Software Vulnerabilities RSS Feeds

Directory0 software vulnerabilities feeds · 23 articlesShow all languages →

FeedBagel

Latest

Software Vulnerabilities articles

CISA adds actively exploited SharePoint RCE flaw to KEV catalog after Microsoft downplayed risk

Attackers need little more than a valid SharePoint account to execute code on vulnerable on-prem servers

Newstechnologycybersecuritynews

theregister.com·Tech by Flipboard·16d ago·3 min read

CVE-2026-48800 Bypass: Path Traversal Vulnerability Discovered in Notepad++ v8.9.6.1

Codetechnologysecurity

github.com1mo ago

Microsoft Discloses Windows BitLocker 0-Day Vulnerability CVE-2026-50507 Allowing Physical Access Bypass

Newstechnologycybersecurity

Shared by @infosec.skyfleet.blue ↗

cybersecuritynews.com1mo ago

Check Point patches critical VPN zero-day exploited by ransomware attackers for over a month

Newstechnologysecurity

Shared by @hacker.at.thenote.app ↗

theregister.com1mo ago

CISA adds actively exploited Android and Linux kernel flaws to KEV catalog, mandates federal patching by June 5

CISA has added CVE-2025-48595 in the Android Framework and CVE-2022-0492 in the Linux kernel to its Known Exploited Vulnerabilities catalog after evidence of exploitation. The Android flaw affects Android 14 through 16 and the Linux issue c...

Newstechnologycybersecuritynews

hendryadrian.com·Tech by Flipboard·1mo ago·1 min read

Critical Remote Code Execution Vulnerability Discovered in Widely Used protobuf.js Library

Proof-of-concept exploit code has been published for a critical remote code execution flaw in protobuf.js, a widely used JavaScript implementation of Google's Protocol Buffers.

Newstechnologycybersecurityprogramming

bleepingcomputer.com·Hacker News: Front Page·3mo ago·3 min read

Security Vulnerability in iTerm2: 'cat readme.txt' Command Can Enable Arbitrary Code Execution

Turning "cat readme.txt" into arbitrary code execution in iTerm2.

Insighttechnologycybersecurityprogramming

blog.calif.io·Hacker News: Front Page·3mo ago·5 min read

Windows Defender Vulnerability Allows Malicious File Persistence Through Cloud Tag Detection

Codetechnologycybersecurity

github.com3mo ago

macOS Privacy & Security Settings Can Be Misleading About Folder Access

Insighttechnologysecurity

eclecticlight.co3mo ago

PHP 8 Sandbox Escape Exploit: Use-After-Free Vulnerability Bypasses disable_functions

Codetechnologycybersecurity

github.com4mo ago

Roundcube Webmail Vulnerability Allows Email Tracking Despite Image Blocking

Newstechnologycybersecurity

nullcathedral.com5mo ago

OpenSSL Vulnerability CVE-2025-15467: Stack Overflow with Remote Code Execution Risk

Insighttechnologysecurity

research.jfrog.com5mo ago

Security Vulnerability in Claude Cowork Enables File Exfiltration via Prompt Injection

Insighttechnologysecurity

promptarmor.com6mo ago

Notion AI Vulnerability Enables Data Exfiltration Through Prompt Injection Attacks

Notion AI is susceptible to data exfiltration via indirect prompt injection due to a vulnerability in which AI document edits are saved before user approval.

Insighttechnologysecuritycybersecurity

promptarmor.com·Hacker News: Front Page·6mo ago·5 min read