42327 matches found
CVE-2026-2447 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
CVE-2026-27588
Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's HTTP host request matcher is documented as case-insensitive, but when configured with a large host list 100 entries it becomes case-sensitive due to an optimized matching path. An attacker can bypass...
CVE-2026-27587
Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's HTTP path request matcher is intended to be case-insensitive, but when the match pattern contains percent-escape sequences %xx it compares against the request's escaped path without lowercasing. An...
Malicious code in ultimates-express (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199dbb458ff55c6d08022e6326014d56aceb99ef7748d6e898a6faac9bff201b The package ultimates-express was found to contain malicious code. Source: ghsa-malware...
Romanian Hacker Extradited to US Admits Hacking Oregon State Network
Catalin Dragomir admits to hacking an Oregon government office and selling network access. Read more on the $250k fraud case and his 2026 sentencing...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-25108link is external Soliton Systems K.K. FileZen OS Command Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious...
CVE-2026-21410
creationtimestamp| type| source ---|---|--- 2026-02-24 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-055-01 2026-02-24 21:29:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfn4duq63525 2026-02-24 23:17:32+00:00| seen|...
Gardyn Home Kit (Update B)
RISK EVALUATION Successful exploitation of these vulnerabilities could allow unauthenticated users to access and control edge devices, access cloud-based devices and user information without authentication, and pivot to other edge devices managed in the Gardyn cloud environment. 2. RECOMMENDED...
CVE-2025-68154 vulnerabilities
Vulnerabilities for packages: kibana, gemini-cli...
GHSA-WPHJ-FX3Q-84CH vulnerabilities
Vulnerabilities for packages: kibana, gemini-cli...
CVE-2026-26157 affecting package busybox for versions less than 1.36.1-22
CVE-2026-26157 affecting package busybox for versions less than 1.36.1-22. A patched version of the package is available...
ICSSPulse: A Modular LLM-Assisted Platform for Industrial Control System Penetration Testing
It is well established that industrial control systems comprise the operational backbone of modern critical infrastructures, yet their increasing connectivity exposes them to cyber threats that are difficult to study and remedy safely under real-time operational conditions. In this paper, we...
ImageMagick 安全漏洞
ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-15 and 6.9.13-40 contained security vulnerabilities, which were caused by integer overflows in the...
Linux Distros Unpatched Vulnerability : CVE-2026-2967
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP...
Soliton Systems K.K FileZen OS Command Injection Vulnerability
Soliton Systems K.K FileZen contains an OS command injection vulnerability when an user logs-in to the affected product and sends a specially crafted HTTP request...
Hitachi Energy RTU500 Product
SUMMARY Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. Successful exploitation of these vulnerabilities can result in the exposure of low-value user management information and device outage. Please refer to the Recommended Immediate...
Linux Distros Unpatched Vulnerability : CVE-2025-61143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c. CVE-2025-61143 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2026-3063
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attacker who convinced a user to install a malicious extension to...
Linux Distros Unpatched Vulnerability : CVE-2025-61144
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function. CVE-2025-61144 Note that Nessus relies on the...
