulnerability in APSAdapter where the default local verifier accepts any non-empty string as valid. Unauthenticated attackers can submit forged APS delegation payloads with arbitrary scopes to bypass signature...

8.8CVSS5.5AI score0.002EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/19 12:2 p.m.33 views

CVE-2026-63831 mac802154: llsec: add skb_cow_data() before in-place crypto

In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skbcowdata before in-place crypto llsecdoencryptunauth, llsecdoencryptauth, llsecdodecryptunauth, and llsecdodecryptauth all perform in-place cryptographic transformations on skb data. They build a scatterli...

8.8CVSS0.00243EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/18 12:13 p.m.3 views

SUSE-SU-2026:22755-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIGX86 is set bsc1256615. - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. -...

9.8CVSS6.4AI score0.00595EPSS
SaveExploits8References51
OSV
OSV
added 2026/07/16 8:59 a.m.4 views

SUSE-SU-2026:22697-1 Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. - CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats bsc1263094....

9.8CVSS6.5AI score0.00595EPSS
SaveExploits8References43
OSV
OSV
added 2026/07/16 8:59 a.m.3 views

SUSE-SU-2026:22730-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIGX86 is set bsc1256615. - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. -...

9.8CVSS5.7AI score0.00595EPSS
SaveExploits8References51
OSV
OSV
added 2026/07/16 8:24 a.m.5 views

SUSE-SU-2026:22694-1 Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. - CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats bsc1263094....

9.8CVSS6.5AI score0.00595EPSS
SaveExploits8References43
OSV
OSV
added 2026/07/16 8:24 a.m.3 views

SUSE-SU-2026:22715-1 Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. - CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats bsc1263094....

9.8CVSS5.8AI score0.00595EPSS
SaveExploits8References43
CVE
CVE
added 2026/07/14 5:5 p.m.23 views

CVE-2026-47632

Azure Monitor Agent Metrics Extension is affected by CVE-2026-47632 due to improper certificate validation, enabling elevation of privileges for an unauthenticated attacker on an adjacent network. Exploitation details are not provided in the connected documents. CVSSv3.1 base score 8.8 (High): AV...

8.8CVSS6.1AI score0.00313EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder