home.social

#vuln — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #vuln, aggregated by home.social.

  1. OffSequence @[email protected] ·

    CVE-2026-49017: HIGH-severity in OpenStack Swift 2.36.0 & 2.37.0. Infinite loop in s3api lets authenticated attackers exhaust proxy workers → DoS risk. Patch to 2.36.2 or 2.37.2+ now! 🔄 radar.offseq.com/threat/cve-20 #OffSeq #OpenStack #Vuln #DoS

    #offseq #openstack #vuln #dos
  2. OffSequence @[email protected] ·

    CVE-2026-49017: HIGH-severity in OpenStack Swift 2.36.0 & 2.37.0. Infinite loop in s3api lets authenticated attackers exhaust proxy workers → DoS risk. Patch to 2.36.2 or 2.37.2+ now! 🔄 radar.offseq.com/threat/cve-20 #OffSeq #OpenStack #Vuln #DoS

    #offseq #openstack #vuln #dos
  3. OffSequence @[email protected] ·

    CVE-2026-49017: HIGH-severity in OpenStack Swift 2.36.0 & 2.37.0. Infinite loop in s3api lets authenticated attackers exhaust proxy workers → DoS risk. Patch to 2.36.2 or 2.37.2+ now! 🔄 radar.offseq.com/threat/cve-20 #OffSeq #OpenStack #Vuln #DoS

    #dos #vuln #openstack #offseq
  4. OffSequence @[email protected] ·

    CVE-2026-49017: HIGH-severity in OpenStack Swift 2.36.0 & 2.37.0. Infinite loop in s3api lets authenticated attackers exhaust proxy workers → DoS risk. Patch to 2.36.2 or 2.37.2+ now! 🔄 radar.offseq.com/threat/cve-20 #OffSeq #OpenStack #Vuln #DoS

    #offseq #openstack #vuln #dos
  5. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-9312 (SSRF) in GitHub Enterprise Server 3.16.0 – 3.21.0 lets unauth attackers access internal services via crafted uploads. Patch to 3.16.20+ ASAP! Details: radar.offseq.com/threat/cve-20 #OffSeq #SSRF #GitHub #Vuln

    #offseq #ssrf #github #vuln
  6. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-9312 (SSRF) in GitHub Enterprise Server 3.16.0 – 3.21.0 lets unauth attackers access internal services via crafted uploads. Patch to 3.16.20+ ASAP! Details: radar.offseq.com/threat/cve-20 #OffSeq #SSRF #GitHub #Vuln

    #offseq #ssrf #github #vuln
  7. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-9312 (SSRF) in GitHub Enterprise Server 3.16.0 – 3.21.0 lets unauth attackers access internal services via crafted uploads. Patch to 3.16.20+ ASAP! Details: radar.offseq.com/threat/cve-20 #OffSeq #SSRF #GitHub #Vuln

    #vuln #github #ssrf #offseq
  8. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-9312 (SSRF) in GitHub Enterprise Server 3.16.0 – 3.21.0 lets unauth attackers access internal services via crafted uploads. Patch to 3.16.20+ ASAP! Details: radar.offseq.com/threat/cve-20 #OffSeq #SSRF #GitHub #Vuln

    #offseq #ssrf #github #vuln
  9. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-44895 in yoda-digital mcp-gitlab-server (<0.6.0) allows unauthenticated access to a mutation-capable RPC endpoint, risking full GitLab resource compromise. Upgrade to 0.6.0+ ASAP. radar.offseq.com/threat/cve-20 #OffSeq #Vuln #GitLab #CVE202644895

    #offseq #vuln #gitlab #cve202644895
  10. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-44895 in yoda-digital mcp-gitlab-server (<0.6.0) allows unauthenticated access to a mutation-capable RPC endpoint, risking full GitLab resource compromise. Upgrade to 0.6.0+ ASAP. radar.offseq.com/threat/cve-20 #OffSeq #Vuln #GitLab #CVE202644895

    #offseq #vuln #gitlab #cve202644895
  11. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-44895 in yoda-digital mcp-gitlab-server (<0.6.0) allows unauthenticated access to a mutation-capable RPC endpoint, risking full GitLab resource compromise. Upgrade to 0.6.0+ ASAP. radar.offseq.com/threat/cve-20 #OffSeq #Vuln #GitLab #CVE202644895

    #cve202644895 #gitlab #vuln #offseq
  12. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-44895 in yoda-digital mcp-gitlab-server (<0.6.0) allows unauthenticated access to a mutation-capable RPC endpoint, risking full GitLab resource compromise. Upgrade to 0.6.0+ ASAP. radar.offseq.com/threat/cve-20 #OffSeq #Vuln #GitLab #CVE202644895

    #offseq #vuln #gitlab #cve202644895
  13. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-41090 in Microsoft 365 Copilot for iOS enables remote command injection (CVSS 9.3). Microsoft has patched server-side — verify your service is up to date. More info: radar.offseq.com/threat/cve-20 #OffSeq #Microsoft #Vuln #InfoSec

    #offseq #microsoft #vuln #infosec
  14. OffSequence @[email protected] ·

    STER (Centralny Instytut Ochrony Pracy) faces a HIGH severity SQL Injection (CVE-2026-25606, CVSS 8.7). Authenticated attackers can access sensitive data via search filters. Patch by upgrading to v9.5. 🛡️ radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #Vuln #Infosec

    #offseq #sqlinjection #vuln #infosec
  15. OffSequence @[email protected] ·

    STER (Centralny Instytut Ochrony Pracy) faces a HIGH severity SQL Injection (CVE-2026-25606, CVSS 8.7). Authenticated attackers can access sensitive data via search filters. Patch by upgrading to v9.5. 🛡️ radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #Vuln #Infosec

    #offseq #sqlinjection #vuln #infosec
  16. OffSequence @[email protected] ·

    STER (Centralny Instytut Ochrony Pracy) faces a HIGH severity SQL Injection (CVE-2026-25606, CVSS 8.7). Authenticated attackers can access sensitive data via search filters. Patch by upgrading to v9.5. 🛡️ radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #Vuln #Infosec

    #infosec #vuln #sqlinjection #offseq
  17. OffSequence @[email protected] ·

    STER (Centralny Instytut Ochrony Pracy) faces a HIGH severity SQL Injection (CVE-2026-25606, CVSS 8.7). Authenticated attackers can access sensitive data via search filters. Patch by upgrading to v9.5. 🛡️ radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #Vuln #Infosec

    #offseq #sqlinjection #vuln #infosec
  18. OffSequence @[email protected] ·

    🚨 CRITICAL: Cisco Secure Workload REST API flaw (no CVE) lets remote attackers gain Site Admin access on SaaS & on-prem. Update to 3.10.8.3/4.0.3.17 now. No active exploitation, but patch ASAP! radar.offseq.com/threat/cisco- #OffSeq #Cisco #Vuln #PatchManagement

    #offseq #cisco #vuln #patchmanagement
  19. OffSequence @[email protected] ·

    🚨 CRITICAL: Cisco Secure Workload REST API flaw (no CVE) lets remote attackers gain Site Admin access on SaaS & on-prem. Update to 3.10.8.3/4.0.3.17 now. No active exploitation, but patch ASAP! radar.offseq.com/threat/cisco- #OffSeq #Cisco #Vuln #PatchManagement

    #offseq #cisco #vuln #patchmanagement
  20. OffSequence @[email protected] ·

    🚨 CRITICAL: Cisco Secure Workload REST API flaw (no CVE) lets remote attackers gain Site Admin access on SaaS & on-prem. Update to 3.10.8.3/4.0.3.17 now. No active exploitation, but patch ASAP! radar.offseq.com/threat/cisco- #OffSeq #Cisco #Vuln #PatchManagement

    #patchmanagement #vuln #cisco #offseq
  21. OffSequence @[email protected] ·

    🚨 CRITICAL: Cisco Secure Workload REST API flaw (no CVE) lets remote attackers gain Site Admin access on SaaS & on-prem. Update to 3.10.8.3/4.0.3.17 now. No active exploitation, but patch ASAP! radar.offseq.com/threat/cisco- #OffSeq #Cisco #Vuln #PatchManagement

    #offseq #cisco #vuln #patchmanagement
  22. OffSequence @[email protected] ·

    🔥 CVE-2026-33278: Critical use-after-free in NLnet Labs Unbound (1.19.1 – 1.25.0). DNSSEC validator flaw can lead to DoS or RCE if attacker controls DNS zone. Patch: upgrade to 1.25.1. radar.offseq.com/threat/cve-20 #OffSeq #DNSSEC #Vuln #Infosec

    #offseq #dnssec #vuln #infosec
  23. OffSequence @[email protected] ·

    ⚠️ CRITICAL: kitty terminal <0.47.0 vulnerable to integer overflow (CVE-2026-33642). Malicious escape sequences can cause heap memory corruption — no user action needed. Upgrade to 0.47.0+ now! radar.offseq.com/threat/cve-20 #OffSeq #Vuln #KittyTerminal #Infosec

    #offseq #vuln #kittyterminal #infosec
  24. OffSequence @[email protected] ·

    ⚠️ CRITICAL: kitty terminal <0.47.0 vulnerable to integer overflow (CVE-2026-33642). Malicious escape sequences can cause heap memory corruption — no user action needed. Upgrade to 0.47.0+ now! radar.offseq.com/threat/cve-20 #OffSeq #Vuln #KittyTerminal #Infosec

    #offseq #vuln #kittyterminal #infosec
  25. OffSequence @[email protected] ·

    ⚠️ CRITICAL: kitty terminal <0.47.0 vulnerable to integer overflow (CVE-2026-33642). Malicious escape sequences can cause heap memory corruption — no user action needed. Upgrade to 0.47.0+ now! radar.offseq.com/threat/cve-20 #OffSeq #Vuln #KittyTerminal #Infosec

    #infosec #kittyterminal #vuln #offseq
  26. OffSequence @[email protected] ·

    ⚠️ CRITICAL: kitty terminal <0.47.0 vulnerable to integer overflow (CVE-2026-33642). Malicious escape sequences can cause heap memory corruption — no user action needed. Upgrade to 0.47.0+ now! radar.offseq.com/threat/cve-20 #OffSeq #Vuln #KittyTerminal #Infosec

    #offseq #vuln #kittyterminal #infosec
  27. wendythedruid @[email protected] ·

    @angst_ridden Oh, I am full on (30 year career in infosec and infra), #terraform , #ansible, #argocd, #gha (unfortunately because I hate it), #python and #golang Staff CloudOps Engineer.

    My OP was just me bitching about it.

    My cool task today is setting up a #capev2 server for #vuln and #mal testing.

    #terraform #ansible #argocd #gha #python #golang
  28. wendythedruid @[email protected] ·

    @angst_ridden Oh, I am full on (30 year career in infosec and infra), #terraform , #ansible, #argocd, #gha (unfortunately because I hate it), #python and #golang Staff CloudOps Engineer.

    My OP was just me bitching about it.

    My cool task today is setting up a #capev2 server for #vuln and #mal testing.

    #terraform #ansible #argocd #gha #python #golang
  29. wendythedruid @[email protected] ·

    @angst_ridden Oh, I am full on (30 year career in infosec and infra), #terraform , #ansible, #argocd, #gha (unfortunately because I hate it), #python and #golang Staff CloudOps Engineer.

    My OP was just me bitching about it.

    My cool task today is setting up a #capev2 server for #vuln and #mal testing.

    #terraform #ansible #argocd #gha #python #golang
  30. wendythedruid @[email protected] ·

    @angst_ridden Oh, I am full on (30 year career in infosec and infra), #terraform , #ansible, #argocd, #gha (unfortunately because I hate it), #python and #golang Staff CloudOps Engineer.

    My OP was just me bitching about it.

    My cool task today is setting up a #capev2 server for #vuln and #mal testing.

    #mal #vuln #capev2 #golang #python #gha
  31. wendythedruid @[email protected] ·

    @angst_ridden Oh, I am full on (30 year career in infosec and infra), #terraform , #ansible, #argocd, #gha (unfortunately because I hate it), #python and #golang Staff CloudOps Engineer.

    My OP was just me bitching about it.

    My cool task today is setting up a #capev2 server for #vuln and #mal testing.

    #terraform #ansible #argocd #gha #python #golang
  32. OffSequence @[email protected] ·

    🚨 CVE-2026-8507 (HIGH): Out-of-bounds write in Crypt::OpenSSL::PKCS12 <=1.94 for Perl. Parsing PKCS12 files with >=1GiB OCTET/BIT STRING may lead to RCE. Patch available for cloud-hosted service — update ASAP. No known exploits. radar.offseq.com/threat/cve-20 #OffSeq #Vuln #Perl

    #offseq #vuln #perl
  33. OffSequence @[email protected] ·

    🛡️ CVE-2026-8725: SSRF in CoreWorxLab CAAL v1.0 – 1.6.0 (MEDIUM). Remote, unauthenticated attackers can trigger server requests. No patch; restrict outbound traffic & monitor logs. Exploit is public. radar.offseq.com/threat/cve-20 #OffSeq #SSRF #Vuln #BlueTeam

    #offseq #ssrf #vuln #blueteam
  34. OffSequence @[email protected] ·

    🛡️ CVE-2026-8725: SSRF in CoreWorxLab CAAL v1.0 – 1.6.0 (MEDIUM). Remote, unauthenticated attackers can trigger server requests. No patch; restrict outbound traffic & monitor logs. Exploit is public. radar.offseq.com/threat/cve-20 #OffSeq #SSRF #Vuln #BlueTeam

    #offseq #ssrf #vuln #blueteam
  35. OffSequence @[email protected] ·

    🛡️ CVE-2026-8725: SSRF in CoreWorxLab CAAL v1.0 – 1.6.0 (MEDIUM). Remote, unauthenticated attackers can trigger server requests. No patch; restrict outbound traffic & monitor logs. Exploit is public. radar.offseq.com/threat/cve-20 #OffSeq #SSRF #Vuln #BlueTeam

    #blueteam #vuln #ssrf #offseq
  36. OffSequence @[email protected] ·

    🛡️ CVE-2026-8725: SSRF in CoreWorxLab CAAL v1.0 – 1.6.0 (MEDIUM). Remote, unauthenticated attackers can trigger server requests. No patch; restrict outbound traffic & monitor logs. Exploit is public. radar.offseq.com/threat/cve-20 #OffSeq #SSRF #Vuln #BlueTeam

    #offseq #ssrf #vuln #blueteam
  37. OffSequence @[email protected] ·

    🚨 PoC code for CRITICAL NGINX vuln (CVE-2026-42945) now public! Heap buffer overflow in ngx_http_rewrite_module — can cause DoS or RCE if ASLR is disabled. Patch NGINX Plus/open source ASAP. radar.offseq.com/threat/poc-co #OffSeq #NGINX #Vuln #InfoSec

    #offseq #nginx #vuln #infosec
  38. OffSequence @[email protected] ·

    🚨 PoC code for CRITICAL NGINX vuln (CVE-2026-42945) now public! Heap buffer overflow in ngx_http_rewrite_module — can cause DoS or RCE if ASLR is disabled. Patch NGINX Plus/open source ASAP. radar.offseq.com/threat/poc-co #OffSeq #NGINX #Vuln #InfoSec

    #offseq #nginx #vuln #infosec
  39. OffSequence @[email protected] ·

    🚨 PoC code for CRITICAL NGINX vuln (CVE-2026-42945) now public! Heap buffer overflow in ngx_http_rewrite_module — can cause DoS or RCE if ASLR is disabled. Patch NGINX Plus/open source ASAP. radar.offseq.com/threat/poc-co #OffSeq #NGINX #Vuln #InfoSec

    #infosec #vuln #nginx #offseq
  40. OffSequence @[email protected] ·

    🚨 PoC code for CRITICAL NGINX vuln (CVE-2026-42945) now public! Heap buffer overflow in ngx_http_rewrite_module — can cause DoS or RCE if ASLR is disabled. Patch NGINX Plus/open source ASAP. radar.offseq.com/threat/poc-co #OffSeq #NGINX #Vuln #InfoSec

    #offseq #nginx #vuln #infosec
  41. OffSequence @[email protected] ·

    🚨 CVE-2026-45035 (CRITICAL, CVSS 9.4): Tabby < 1.0.233 exposes users to RCE via tabby:// links. Any click can run OS commands with user privileges. Patch to 1.0.233+ ASAP! radar.offseq.com/threat/cve-20 #OffSeq #RCE #Tabby #Vuln

    #offseq #rce #tabby #vuln
  42. OffSequence @[email protected] ·

    🚨 CVE-2026-45035 (CRITICAL, CVSS 9.4): Tabby < 1.0.233 exposes users to RCE via tabby:// links. Any click can run OS commands with user privileges. Patch to 1.0.233+ ASAP! radar.offseq.com/threat/cve-20 #OffSeq #RCE #Tabby #Vuln

    #offseq #rce #tabby #vuln
  43. OffSequence @[email protected] ·

    🚨 CVE-2026-45035 (CRITICAL, CVSS 9.4): Tabby < 1.0.233 exposes users to RCE via tabby:// links. Any click can run OS commands with user privileges. Patch to 1.0.233+ ASAP! radar.offseq.com/threat/cve-20 #OffSeq #RCE #Tabby #Vuln

    #vuln #tabby #rce #offseq
  44. OffSequence @[email protected] ·

    🚨 CVE-2026-45035 (CRITICAL, CVSS 9.4): Tabby < 1.0.233 exposes users to RCE via tabby:// links. Any click can run OS commands with user privileges. Patch to 1.0.233+ ASAP! radar.offseq.com/threat/cve-20 #OffSeq #RCE #Tabby #Vuln

    #offseq #rce #tabby #vuln
  45. OffSequence @[email protected] ·

    ⚠️ HIGH severity: CVE-2026-28761 impacts Fujitsu Musetheque V4 for IPKNOWLEDGE (≤V4L1 rev2203.0). CSRF flaw allows unwanted actions if logged-in users visit malicious pages. Patch status unknown. radar.offseq.com/threat/cve-20 #OffSeq #CSRF #Fujitsu #Vuln

    #offseq #csrf #fujitsu #vuln
  46. OffSequence @[email protected] ·

    ⚠️ HIGH severity: CVE-2026-28761 impacts Fujitsu Musetheque V4 for IPKNOWLEDGE (≤V4L1 rev2203.0). CSRF flaw allows unwanted actions if logged-in users visit malicious pages. Patch status unknown. radar.offseq.com/threat/cve-20 #OffSeq #CSRF #Fujitsu #Vuln

    #offseq #csrf #fujitsu #vuln
  47. OffSequence @[email protected] ·

    ⚠️ HIGH severity: CVE-2026-28761 impacts Fujitsu Musetheque V4 for IPKNOWLEDGE (≤V4L1 rev2203.0). CSRF flaw allows unwanted actions if logged-in users visit malicious pages. Patch status unknown. radar.offseq.com/threat/cve-20 #OffSeq #CSRF #Fujitsu #Vuln

    #vuln #fujitsu #csrf #offseq
  48. OffSequence @[email protected] ·

    ⚠️ HIGH severity: CVE-2026-28761 impacts Fujitsu Musetheque V4 for IPKNOWLEDGE (≤V4L1 rev2203.0). CSRF flaw allows unwanted actions if logged-in users visit malicious pages. Patch status unknown. radar.offseq.com/threat/cve-20 #OffSeq #CSRF #Fujitsu #Vuln

    #offseq #csrf #fujitsu #vuln
  49. OffSequence @[email protected] ·

    ⚠️ CRITICAL: CVE-2026-0481 in AMD Instinct™ MI210 (ROCm). Unrestricted IP binding allows remote attackers to modify GPU configs — could cause availability loss. Awaiting mitigation. Details: radar.offseq.com/threat/cve-20 #OffSeq #AMD #Vuln #ROCm #GPUsecurity

    #offseq #amd #vuln #rocm #gpusecurity
  50. OffSequence @[email protected] ·

    ⚠️ CRITICAL: CVE-2026-0481 in AMD Instinct™ MI210 (ROCm). Unrestricted IP binding allows remote attackers to modify GPU configs — could cause availability loss. Awaiting mitigation. Details: radar.offseq.com/threat/cve-20 #OffSeq #AMD #Vuln #ROCm #GPUsecurity

    #offseq #amd #vuln #rocm #gpusecurity