Cwe-918 - Server-Side Request Forgery (ssrf)

SonicWall SMA1000 Faces Critical Zero-Day Exploitation

Critical RCE Vulnerability in Oracle PeopleSoft Exploited by SHADOW-AETHER-015

GeoNetwork Vulnerabilities Enable Unauthenticated RCE in Government Systems

Critical OVERPASS Vulnerability in SAP Kernel Requires Immediate Action

Multiple Critical Vulnerabilities Exploited in SonicWall and SharePoint Systems

Critical SQL Injection and XSS Vulnerabilities in RoundcubeMail Affect Fedora Users

Microsoft's Record Patch Tuesday in June 2026 Addresses 206 Vulnerabilities

CISA Adds Seven Exploited Vulnerabilities; IBM Warns of Langflow OSS Flaws

Cisco Unity Connection Vulnerabilities Enable Code Execution and SSRF Attacks

Microsoft September 2026 Patch Tuesday: Record 974 Vulnerabilities Addressed

Active Exploitation of Microsoft SharePoint Flaw CVE-2026-45659 Confirmed

Cisco Confirms Active Exploitation of Unified CM Vulnerability CVE-2026-20230

CISA Warns of Active Exploitation of Oracle WebLogic Vulnerability CVE-2024-21182

Plugin4Shell: Zero-Click RCE Vulnerability in Major AI Coding Agents

Active Exploitation of MLflow SSRF Vulnerability CVE-2026-64849

Critical Authentication Bypass Vulnerability in Spring Authorization Server

Critical Vulnerabilities in Exposed MCP Servers Threaten Sensitive Data

Critical Vulnerabilities in Adobe Connect Require Immediate Patching

Critical SSRF Vulnerability in Cisco Unified CM Exposes Enterprises to Root Access

CISA Adds Multiple Exploited Flaws in AI and Networking Tools to KEV Catalog

Critical SQL Injection Vulnerability in SPIP CMS Exposed

Critical Vulnerabilities in WordPress Plugins Allow Unauthenticated File Uploads

Critical Vulnerabilities in React and Next.js Require Immediate Updates

Critical BadHost Vulnerability Exposes AI Applications to Authentication Bypass

Critical RCE Vulnerabilities Disclosed in NLTK Toolkit

Critical Security Flaws Found in SUSE Node.js Versions 22 and 24

Critical Denial of Service and Auth Bypass Vulnerabilities in Fedora Erlang

Microsoft June 2026 Patch Tuesday: Record 206 Vulnerabilities Addressed

Critical SearchLeak Vulnerability in Microsoft 365 Copilot Exposes Sensitive Data

CoreBreak Vulnerability Exposes AI Agent Frameworks to Unauthorized Tool Use

Critical Vulnerabilities in SUSE python-PyJWT Lead to DoS and SSRF Risks

Nissan Data Breach Exposes Employee Records via Oracle Vulnerability

Critical SSRF Vulnerability in MLflow Actively Exploited, CISA Issues Warning

Critical CVE-2026-69836 in Microsoft Entra ID Exploited in the Wild

AgentForger: New Phishing Attack Creates Autonomous AI Insiders

New Mistic Backdoor Linked to Ransomware Access Broker Activity

Critical SQL Injection Vulnerabilities in SigNoz Exposed

Multiple Vulnerabilities in IBM Financial Transaction Manager Exposed

New 'PleaseFix' Vulnerabilities Threaten Agentic Browsers with Widespread Attacks

Multiple Vulnerabilities Discovered in Splunk Products Affecting Security Integrity

Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

GHSA W5pf Xwjh Vr5v

Squashing vulnerabilities: Microsoft udpates Dynamics 365 bug bounty program

lazyrecon exploit

Tduck Survey Form Through 5.3 Server Side Request Forgery Via Unvalidated Webhook Url

40

[vulnfeed] 34 critical CVEs — 2026-09-16 20:00 UTC

CVE Alert: CVE-2026-92602 – TDuckCloud – tduck-survey

Etr Critical Sonicwall Sma1000 Vulnerabilities Cve 2026 83548 Cve 2026 83549 Exploited In The Wild

CVE Alert: CVE-2026-13275 – IBM

RamziRange10 exploit

The State Of Ai For Security Measuring What Matters Most For Building Trust

How SonicWall SMA1000's First Zero

The Chain That Opened the Crisis: How SonicWall SMA1000's First Zero

CVE-2023

Mise A Jour Critique De Securite Sortie De SPIP 4 4 18

Exposed Server Reveals Automated Extortion Pipeline | Information & Data Manager

CISA KEV Catalog Adds Seven Exploited Flaws Across AI Stacks and VPNs

RamziRange3 exploit

OWASP Top 10

Microsoft Patch Tuesday September 2026 Security Update Review

Onapsis says

Xenforo Ssrf Via Paypal Rest Webhook Handler

September 1, 2026 product notice

CISA Adds 7 Exploited Flaws as Attackers Target AI Infrastructure

github.com: GitHub Security Advisory (GHSA-p6qj-p5m7-f62h) external site

AWS publica guía de respuesta a incidentes basada en tres casos reales de compromiso en la nube

SonicWall SMA1000 zero-day exploited, CISA orders patches

Critical SonicWall SMA 1000 Zero-Day Vulnerabilities (CVE-2026-83548 & CVE-2026-83549)

SonicWall Warns of Two Actively Exploited SMA1000 Zero-Days, One Rated Maximum Severity

SonicWall reports two major security holes under active exploit

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

SonicWall SMA1000 Series: Critical Vulnerability Exploited (Sept. 2026)

SonicWall reports two major security holes under active exploit

Remote access Sonicwall SMA1000: Attackers are manipulating internal services

Multiple Vulnerabilities in SonicWall SMA1000 Series Appliances Could Allow for Remote Code Execution