#cve — Public Fediverse posts

[ Blog ] Veeam v12.3.2.4165 #patch

Veeam has released a new Veeam v12.3.2.4165 patch to resolve some security vulnerabilities.

Installing this patch is strongly recommended to mitigate potential critical security risks.

 
Resolved vulnerabilities
This patch addresses the following vulnerabilities:

CVE-2025-48982 - Severity: High | CVSS v3.1 http://rviv.ly/1VBD34 #CVE #CVE #CVE #vulnerabilities

HackerOne Bug Bounty Disclosure: kerberos-spnego-connection-reuse-vulnerability-rootofpi-ramesh - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-kerberos-spnego-connection-reuse-vulnerability-rootofpi-ramesh/

#HackerOne #CVE #Vulnerability #OSINT #ThreatIntel #Cyber

HackerOne Bug Bounty Disclosure: origin-ip-exposed-waf-bypass-r-tsid - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-origin-ip-exposed-waf-bypass-r-tsid/

#HackerOne #CVE #Vulnerability #OSINT #ThreatIntel #Cyber

Security Tip: Move toward a risk-based patch management strategy. 🛡️ Relying solely on CVSS scores can lead to 'vulnerability fatigue.' Instead, prioritize based on: 1. Known Exploited Vulnerabilities (KEV), 2. Exposure (is the asset internet-facing?), and 3. Business Criticality. This ensures you fix what matters most, first. Research threat intelligence and track the latest CVEs at https://cvedatabase.com #CVE #CyberSecurity #InfoSec #PatchManagement

Me demoré una semana en terminar este artículo sobre #copyfail para el blog de JuncoTIC, levanto la cabeza, y me encuentro con #DirtyFrag y ahora #Fragnesia... así no se puede 😅

Así que nada, que lo disfruten, y comenten si encuentran algún error, por si se me ha escapado algo 👇👇👇

https://juncotic.com/copyfail-vulnerabilidad-del-sistema-criptografico-de-linux/

#gnu #linux #copyfail #vulnerability #infosec #cybersecurity #ciberseguridad #crypto #encryption #cryptography #aead #cve #juncotic

Me demoré una semana en terminar este artículo sobre #copyfail para el blog de JuncoTIC, levanto la cabeza, y me encuentro con #DirtyFrag y ahora #Fragnesia... así no se puede 😅

Así que nada, que lo disfruten, y comenten si encuentran algún error, por si se me ha escapado algo 👇👇👇

https://juncotic.com/copyfail-vulnerabilidad-del-sistema-criptografico-de-linux/

#gnu #linux #copyfail #vulnerability #infosec #cybersecurity #ciberseguridad #crypto #encryption #cryptography #aead #cve #juncotic

Me demoré una semana en terminar este artículo sobre #copyfail para el blog de JuncoTIC, levanto la cabeza, y me encuentro con #DirtyFrag y ahora #Fragnesia... así no se puede 😅

Así que nada, que lo disfruten, y comenten si encuentran algún error, por si se me ha escapado algo 👇👇👇

https://juncotic.com/copyfail-vulnerabilidad-del-sistema-criptografico-de-linux/

#gnu #linux #copyfail #vulnerability #infosec #cybersecurity #ciberseguridad #crypto #encryption #cryptography #aead #cve #juncotic

Me demoré una semana en terminar este artículo sobre #copyfail para el blog de JuncoTIC, levanto la cabeza, y me encuentro con #DirtyFrag y ahora #Fragnesia... así no se puede 😅

Así que nada, que lo disfruten, y comenten si encuentran algún error, por si se me ha escapado algo 👇👇👇

https://juncotic.com/copyfail-vulnerabilidad-del-sistema-criptografico-de-linux/

#gnu #linux #copyfail #vulnerability #infosec #cybersecurity #ciberseguridad #crypto #encryption #cryptography #aead #cve #juncotic

Me demoré una semana en terminar este artículo sobre #copyfail para el blog de JuncoTIC, levanto la cabeza, y me encuentro con #DirtyFrag y ahora #Fragnesia... así no se puede 😅

Así que nada, que lo disfruten, y comenten si encuentran algún error, por si se me ha escapado algo 👇👇👇

https://juncotic.com/copyfail-vulnerabilidad-del-sistema-criptografico-de-linux/

#gnu #linux #copyfail #vulnerability #infosec #cybersecurity #ciberseguridad #crypto #encryption #cryptography #aead #cve #juncotic

Twenty Years in pgcrypto #postgres #cve https://thebuild.com/blog/2026/05/13/twenty-years-in-pgcrypto/

Twenty Years in pgcrypto #postgres #cve https://thebuild.com/blog/2026/05/13/twenty-years-in-pgcrypto/

Twenty Years in pgcrypto #postgres #cve https://thebuild.com/blog/2026/05/13/twenty-years-in-pgcrypto/

Twenty Years in pgcrypto #postgres #cve https://thebuild.com/blog/2026/05/13/twenty-years-in-pgcrypto/

Twenty Years in pgcrypto #postgres #cve https://thebuild.com/blog/2026/05/13/twenty-years-in-pgcrypto/

🚨 New MEDIUM CVE detected in AWS Lambda 🚨
CVE-2026-44664 impacts fast-xml-builder in 3 Lambda base images.

Details: https://github.com/aws/aws-lambda-base-images/issues/523
More: https://lambdawatchdog.com/

#AWS #Lambda #CVE #CloudSecurity #Serverless

🚨 New MEDIUM CVE detected in AWS Lambda 🚨
CVE-2026-44664 impacts fast-xml-builder in 3 Lambda base images.

Details: https://github.com/aws/aws-lambda-base-images/issues/523
More: https://lambdawatchdog.com/

#AWS #Lambda #CVE #CloudSecurity #Serverless

🚨 New HIGH CVE detected in AWS Lambda 🚨
CVE-2026-44665 impacts fast-xml-builder in 3 Lambda base images.

Details: https://github.com/aws/aws-lambda-base-images/issues/522
More: https://lambdawatchdog.com/

#AWS #Lambda #CVE #CloudSecurity #Serverless

🚨 New HIGH CVE detected in AWS Lambda 🚨
CVE-2026-44665 impacts fast-xml-builder in 3 Lambda base images.

Details: https://github.com/aws/aws-lambda-base-images/issues/522
More: https://lambdawatchdog.com/

#AWS #Lambda #CVE #CloudSecurity #Serverless

🚨 New HIGH CVE detected in AWS Lambda 🚨
CVE-2026-44432 impacts urllib3 in 6 Lambda base images.

Details: https://github.com/aws/aws-lambda-base-images/issues/521
More: https://lambdawatchdog.com/

#AWS #Lambda #CVE #CloudSecurity #Serverless

🚨 New HIGH CVE detected in AWS Lambda 🚨
CVE-2026-44432 impacts urllib3 in 6 Lambda base images.

Details: https://github.com/aws/aws-lambda-base-images/issues/521
More: https://lambdawatchdog.com/

#AWS #Lambda #CVE #CloudSecurity #Serverless

🚨 New HIGH CVE detected in AWS Lambda 🚨
CVE-2026-44431 impacts urllib3 in 6 Lambda base images.

Details: https://github.com/aws/aws-lambda-base-images/issues/520
More: https://lambdawatchdog.com/

#AWS #Lambda #CVE #CloudSecurity #Serverless

🚨 New HIGH CVE detected in AWS Lambda 🚨
CVE-2026-44431 impacts urllib3 in 6 Lambda base images.

Details: https://github.com/aws/aws-lambda-base-images/issues/520
More: https://lambdawatchdog.com/

#AWS #Lambda #CVE #CloudSecurity #Serverless

🚨 Lambda Watchdog CVE Report 🚨
Latest AWS Lambda image scan detected 49 CVEs across 26 images:
• 🔴 Critical: 1
• 🟠 High: 22
• 🟡 Medium: 23
• 🔵 Low: 3

Check the full report 👉 https://lambdawatchdog.com/
#AWS #Lambda #CVE #CloudSecurity #Serverless

🚨 Lambda Watchdog CVE Report 🚨
Latest AWS Lambda image scan detected 49 CVEs across 26 images:
• 🔴 Critical: 1
• 🟠 High: 22
• 🟡 Medium: 23
• 🔵 Low: 3

Check the full report 👉 https://lambdawatchdog.com/
#AWS #Lambda #CVE #CloudSecurity #Serverless

Qui ici attend la publication des paquets Debian pour #Nginx pour déployer un correctif de sécurité ? (#NginxRift)

#CVE-2026-42945

https://security-tracker.debian.org/tracker/CVE-2026-42945

NGINX POC available
#threatintel #cve

https://depthfirst.com/research/nginx-rift-achieving-nginx-rce-via-an-18-year-old-vulnerability

https://github.com/depthfirstdisclosures/nginx-rift

Wtf...
#Linux #cve

https://github.com/v12-security/pocs/tree/main/fragnesia

Une faille critique dans Exim permet l'exécution de code à distance — un mailer qui tourne sur des millions de serveurs dans le monde.

Exim et les vulnérabilités critiques, une relation qui dure depuis des années. La bonne nouvelle : le patch existe. La prochaine étape, c'est la course entre ceux qui déploient et ceux qui scannent. 📬

#infosec #CVE #RCE
https://www.bleepingcomputer.com/news/security/new-critical-exim-mailer-flaw-allows-remote-code-execution/

Fedora Hummingbird debuts as a rolling-release Linux OS shipped entirely as a bootable OCI image with atomic updates and rollback support. 🐦
It uses a hardened pipeline tracking Fedora Rawhide, provides per-package CVE monitoring, and targets developers and cloud-native workloads. 🔒

🔗 https://itsfoss.com/news/fedora-hummingbird-images/

#TechNews #Fedora #Linux #FedoraHummingbird #Hummingbird #OCI #OS #FOSS #Security #CVE #Atomic #Cloud #DeveloperTools #OpenSource #SysAdmin #DevOps

Fedora Hummingbird debuts as a rolling-release Linux OS shipped entirely as a bootable OCI image with atomic updates and rollback support. 🐦
It uses a hardened pipeline tracking Fedora Rawhide, provides per-package CVE monitoring, and targets developers and cloud-native workloads. 🔒

🔗 https://itsfoss.com/news/fedora-hummingbird-images/

#TechNews #Fedora #Linux #FedoraHummingbird #Hummingbird #OCI #OS #FOSS #Security #CVE #Atomic #Cloud #DeveloperTools #OpenSource #SysAdmin #DevOps

Fedora Hummingbird debuts as a rolling-release Linux OS shipped entirely as a bootable OCI image with atomic updates and rollback support. 🐦
It uses a hardened pipeline tracking Fedora Rawhide, provides per-package CVE monitoring, and targets developers and cloud-native workloads. 🔒

🔗 https://itsfoss.com/news/fedora-hummingbird-images/

#TechNews #Fedora #Linux #FedoraHummingbird #Hummingbird #OCI #OS #FOSS #Security #CVE #Atomic #Cloud #DeveloperTools #OpenSource #SysAdmin #DevOps

Fedora Hummingbird debuts as a rolling-release Linux OS shipped entirely as a bootable OCI image with atomic updates and rollback support. 🐦
It uses a hardened pipeline tracking Fedora Rawhide, provides per-package CVE monitoring, and targets developers and cloud-native workloads. 🔒

🔗 https://itsfoss.com/news/fedora-hummingbird-images/

#TechNews #Fedora #Linux #FedoraHummingbird #Hummingbird #OCI #OS #FOSS #Security #CVE #Atomic #Cloud #DeveloperTools #OpenSource #SysAdmin #DevOps

Fedora Hummingbird debuts as a rolling-release Linux OS shipped entirely as a bootable OCI image with atomic updates and rollback support. 🐦
It uses a hardened pipeline tracking Fedora Rawhide, provides per-package CVE monitoring, and targets developers and cloud-native workloads. 🔒

🔗 https://itsfoss.com/news/fedora-hummingbird-images/

#TechNews #Fedora #Linux #FedoraHummingbird #Hummingbird #OCI #OS #FOSS #Security #CVE #Atomic #Cloud #DeveloperTools #OpenSource #SysAdmin #DevOps

Not a single one of these LPE have been called Fraggle Rock. Yet. Disappointed. #linux #cve

Palo Alto Auth Bypass
#threatintel #cve
https://security.paloaltonetworks.com/CVE-2026-0265

Android RCE via Wireless Debugging: From Network Access to Shell https://www.mobile-hacker.com/2026/05/12/android-rce-via-wireless-debugging-from-network-access-to-shell/?utm_source=rss&utm_medium=rss&utm_campaign=android-rce-via-wireless-debugging-from-network-access-to-shell #NetHunterHacker #Vulnerability #CVE‑2026‑0073 #vulnerability #uConsole #Wi-Fi

Android RCE via Wireless Debugging: From Network Access to Shell https://www.mobile-hacker.com/2026/05/12/android-rce-via-wireless-debugging-from-network-access-to-shell/?utm_source=rss&utm_medium=rss&utm_campaign=android-rce-via-wireless-debugging-from-network-access-to-shell #NetHunterHacker #Vulnerability #CVE‑2026‑0073 #vulnerability #uConsole #Wi-Fi

Android RCE via Wireless Debugging: From Network Access to Shell https://www.mobile-hacker.com/2026/05/12/android-rce-via-wireless-debugging-from-network-access-to-shell/?utm_source=rss&utm_medium=rss&utm_campaign=android-rce-via-wireless-debugging-from-network-access-to-shell #NetHunterHacker #Vulnerability #CVE‑2026‑0073 #vulnerability #uConsole #Wi-Fi

Android RCE via Wireless Debugging: From Network Access to Shell https://www.mobile-hacker.com/2026/05/12/android-rce-via-wireless-debugging-from-network-access-to-shell/?utm_source=rss&utm_medium=rss&utm_campaign=android-rce-via-wireless-debugging-from-network-access-to-shell #NetHunterHacker #Vulnerability #CVE‑2026‑0073 #vulnerability #uConsole #Wi-Fi

Android RCE via Wireless Debugging: From Network Access to Shell https://www.mobile-hacker.com/2026/05/12/android-rce-via-wireless-debugging-from-network-access-to-shell/?utm_source=rss&utm_medium=rss&utm_campaign=android-rce-via-wireless-debugging-from-network-access-to-shell #NetHunterHacker #Vulnerability #CVE‑2026‑0073 #vulnerability #uConsole #Wi-Fi

RE: https://cyberplace.social/@GossiTheDog/116565662607962457

#windows #it #bitlocker #security #encryption #cve #vulnerability

Ataque a sistemas cPanel explora falha CVE-2026-41940 para instalar backdoor
🔗 https://tugatech.com.pt/t83414-ataque-a-sistemas-cpanel-explora-falha-cve-2026-41940-para-instalar-backdoor

#ataque #cve #falha 

"Root Cause:
A dog named Kubernetes ate a YubiKey."

This a fun read.

"The legitimate maintainer has won €2.3 million in the EuroMillions and is researching goat farming in Portugal."
#infosec #incident #vulpine #cve
https://nesbitt.io/2026/02/03/incident-report-cve-2024-yikes.html

🟠 CVE-2026-44548 - High (8.1)

ChurchCRM is an open-source church management system. Prior to 7.3.2, top-level cross-site GET navigation from an attacker-controlled page to FundRaiserDelete.php, PropertyTypeDelete.php, or NoteDelete.php causes a logged-in ChurchCRM user with th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44548/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-44547 - Critical (9.6)

ChurchCRM is an open-source church management system. From 7.2.0 to 7.2.2, The fix for CVE-2026-4058 is incomplete. The hardening commit was merged and then silently stripped from src/api/routes/public/public-user.php by an unrelated PR before any...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44547/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8108 - High (7.8)

The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write permissions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8108/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 New MEDIUM CVE detected in AWS Lambda 🚨
CVE-2026-42338 impacts ip-address in 3 Lambda base images.

Details: https://github.com/aws/aws-lambda-base-images/issues/519
More: https://lambdawatchdog.com/

#AWS #Lambda #CVE #CloudSecurity #Serverless

🚨 New MEDIUM CVE detected in AWS Lambda 🚨
CVE-2026-42338 impacts ip-address in 3 Lambda base images.

Details: https://github.com/aws/aws-lambda-base-images/issues/519
More: https://lambdawatchdog.com/

#AWS #Lambda #CVE #CloudSecurity #Serverless

🚨 New MEDIUM CVE detected in AWS Lambda 🚨
CVE-2026-42338 impacts ip-address in 3 Lambda base images.

Details: https://github.com/aws/aws-lambda-base-images/issues/519
More: https://lambdawatchdog.com/

#AWS #Lambda #CVE #CloudSecurity #Serverless

🚨 Lambda Watchdog CVE Report 🚨
Latest AWS Lambda image scan detected 49 CVEs across 26 images:
• 🔴 Critical: 1
• 🟠 High: 22
• 🟡 Medium: 23
• 🔵 Low: 3

Check the full report 👉 https://lambdawatchdog.com/
#AWS #Lambda #CVE #CloudSecurity #Serverless