PT-2026-98409

💻 Опережать атакующего: как находить уязвимости раньше, чем ими воспользуются 15 октября в Санкт-Петербурге пройдёт конференция CNews Петербург: Передовые технологии и кейсы России. На ней Игорь Первушин, руководитель экспертизы СайберОК, выступит с докладом «Опережать атакующего: как находить...

django-DefectDojo v3.3.100

DefectDojo | ---|--- DefectDojo is a DevSecOps, ASPM application security posture management, and vulnerability management tool. DefectDojo orchestrates end-to-end security testing, vulnerability tracking, deduplication, remediation, and reporting. Demo Pro Edition: pro.demo.defectdojo.com OWASP...

django-DefectDojo v3.2.400

DefectDojo | ---|--- DefectDojo is a DevSecOps, ASPM application security posture management, and vulnerability management tool. DefectDojo orchestrates end-to-end security testing, vulnerability tracking, deduplication, remediation, and reporting. Demo Pro Edition: pro.demo.defectdojo.com OWASP...

JavaScript-Example

Seal Security — JavaScript npm Example A minimal, intentionally vulnerable Node.js/Express application used to demonstrate, end‑to‑end, how Seal Security remediates a known CVE by replacing a vulnerable dependency with a sealed backported, drop‑in version — with no change to your declared version...

Beyond Patching: What IT Teams Need to Know About Unfixable Exposures

Executive Summary Most IT teams still operate under a false binary:patch or accept risk. That assumption creates unnecessary operational pressure. Patchless remediation is real and production-proven. Mitigate, Uninstall, Run Custom Scripts, Isolate ; close exposure when no reliable patch exists...

The patch window is collapsing: Why security needs a new control plane

For decades, cybersecurity defenders have relied on a relatively straightforward model: a vulnerability is disclosed, security teams assess exposure, test available fixes, deploy patches into production, and ultimately close the risk before attackers can exploit it at scale. That model increasing...

Frontier AI: Vulnerability Management's Systemic Revolution

Vulnerability management has been a staple of security programs since the dawn of the cybersecurity discipline. The symbiotic relationship between vulnerability and patch management teams has also existed for that time and has gone through waves of contention and thankfulness. While this...

CVE-2026-14948

creationtimestamp| type| source ---|---|--- 2026-08-20 08:20:38+00:00| seen| https://infosec.exchange/users/certvde/statuses/117126859166464287 2026-08-20 11:01:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7dz2im3xr7qze...

Faraday 5.23.2

Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...

CVE-2026-62590

creationtimestamp| type| source ---|---|--- 2026-08-19 18:17:23+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 15:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtr4m6z66n2u...

CVE-2026-62594

creationtimestamp| type| source ---|---|--- 2026-08-19 18:17:13+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-62442

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:45+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71129

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:34+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60797

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:13+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60752

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:09+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60796

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:06+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60757

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:00+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70909

creationtimestamp| type| source ---|---|--- 2026-08-19 17:52:48+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70901

creationtimestamp| type| source ---|---|--- 2026-08-19 17:52:31+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-29 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mua42fxwov2f...

CVE-2026-70900

creationtimestamp| type| source ---|---|--- 2026-08-19 17:52:29+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 16:07:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu3a5k54v324...