home.social

Search

324 results for “CV”

  1. eSecurity Planet @esecurityplanet

    CVE-2026-85097 Bricksforge Vulnerability: What Site Owners Must Know esecurityplanet.com/cybersecur

  2. packet storm @packet_storm

    CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab packetstorm.news/news/view/453

    #news
  3. CVEDatabase.com @cvedatabase

    Security Tip: Don't rely on 'latest' tags for your software dependencies. 🛡️ Pinning specific versions (or using lockfiles) is crucial for reproducible builds and protection against malicious package injections. However, pinning isn't 'set and forget.' Use automated tools to notify you of security updates and audit them before merging. Track the latest vulnerabilities at cvedatabase.com

    #infosec #cve #cybersecurity #appsec #devsecops
  4. NHL News @[email protected]

    CVC Field Hockey Tournament: Notre Dame-PDS, Allentown-Princeton to clash in semis rawchili.com/nhl/685925/ #HighSchoolSports #Hockey #NewJersey #sports #TopStoriesTrt

    #highschoolsports #hockey #newjersey #sports #topstoriestrt
  5. ekiledjian @edwardk

    CVE-2026-0257: GlobalProtect VPN Exploited by Ransomware

    ReliaQuest’s October 11 update confirms the Qilin and Settra ransomware operations are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks' GlobalProtect VPN, forging authentication cookies to open fully authorized sessions without credentials. Where a portal reuses its TLS certificate to encrypt the authentication cookie, the public key from an ordinary handshake is enough to mint a session as any user, administrators included; exploitation has been running since mid-May 2026. thecybersecguru.com/news/cve-2

  6. The Threat Codex @threatcodex

    CVE-2026-97229: Critical GitLab RCE Flaw Enables Unauthenticated Code Execution

    socprime.com/blog/cve-2026-972

    #gitlab #cve_2026_97229
  7. OffSequence @offseq

    CVE-2026-109157: CRITICAL stack-based buffer overflow in TRENDnet TEW-432BRP (v3.10B20). Remote exploit possible via public code — no patch, device EOL. Mitigate by replacing hardware and isolating mgmt interfaces. radar.offseq.com/threat/cve-20

    #offseq #vulnerability #routersecurity
  8. CVEDatabase.com @cvedatabase

    Security Tip: A written Incident Response (IR) plan is only as good as its last test. 🛡️ Don't wait for a real breach to find out your team's contact list is outdated or your backup restoration process is too slow. Conduct quarterly tabletop exercises with stakeholders from IT, Legal, and HR to refine your strategy. Practice ensures a calm, effective response when it matters most. Stay ahead of threats with cvedatabase.com

    #cybersecurity #infosec #incidentresponse
  9. OffSequence @offseq

    CVE-2026-109110: CRITICAL OS command injection in Wavlink WL-WN592AX6 (v250422). Remote attackers can execute OS commands — exploit published. No patch. Restrict access & monitor activity. radar.offseq.com/threat/cve-20

    #offseq #cve2026109110 #iotsecurity #vuln
  10. OffSequence @offseq

    CVE-2026-108971 (CRITICAL, CVSS 9.4) in D-Link DCS-930L: improper cryptographic signature verification in Emergency HTTP Recovery Server allows remote, unauthenticated firmware install. Exploit is public. Restrict access & monitor activity. radar.offseq.com/threat/cve-20

    #offseq #dlink #iot #vuln
  11. OffSequence @offseq

    CVE-2026-109758: CRITICAL prototype pollution in Perforce Helix Authentication Service (2022.1-2025.2). Default SCIM token enables attacker access, user/group manipulation, and RCE risk. Upgrade to 2026.1. radar.offseq.com/threat/cve-20

    #offseq #cve2026109758 #infosec #vuln
  12. OffSequence @offseq

    CVE-2026-87689 | CRITICAL in Metasploit Framework <=6.5.4: Missing auth on REST API lets unauthenticated users fully access and modify credentials. Upgrade to 6.5.5 or restrict msf-ws access. radar.offseq.com/threat/cve-20

    #offseq #metasploit #cve202687689 #infosec
  13. OTX Bot @[email protected]

    Threat Overview: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Being Exploited in Production Environments (Updated September 30)

    Two critical zero-day vulnerabilities in NetScaler ADC and Gateway systems are being actively exploited in the wild. CVE-2026-88771 is a remote code execution vulnerability allowing unauthenticated command injection, while CVE-2026-88772 is a DTLS memory overflow flaw enabling RCE or DoS attacks. Threat actors deployed webshells through these vulnerabilities to establish initial access and persistence. The CVE-2026-88771 exploitation involves a three-stage command injection chain poisoning log files, while CVE-2026-88772 exploitation drops .deb webshell files. Attackers used PHP webshells with RC4 encryption for command and control communications, targeting custom directories within NetScaler Gateway interfaces. Cortex Xpanse identified over 50,000 potentially vulnerable exposed instances.

    Pulse ID: 6ac9eef4bcc05a59cd402770
    Pulse Link: otx.alienvault.com/pulse/6ac9e
    Pulse Author: AlienVault
    Created: 2026-10-10 07:53:24

    Be advised, this data is unverified and should be considered preliminary. Always do further verification.

    #CVE202688771 #CVE202688772 #NetScaler #DoS #OTX #AlienVault

    #cve202688771 #cve202688772 #netscaler #dos #otx #alienvault
  14. SIGINT 🛡️🤖 @sigint

    🚨🐛 SIGINT // Cybersecurity Watch — 2026-10-13
    Attackers weaponized a critical SonicWall flaw within days of disclosure—patch immediately before exploitation spreads further.
    securityweek.com/critical-soni

    #cve #infosec #sonicwall #cybersecurity
  15. CVEDatabase.com @cvedatabase

    Security Tip: Don't let your supply chain be a black box. 🛡️

    A Software Bill of Materials (SBOM) is essential for modern security. By maintaining a machine-readable inventory of all components, your team can instantly identify if a newly disclosed CVE affects your environment.

    Automate SBOM generation in your CI/CD pipeline to stay ahead of emerging threats.

    Stay informed: cvedatabase.com

    #infosec #cybersecurity #sbom #cve #supplychain
  16. The Threat Codex @threatcodex

    Attackers are exploiting SonicWall SMA 1000 vulnerability, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after its public disclosure.

    securityaffairs.com/200816/hac

    #cve_2026_102255
  17. The Threat Codex @threatcodex

    Critical Unauthenticated Arbitrary File Upload Vulnerability Exploited in Bricksforge Plugin

    patchstack.com/articles/critic

    #cve_2026_85097 #bricksforge
  18. ege @ege

    CVE-2026-107651 Eye of Gnome (eog) Heap Buffer Overflow PoC gist.github.com/EgeBalci/2dca1

  19. CVEDatabase.com @cvedatabase

    Security Tip: Your patch management strategy is only as good as your asset inventory. 🛡️ You cannot secure or patch what you cannot see. Shadow IT and forgotten servers are the primary targets for attackers. Maintain a real-time, automated inventory of all hardware, software, and cloud assets to ensure every vulnerability is tracked and remediated. Stay informed at: cvedatabase.com

    #infosec #cybersecurity #cve #patchmanagement #assetinventory
  20. OffSequence @offseq

    CVE-2026-85097 | Bricksforge WordPress plugin <=3.1.8.9 faces a HIGH severity vuln exploited in the wild. Attackers can upload arbitrary files for RCE. Update to 3.1.8.10 immediately. radar.offseq.com/threat/bricks

    #offseq #wordpress #vuln #infosec
  21. Bob Lord 🔐 :donor: @boblord

    CVE:
    A CVE (Common Vulnerabilities and Exposures) is a public record of a known security defect, and a shared language for discussing defects. A record can include a description, severity score, and links to fixes.

    Counting CVEs tells you little. A rising count can mean a worsening product or a maturing discovery program. A low count can mean a safe product or a manufacturer that isn't looking.

  22. CVEDatabase.com @cvedatabase

    Security Tip: Don't let your patch backlog overwhelm you. 🛡️ Use the CISA Known Exploited Vulnerabilities (KEV) catalog to guide your remediation strategy. While CVSS scores provide severity, KEV confirms real-world exploitation. Prioritizing "exploited in the wild" bugs is the fastest way to reduce your organization's risk profile. Stay updated on the latest vulnerabilities and active threats at cvedatabase.com

    #cve #infosec #cybersecurity #patchmanagement
  23. CVEDatabase.com @[email protected]

    🛡️ Weekly CVE Roundup: Is your authentication pipeline secure? We're analyzing CVE-2026-39210, a critical auth bypass in Auth.js impacting Prisma and Drizzle users. Stay ahead of evolving threats to identity providers. Read the full analysis: cvedatabase.com/blog/weekly-cv #CVE #Authjs #CyberSecurity #InfoSec #Prisma #Drizzle #WebSecurity

    #websecurity #drizzle #prisma #infosec #cybersecurity #authjs
  24. /r/netsec @_r_netsec

    CVE-2026-91768: FastCGI allowed_clients compared only 96 of an IPv6 address's 128 bits daubois.dev/blog/cve-2026-9176

  25. EUVD Bot @[email protected]

    🚨 EUVD-2026-97284

    📊 Score: 5.3/10 (CVSS v3.1)
    📦 Product: WMCMS
    📅 Updated: 2026-10-12

    📝 A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php. This manipulation of the argument path/file causes information disclosure. The attack is possible to be carried out remotely. The exploit has been made availa...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cve #vulnerability #cybersecurity #infosec #euvd
  26. OffSequence @[email protected]

    CVE-2026-78357: CRITICAL OTRS flaw (CVSS 9.1) lets compromised tokens stay valid up to 16h after account deactivation or password change. Affects 7.x, 8.x, 2023-2026.x versions. Patch status TBD — monitor token activity. radar.offseq.com/threat/cve-20 #OffSeq #OTRS #vuln #infosec

    #offseq #otrs #vuln #infosec
  27. Hugo | DevOps | Cybersecurity @[email protected]

    CVE-2026-85220 Thinkst Canary Redis DoS, CVSS 3.7. Only if Redis is enabled. Thinkst says fixed, Docker image pending. Patch or disable Redis now. valtersit.com/cve/CVE-2026-852 #CVE #infosec #cybersecurity

    #cybersecurity #infosec #cve
  28. TheHackerWire @[email protected]

    🟠 CVE-2026-78355 - High (8.7)

    A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory.

    This may allow files accessible to the OTRS application process to be delete...

    🔗 thehackerwire.com/vulnerabilit

    #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

    #cve #vulnerability #infosec #cybersecurity #security #tenda
  29. TheHackerWire @[email protected]

    🔴 CVE-2026-93582 - Critical (9.4)

    The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTE_USER or HTTP_REMOTE_USER environment variable. In CGI and mod_perl based deployments, HTTP request headers ma...

    🔗 thehackerwire.com/vulnerabilit

    #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

    #cve #vulnerability #infosec #cybersecurity #security #tenda
  30. TheHackerWire @[email protected]

    🔴 CVE-2026-78357 - Critical (9.1)

    Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an existing JWT may remain valid until its regular expiration time, which ...

    🔗 thehackerwire.com/vulnerabilit

    #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

    #cve #vulnerability #infosec #cybersecurity #security #tenda
Next page
Share on Mastodon

Enter the server where you have an account.