Coverage tagged "Vulnerability".
arXiv:2610.31984v1 Announce Type: new Abstract: WebAssembly (Wasm) enables near-native performance for web applications through a portable and sandboxed execution model. However, its limited runtime…
arXiv:2610.32278v1 Announce Type: new Abstract: Advanced attackers in post-exploitation scenarios increasingly craft attack chains that combine benign operations, configuration errors, and…
arXiv:2610.32626v1 Announce Type: new Abstract: Vision-based image classification models benefit from Federated Learning (FL) across vehicles, however learning accurate models from distributed…
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack…
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
Posted by Valtteri Vuorikoski on Oct 24 Announcement below was posted to the Apache Traffic Server mailing lists a few days ago. Forwarded message from Masakazu Kitajo Date: Tue, 20 Oct 2026 20:07:34…
Posted by Michael Orlitzky on Oct 24 Only those dumb enough to bundle or statically link their dependencies. The bare minimum in terms of software engineering would prevent these 1990-ass…
Security researchers used AI tools to help uncover years-old vulnerabilities in the PHP web scripting language. Then the AI-assisted attacks began.
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to…
Five actively exploited flaws hit the same target this week: the management layer. See how Cisco FMC, hardcoded credentials, and Qilin connect.
Yesterday everyone was running around like crazy (me included :) because of the php2shell vulnerability. However, after looking closely at some published PoC's - and there is an unbelievable amount…
Fixing the critical PHP flaws is not as simple as clicking "Update." Here's how to assess your risk, and what you can do to protect yourself.
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab…
Senior research associate Kate Robertson spoke about the legal concerns that Canada’s proposed Lawful Access Act poses in a discussion hosted by the Canadian Internet Society. She emphasized the…
The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch.
Serial number: AV26-1081 Date: October 23, 2026 As of October 21, 2026, Fortinet is affected by vulnerabilities in the following products: FortiAnalyzer 8.0 Versions prior to 8.0.2 FortiAnalyzer 7.6…
Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered. A security researcher demonstrated that the…
Serial number: AV26-1080 Date: October 23, 2026 As of October 22, 2026, Arista Networks is affected by a vulnerability in the following product: VeloCloud Orchestrator (VCO) Prior to 5.2.3.18 Prior…
Serial number: AV26-1079 Date: October 22, 2026 As of October 22, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following product: HPE Networking Wireless Operating…
