home.social

Search

518 results for “CV”

  1. The Threat Codex @threatcodex

    CVE-2026-0322: Actively Exploited PAN-OS RCE Flaw Enables Root Access

    socprime.com/blog/cve-2026-032

    #cve_2026_0322
  2. Jeff Hall - PCIGuru :verified: @jbhall56

    CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on. darkreading.com/vulnerabilitie

  3. OffSequence @offseq

    CVE-2026-19863: EthereumAuthenticator (v12.1.0 – 12.1.12) has a CRITICAL flaw (CVSS 9.3) where login path substrings in resource URLs allow auth bypass. Patch status unconfirmed — adjust configs to mitigate. radar.offseq.com/threat/cve-20

    #offseq #cve202619863 #infosec #vuln
  4. CVEDatabase.com @cvedatabase

    Security Tip: Shift security left by automating dependency scanning! 🛡️ Integrating tools like Snyk or Trivy into your CI/CD pipeline ensures that vulnerable packages are identified before they are deployed. Don't let a known CVE in a third-party library become your next incident. Stay updated on the latest vulnerabilities and remediation steps at cvedatabase.com

    #cve #cybersecurity #infosec #appsec #devsecops
  5. Security Crawler Carl @security_crawler_carl

    CVE-2026-89107 lands a 9.9, injecting arbitrary ABAP code into S/4HANA, while CVE-2026-89108 sneaks an unauthorized admin account onto your Java app server via Manufacturing Integration and Intelligence. The defender is down in three corners simultaneously — that's just bad ring awareness.

    Apply SAP's October 2026 Security Patch Day updates to NetWeaver, S/4HANA, and related products immediately.

    Reward: You've unlocked the Folding Chair of Humility — spectators only get one. (2/3)

  6. OffSequence @offseq

    CVE-2026-16438 (CRITICAL, CVSS 9.4): Incorrect privilege assignment in Mitsubishi GENESIS64 & related products. Admin users can launch DCOM objects, risking DoS & data loss. Restrict admin access & monitor usage. radar.offseq.com/threat/cve-20

    #offseq #ics #vulnerability
  7. Hugo | DevOps | Cybersecurity @[email protected]

    CVE-2026-94501 jshERP auth bypass lets any authenticated user rewrite role mappings and escalate privileges. CVSS 8.8, no patch yet. Restrict access and monitor userBusiness endpoints. valtersit.com/cve/CVE-2026-945 #CVE #infosec #cybersecurity

    #cybersecurity #infosec #cve
  8. Dev Community @[email protected]
    CVE-2026-90970, CVSS 9.9: an authenticated user with Duo Agent Platform access escapes GitLab's prompt sandbox and runs commands on the gateway server. The door between natural language and internal systems is the new attack surface.#security #ai #gitlab #vulnerability #software #coding #development #engineering #inclusive #community
    GitLab AI Gateway sandbox escape leads to full RCE
    #gitlab #inclusive #engineering #development #vulnerability #coding
  9. Hugo | DevOps | Cybersecurity @[email protected]

    CVE-2026-71543 OpenBao privilege escalation via templated ACL, PKI and SSH policies, CVSS 6.8. Patch under review, so pin to 2.6.0 when it lands. valtersit.com/cve/CVE-2026-715 #CVE #infosec #OpenBao

    #cve #infosec #openbao
  10. Hugo | DevOps | Cybersecurity @[email protected]

    CVE-2026-55870 GoCD before 26.1.0 leaks unmasked credentials from material URLs via read-only APIs to any authenticated user. CVSS 6.5. Patch under review, restrict access now. valtersit.com/cve/CVE-2026-558 #CVE #infosec #GoCD

    #cve #infosec #gocd
  11. FreddyB Aviation Photography @[email protected]

    USAF F-16C 89-2048 "Wraith" 64th Aggressor Squadron "Gomers", Nellis AFB running the R-2508 Sidewinder Low Level Complex, May 28th 2026 #F16C #USAF #aggressor #Sidewinder #NellisAFB #milair #Wraith #planespotting #AvGeek #spotter #photography #Nikon #cvvhrn #R2508 #lowlevel #lowleveljets

    #f16c #usaf #aggressor #sidewinder #nellisafb #milair
  12. FreddyB Aviation Photography @[email protected]

    USAF EA-37B Compass Call 20-2344 on final for Pt. Mugu during Grey Flag. September 2026 #usaf #EA37B #compasscall #gulfstream #aviationphotography #photography #aircraft #greyflag #nasptmugu #Nikon #aircraft #Z9 #cvvhrn

    #usaf #ea37b #compasscall #gulfstream #aviationphotography #photography
  13. FreddyB Aviation Photography @[email protected]

    Royal Australian Air Force E-7 Wedgetail A30-005 begins to cycle it gear just before its mid field break on during Grey Flag, September 2026 #E7 #WedgeTail #RAAF #Australia #GreyFlag #photography #aircraft #AWACS #nasptmugu #Nikon #radar #nikonphotgraphy #Z9 #avgeek #photography #cvvhrn

    #e7 #wedgetail #raaf #australia #greyflag #photography
  14. RedPacket Security @[email protected]

    CVE Alert: CVE-2026-94197 - F5 - NGINX Ingress Controller - redpacketsecurity.com/cve-aler

    #OSINT #ThreatIntel #CyberSecurity #cve-2026-94197 #f5 #nginx-ingress-controller

    #osint #threatintel #cybersecurity #cve #f5 #nginx
  15. RedPacket Security @[email protected]

    CVE Alert: CVE-2026-110648 - adamarcanov - compress-fonts - redpacketsecurity.com/cve-aler

    #OSINT #ThreatIntel #CyberSecurity #cve-2026-110648 #adamarcanov #compress-fonts

    #osint #threatintel #cybersecurity #cve #adamarcanov #compress
  16. RedPacket Security @[email protected]

    CVE Alert: CVE-2026-110633 - Report One - MyReport Updater - redpacketsecurity.com/cve-aler

    #OSINT #ThreatIntel #CyberSecurity #cve-2026-110633 #report-one #myreport-updater

    #osint #threatintel #cybersecurity #cve #report #myreport
  17. RedPacket Security @[email protected]

    CVE Alert: CVE-2026-110641 - runnerty - @runnerty/executor-decompress - redpacketsecurity.com/cve-aler

    #OSINT #ThreatIntel #CyberSecurity #cve-2026-110641 #runnerty #runnerty-executor-decompress

    #osint #threatintel #cybersecurity #cve #runnerty
  18. RedPacket Security @[email protected]

    CVE Alert: CVE-2026-110623 - papermerge - papermerge-core - redpacketsecurity.com/cve-aler

    #OSINT #ThreatIntel #CyberSecurity #cve-2026-110623 #papermerge #papermerge-core

    #osint #threatintel #cybersecurity #cve #papermerge
  19. RedPacket Security @[email protected]

    CVE Alert: CVE-2026-110628 - kanbn - kan - redpacketsecurity.com/cve-aler

    #OSINT #ThreatIntel #CyberSecurity #cve-2026-110628 #kanbn #kan

    #osint #threatintel #cybersecurity #cve #kanbn #kan
  20. RedPacket Security @[email protected]

    CVE Alert: CVE-2026-110646 - beganovich - snappdf - redpacketsecurity.com/cve-aler

    #OSINT #ThreatIntel #CyberSecurity #cve-2026-110646 #beganovich #snappdf

    #osint #threatintel #cybersecurity #cve #beganovich #snappdf
  21. RedPacket Security @[email protected]

    CVE Alert: CVE-2026-110621 - Swetrix - swetrix - redpacketsecurity.com/cve-aler

    #OSINT #ThreatIntel #CyberSecurity #cve-2026-110621 #swetrix #

    #osint #threatintel #cybersecurity #cve #swetrix
  22. Hugo | DevOps | Cybersecurity @[email protected]

    CVE-2026-68919 GoCD stored XSS, CVSS 8.7. Crafted material comments run JS in other users' sessions across pipeline views. Patch still under review - restrict material write access and watch for updates. valtersit.com/cve/CVE-2026-689 #CVE #infosec #GoCD

    #cve #infosec #gocd
  23. Hugo | DevOps | Cybersecurity @[email protected]

    CVE-2026-77521 MaxKB CVSS 10: shell execute tool exposed without approval, untrusted chat input leads to RCE. Patch is under review, so isolate or disable MAXKB_SANDBOX now. valtersit.com/cve/CVE-2026-775 #CVE #infosec #MaxKB

    #cve #infosec #maxkb
  24. Hugo | DevOps | Cybersecurity @[email protected]

    CVE-2026-94497 jshERP through 3.6 IDOR: authenticated users can read, modify, delete others' business objects. CVSS 8.3, unpatched. Restrict access now. valtersit.com/cve/CVE-2026-944 #CVE #infosec #jshERP

    #cve #infosec #jsherp
  25. OffSequence @offseq

    CVE-2026-110770: Databasus 3.7.0 – 3.61.0 has a CRITICAL auth bypass flaw — unauthenticated attackers can brute-force password reset codes via /api/v1/users/reset-password. Patch unconfirmed — apply external mitigations. radar.offseq.com/threat/databa

    #offseq #cve2026110770 #infosec
  26. Hugo | DevOps | Cybersecurity @[email protected]

    CVE-2026-73550 Envoy CVSS 7.5: HTTP/2 Host header bypasses limit accounting, unauthenticated DoS via HPACK indexing. Fixed in 1.36.10, 1.37.6, 1.38.4, 1.39.1. Patch now. valtersit.com/cve/CVE-2026-735 #CVE #infosec #Envoy

    #cve #infosec #envoy
  27. OffSequence @offseq

    CVE-2026-110858 | GitPython 3.1.30 – 3.2.0: CRITICAL RCE via improper argument neutralization in Remote.pull(). Attackers can run arbitrary OS commands over SSH/local. Limit use & watch for patches. radar.offseq.com/threat/cve-20

    #offseq #gitpython #rce #infosec
  28. The Threat Codex @threatcodex

    CVE-2026-96951: Actively Exploited Windows Shell Zero-Day Bypasses Mark of the Web

    socprime.com/blog/cve-2026-969

    #cve_2026_96951 #microsoftoperatingsystems
  29. Yazoul - Cybersecurity Alerts @[email protected]

    🔴 New security advisory:

    CVE-2026-76519 affects multiple systems.

    • Impact: Remote code execution or complete system compromise possible
    • Risk: Attackers can gain full control of affected systems
    • Mitigation: Patch immediately or isolate affected systems

    Full breakdown:
    yazoul.net/advisory/cve/cve-20

    by Yazoul AI

    #CVE #SecurityPatching #HackerNews

    #cve #securitypatching #hackernews
  30. RedPacket Security @[email protected]

    CVE Alert: CVE-2026-110618 - pppscn - SmsForwarder - redpacketsecurity.com/cve-aler

    #OSINT #ThreatIntel #CyberSecurity #cve-2026-110618 #pppscn #smsforwarder

    #osint #threatintel #cybersecurity #cve #pppscn #smsforwarder
Next page
Share on Mastodon

Enter the server where you have an account.