Vulnerability Disclosure RSS Feeds

Directory0 vulnerability disclosure feeds · 23 articlesShow all languages →

FeedBagel

Latest

Vulnerability Disclosure articles

Cursor Zero-Day Vulnerability Allows Silent Code Execution via Malicious git.exe on Windows

The vulnerability nobody seems interested in fixing

Insighttechnologysecurityprogramming

mindgard.ai·Hacker News: Front Page·4d ago·10 min read

'Ill Bloom' Vulnerability in Crypto Wallets Let Attackers Drain $3.1 Million via Weak Seed Phrases

Newstechnologyfinance

Shared by @infosecbriefly.bsky.social ↗

briefly.co8d ago

Adobe ColdFusion Security Bulletin APSB26-68: Analysis of Multiple CVE Vulnerabilities

Insighttechnologyprogramming

Shared by @patrickcmiller.bsky.social ↗

labs.watchtowr.com12d ago

CVE-2026-8037: Critical Unauthenticated RCE in Progress Kemp LoadMaster Actively Exploited

Newstechnologycybersecurity

Shared by @undercode.bsky.social ↗

undercodetesting.com14d ago

Critical SimpleHelp Vulnerability (CVE-2026-48558) Enables Malware Delivery via Forged Authentication Tokens

CVE-2026-48558 lets attackers forge OIDC identity tokens to gain fully authenticated technician sessions in SimpleHelp RMM, enabling file transfer, command execution, and malware deployment.

Newstechnologycybersecuritynews

briefly.co·Tech by Flipboard·18d ago·1 min read

Critical Oracle E-Business Suite Vulnerability CVE-2026-46817 (CVSS 9.8) Actively Exploited

CVE-2026-46817 is a critical Oracle Payments flaw actively exploited in the wild, enabling unauthenticated network access over HTTP to take over vulnerable instances.

Newstechnologycybersecuritynews

briefly.co·Tech by Flipboard·18d ago·2 min read

CISA Orders Emergency Patching for Actively Exploited Cisco Unified CM SSRF Vulnerability

The bug affects Cisco Unified Communications Manager, and it sits in a service many organizations rely on for voice and collaboration traffic.

Newstechnologycybersecuritynews

cysecurity.news·Tech by Flipboard·21d ago·2 min read

Critical PTC Windchill Vulnerability CVE-2026-12569 Actively Exploited; CISA Orders Federal Remediation

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co22d ago

Security researcher discloses vulnerabilities in Johnson & Johnson campus recruiting and audit systems

Insighttechnologysecurity

eaton-works.com24d ago

Crowdsourced Bug Bounty Platforms Are Mishandling 2FA Bypass Reports, Eroding Researcher Trust

Insighttechnologysecurity

Shared by @undercode.bsky.social ↗

undercodetesting.com1mo ago

CVE-2026-10520: Critical Ivanti Sentry OS Command Injection Vulnerability Actively Exploited

Newstechnologycybersecurity

hellorecon.com1mo ago

Critical RCE Vulnerability (CVE-2026-20251) Found in Splunk Products via Unsafe Deserialization

Newstechnologysecurity

Shared by @postac001.bsky.social ↗

nvd.nist.gov1mo ago

GitHub Token Theft Vulnerability Discovered in VSCode's Browser-Based github.dev Feature

Insighttechnologysecurity

blog.ammaraskar.com1mo ago

Attackers actively exploit Palo Alto Networks firewall authentication-bypass vulnerability upgraded from medium to critical

The escalated threat posed by the defect showcases how quickly a seemingly mild vulnerability can turn into an urgent warning.

Newstechnologycybersecuritynews

cyberscoop.com·Tech by Flipboard·1mo ago·3 min read

Microsoft calls for coordinated vulnerability disclosure after zero-day disclosures put customers at risk

In recent weeks several zero-day vulnerabilities have been publicly disclosed. The details of these vulnerabilities were not shared with Microsoft prior to release, and the disclosures put our customers at unnecessary risk.

technologycybersecurity

Shared by @pileofgarbage.net ↗

microsoft.com1mo ago

Critical Authentication Bypass Vulnerabilities Found in Casdoor IAM Platform (CERT/CC VU#780781)

Casdoor contains multiple authentication bypass and access management vulnerabilities

Newstechnologysecurity

Shared by @r-blueteamsec.bsky.social ↗

kb.cert.org1mo ago

Critical IDOR Vulnerability in CoreEvent GraphQL API Exposes Order and Event Data

Insighttechnologysecurity

Shared by @r-netsec.bsky.social ↗

parl0v.github.io1mo ago

CVE-2026-48710 (BadHost): Critical Starlette Host-Header Auth Bypass Vulnerability Affects FastAPI and Python ASGI Applications

Scan your Starlette or FastAPI server for CVE-2026-48710 (BadHost): a critical auth bypass via Host header injection affecting MCP servers, LLM proxies, AI agent frameworks, and thousands of Python ASGI applications.

Newstechnologysecurity

badhost.org1mo ago