Latest news
-
Vulnerabilities via Zero Day Initiative
ZDI-26-783: LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of LibreOffice. User interaction is required to exploit this vulnerability…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-782: LibreOffice PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of LibreOffice. User interaction is required to exploit this vulnerability…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-781: LibreOffice EMF+ Brush Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of LibreOffice. User interaction is required to exploit this vulnerability…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-785: FreeBSD Kernel Shared Memory Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of FreeBSD Kernel. An attacker must first obtain the ability to execute…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-784: FreeBSD Kernel kqueue Use-After-Free Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of FreeBSD Kernel. An attacker must first obtain the ability to execute…
-
Threat Intel via The Hacker News
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known…
-
Vulnerabilities via oss-security
CVE-2026-90910: Apache Answer: Reaction API authorization bypass for restricted content
Posted by Enxin Xie on Oct 15 Severity: moderate Affected versions: - Apache Answer through 2.0.2 Description: Missing authentication for critical function vulnerability…
-
Vulnerabilities via oss-security
CVE-2026-86589: Apache Answer: User Center integration does not revoke first-login sessions after central account suspension
Posted by Enxin Xie on Oct 15 Severity: moderate Affected versions: - Apache Answer through 2.0.2 Description: Incorrect implementation of authentication algorithm…
- Advertisement
-
Vulnerabilities via oss-security
CVE-2026-79633: Apache Answer: Missing Authorization Allows Mutations of Non-Public Content
Posted by Enxin Xie on Oct 15 Severity: moderate Affected versions: - Apache Answer through 2.0.2 Description: vulnerability in Apache Answer. This issue affects Apache…
-
Vulnerabilities via oss-security
CVE-2026-79624: Apache Answer: Stale Visit Tokens Retain Access to Private Uploads After Session Revocation
Posted by Enxin Xie on Oct 15 Severity: moderate Affected versions: - Apache Answer through 2.0.2 Description: Insufficient session expiration vulnerability in Apache…
-
Vulnerabilities via oss-security
CVE-2026-79620: Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question Metadata
Posted by Enxin Xie on Oct 15 Severity: moderate Affected versions: - Apache Answer through 2.0.2 Description: Exposure of sensitive information through data queries…
-
Vulnerabilities via oss-security
CVE-2026-79613: Apache Answer: Disclosure of Comments on Non-Public Content Through Public Profiles
Posted by Enxin Xie on Oct 15 Severity: moderate Affected versions: - Apache Answer through 2.0.2 Description: vulnerability in Apache Answer. This issue affects Apache…
-
Breaches via oss-security
CVE-2026-76994: Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profiles
Posted by Enxin Xie on Oct 15 Severity: moderate Affected versions: - Apache Answer through 2.0.2 Description: Exposure of Sensitive Information to an Unauthorized Actor…
-
Threat Intel via Help Net Security
DDoS attacks can knock services offline before links reach capacity
More than 9.1 million DDoS attacks were recorded globally between January and June 2026, an increase of nearly a quarter year over year, according to Netscout’s DDoS…
-
AI Security via oss-security
CVE-2026-71563: Apache Answer: MCP Answer Retrieval Exposes Content from Non-Public Questions
Posted by Enxin Xie on Oct 15 Severity: moderate Affected versions: - Apache Answer through 2.0.2 Description: Missing Authorization vulnerability in Apache Answer. This…
-
Vulnerabilities via oss-security
CVE-2026-68482: Apache Answer: Improper Authorization in Question Invite User Lookup
Posted by Enxin Xie on Oct 15 Severity: low Affected versions: - Apache Answer through 2.0.2 Description: Missing Authorization vulnerability in Apache Answer. This…
-
Vulnerabilities via oss-security
CVE-2026-67249: Apache Answer: Email Code Purpose Confusion May Allow Account Takeover
Posted by Enxin Xie on Oct 15 Severity: moderate Affected versions: - Apache Answer through 2.0.2 Description: A vulnerability in Apache Answer. This issue affects…
-
Vulnerabilities via oss-security
CVE-2026-64945: Apache Answer: Incorrect permission mapping allows users with only the unpin permission to hide/show questions
Posted by Enxin Xie on Oct 15 Severity: low Affected versions: - Apache Answer through 2.0.2 Description: A vulnerability in Apache Answer. This issue affects Apache…
-
Vulnerabilities via oss-security
CVE-2026-64944: Apache Answer: Stored XSS via unsanitized HTML in imported question content
Posted by Enxin Xie on Oct 15 Severity: low Affected versions: - Apache Answer through 2.0.2 Description: Improper Neutralization of Input During Web Page Generation…
-
Vulnerabilities via oss-security
CVE-2026-64943: Apache Answer: API keys logged in plaintext during authentication
Posted by Enxin Xie on Oct 15 Severity: low Affected versions: - Apache Answer through 2.0.2 Description: Insertion of Sensitive Information into Log File vulnerability…