Latest news

Advertisement
  1. Breaches via Cloudflare

    The keys to the Internet change on October 11. Are you ready?

    On October 11, 2026, the DNS root is scheduled to change its key-signing key (KSK) for only the second time ever. This key anchors DNSSEC’s chain of trust, which lets…

  2. Vulnerabilities via Ubuntu Security

    USN-8891-1: librsvg vulnerability

    It was discovered that librsvg incorrectly handled duplicate XML entity declarations while processing SVG documents containing nested XML inclusions. An attacker could…

  3. Vulnerabilities via Full Disclosure

    [0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)

    Posted by disclosure via Fulldisclosure on Oct 06 0day Rubbish Research Team is publicly disclosing a vulnerability in StreamSets Transformer, the Spark-engine…

  4. Vulnerabilities via Full Disclosure

    [0day-rubbish] RCDevs WebADM 2.4.14 authenticated log viewer sid command injection to webadm uid 999 code execution (7.2)

    Posted by disclosure via Fulldisclosure on Oct 06 0day Rubbish Research Team is publicly disclosing a vulnerability in RCDevs WebADM 2.4.14, Freeware Edition, the…

  5. Vulnerabilities via Full Disclosure

    [0day-rubbish] Maian Cart 3.8 addBanners unrestricted banner upload to PHP webshell and administrator command execution (7.2 primary, PR:H)

    Posted by disclosure via Fulldisclosure on Oct 06 0day Rubbish Research Team is publicly disclosing a vulnerability in Maian Cart 3.8, the self-hosted PHP shopping-cart…

  6. Vulnerabilities via Full Disclosure

    [0day-rubbish] IPConfigure Orchid VMS 26.3.0 authenticated DNF repository GPG-key property command injection to root (7.2)

    Posted by disclosure via Fulldisclosure on Oct 06 0day Rubbish Research Team is publicly disclosing a vulnerability in IPConfigure Orchid VMS, installed as Orchid…

  7. Vulnerabilities via Full Disclosure

    [0day-rubbish] Circutor LineEds 24.11.14-r0 unauthenticated pwrstudio events.xml shellExecute command injection (9.8)

    Posted by disclosure via Fulldisclosure on Oct 06 0day Rubbish Research Team is publicly disclosing a vulnerability in the pwrstudio daemon shipped in Circutor LineEds…

  8. Vulnerabilities via Full Disclosure

    [0day-rubbish] Asustor ADM 3.5.9.RWM1 (AS602T) music.cgi act=live stored-filename command injection reaching system() (8.8 primary, PR:L)

    Posted by disclosure via Fulldisclosure on Oct 06 0day Rubbish Research Team is publicly disclosing a vulnerability in the media handler of the ADM (ASUSTOR Data Master)…

  9. Advertisement
  10. Vulnerabilities via Full Disclosure

    [0day-rubbish] Advantech WebAccess Node 9.2.3 unauthenticated CrystalRpt.aspx file upload and path traversal to code execution in w3wp.exe (9.8)

    Posted by disclosure via Fulldisclosure on Oct 06 0day Rubbish Research Team is publicly disclosing a vulnerability in Advantech WebAccess Node 9.2.3, the closed-source…

  11. AI Security via Simon Willison

    datasette-atom 0.11a0

    Release: datasette-atom 0.11a0 A minor fix for compatibility with the latest Datasette alphas. This meant we could upgrade the datasette.io site to Datasette 1.0a41…

  12. Vulnerabilities via BleepingComputer

    Atlassian warns of critical file-access flaw in Jira, Confluence

    Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data…

  13. Breaches via ransomware.live

    🏴☠️ Incransom has just published a new victim : magnals.com

    confidential data belonging to all these companies; magnals.com is responsible for the leak. [email protected] [email protected] [email protected]…

  14. Vulnerabilities via Chrome Releases

    Stable Channel Update for Desktop

    The Stable channel has been updated to 155.0.8059.39/.40 for Windows and Mac and 155.0.8059.39 to Linux which will roll out over the coming days/weeks. A full list of…

  15. AI Security via Dark Reading

    IANS' Kakolowski: How AI Is Reshaping CISO Budgets & Security Teams

    In this video interview, Nick Kakolowski, senior director for CISO research at IANS, talks AI: budgets, ROI, and changes inside security teams.

  16. AI Security via PortSwigger Research

    The model isn't cooperating

    Have you ever felt like a model isn't actually trying to do what you asked? Did you just ask it wrong, or is there something else at play here? In this post, I'll…

  17. Vulnerabilities via Chrome Releases

    Chrome Stable for iOS Update

    Hi everyone! We've just released Chrome Stable 155 (155.0.8059.37) for iOS; it'll become available on App Store in the next few hours. This release includes stability…

  18. Vulnerabilities via Chrome Releases

    Extended Stable Update for Desktop

    The Extended Stable channel has been updated to 152.0.7977.158 for Windows and Mac which will roll out over the coming days/weeks. A full list of changes in this build…

  19. Vulnerabilities via watchTowr Labs

    You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)

    Welcome back to yet another episode of "security was taken seriously". Being who we are (and constantly being exposed to what we see…), we recognize we have been doomed…

  20. Vulnerabilities via Dark Reading

    'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates

    Not quite an EDR-killer, but the proof-of-concept cyber technique creates a silent virus detection gap while service runs normally, no exploit required.

  21. Vulnerabilities via NCSC-NL

    NCSC-2026-0402 [1.00] [M/H] Kwetsbaarheid verholpen in Atlassian Data Center producten

    De kwetsbaarheid bevindt zich in meerdere producten binnen het Atlassian Data Center-platform, waaronder Jira Software, Jira Service Management, Confluence, Bitbucket…