#flaw


Cisco warns of FMC static credential flaw exploited in zero-day attacks

Jul 30, 2026 // 01:16

Cisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain […]

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Jul 30, 2026 // 00:59

Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application servers through crafted […]

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

Jul 29, 2026 // 19:50

Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in […]

vBulletin fixes critical pre-auth RCE flaw with public exploit

Jul 28, 2026 // 23:37

A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering. The security issue is tracked as […]

Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root

Jul 28, 2026 // 16:00

OpenWrt has shipped version 24.10.8 to close a critical DHCPv6 stack overflow and a wider set of remotely triggerable flaws in network services enabled by […]

Over 24,000 exposed server BMCs leak password hash via decades-old flaw

Jul 28, 2026 // 15:16

More than 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their Baseboard Management Controller (BMC) interface. For at least […]

Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In

Jul 28, 2026 // 11:21

JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery of a critical security issue that could […]

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

Jul 28, 2026 // 07:50

A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 […]

Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw

Jul 27, 2026 // 17:40

Public exploit details released on July 27 show how an unauthenticated request can reach PHP’s eval() function inside vBulletin and execute code on an unpatched […]

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

Jul 24, 2026 // 15:00

Cybersecurity researchers have disclosed a critical vulnerability in OpenAI’s ChatGPT Workspace Agents that could have allowed a single phishing link to stealthily build, authorize, and […]

Previous 1 … 37 38 39 40 41 … 60 Next