THREAT OPS › Threat News

Threat Intelligence News

12148 reports from 110+ open cyber-threat-intelligence sources — APT activity, malware, vulnerabilities and campaigns, newest first.

[NVD] CVE-2026-42587 (HIGH 7.5) — Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpContentDecompressor accepts a maxAllocation parameter to limit decompression buffer size and prevent decompression bomb attacks. This limit is correctly enforced fornvd · 2026-05-13
[NVD] CVE-2026-42584 (HIGH 7.3) — Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpClientCodec pairs each inbound response with an outbound request by queue.poll() once per response, including for 1xx. If the client pipelines GET then HEAD and the nvd · 2026-05-13
[NVD] CVE-2026-42581 (MEDIUM 5.8) — Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpObjectDecoder strips a conflicting Content-Length header when a request carries both Transfer-Encoding: chunked and Content-Length, but only for HTTP/1.1 messages. Tnvd · 2026-05-13
[NVD] CVE-2026-42579 (HIGH 7.5) — Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding. This creates a bidirectional attack surface: malicious DNS responnvd · 2026-05-13
[NVD] CVE-2026-42578 (HIGH 7.5) — Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's HttpProxyHandler constructs HTTP CONNECT requests with header validation explicitly disabled. The newInitialMessage() method creates headers using DefaultHttpHeanvd · 2026-05-13
[NVD] CVE-2026-45411 (CRITICAL 9.8) — vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.3, it is possible to catch a host exception using the yield* expression inside an async generator. When the generator is closed using the return function, the value is awaited on and exceptions thrown in the then call winvd · 2026-05-13
[NVD] CVE-2026-44008 (CRITICAL 9.8) — vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeArraySpeciesBatch works with objects from the other side but can call into this side via getter on the array prototype exposing objects of the wrong side into the sandbox. This can be used to nvd · 2026-05-13
[NVD] CVE-2026-44007 (CRITICAL 9.1) — vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.1, when a NodeVM is created with nesting: true, sandbox code can unconditionally require('vm2') regardless of the outer VM's require configuration — including require: false. With access to vm2, the sandbox constructs a nvd · 2026-05-13
[NVD] CVE-2026-44005 (CRITICAL 10.0) — vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes mutable proxies for real host-realm intrinsic prototypes and then forwards sandbox writes into the underlying host objects with otherReflectSet() and otherReflectDefineProperty(), which lets nvd · 2026-05-13
[NVD] CVE-2026-44004 (HIGH 7.5) — vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, sandboxed code can call Buffer.alloc() with an arbitrary size to allocate memory directly on the host heap. Because Buffer.alloc is a synchronous C++ native call, vm2's timeout option cannot interrupt it. A single reqnvd · 2026-05-13
[NVD] CVE-2026-44001 (HIGH 8.6) — vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, a sandbox escape vulnerability in vm2 v3.10.5 allows any sandboxed code to crash the host Node.js process via a single Promise constructor that triggers an unhandled rejection propagating to the host. The fix for CVE-nvd · 2026-05-13
[NVD] CVE-2026-43999 (CRITICAL 9.9) — vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, NodeVM's builtin allowlist can be bypassed when the module builtin is allowed (including via the '*' wildcard). The module builtin exposes Node's Module._load(), which loads any module by name directly in the host connvd · 2026-05-13
[NVD] CVE-2026-43998 (HIGH 8.5) — vm2 is an open source vm/sandbox for Node.js. In 3.10.5, NodeVM's require.root path restriction can be bypassed using filesystem symlinks, allowing sandboxed code to load modules from outside the allowed root directory in host context. Because path validation uses path.resolve() nvd · 2026-05-13
[NVD] CVE-2026-43997 (CRITICAL 10.0) — vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, it is possible to obtain the host Object. There are various ways to use the host Object, to escape the sandbox, one example would be using HostObject.getOwnPropertySymbols to obtain Symbol(nodejs.util.inspect.custom).nvd · 2026-05-13
[NVD] CVE-2026-44575 (HIGH 7.5) — Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on middleware or proxy-based checks for authorization can allow unauthorized access through transport-specific route variants used fonvd · 2026-05-13
Pwn2Own Berlin 2026: The Full Schedulezdi_blog · 2026-05-13
[NVD] CVE-2026-44432 (HIGH 7.5) — urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1) during the second HTTPResponse.read(amt=N) call when the response was decompressed using the official Brotli library or (2) wnvd · 2026-05-13
[NVD] CVE-2026-44293 (HIGH 8.8) — protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript for toObject conversion could include an unsafe expression derived from a schema-controlled bytes field default value. A crafted descriptor with a nonvd · 2026-05-13
[NVD] CVE-2026-44289 (HIGH 7.5) — protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected both skipping unknown group fields and generated decoding of nested message fields.nvd · 2026-05-13
[NVD] CVE-2026-42557 (CRITICAL 9.6) — jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker linvd · 2026-05-13
[NVD] CVE-2026-42266 (HIGH 8.8) — JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager (allowed_extensions_uris) is not correctly enforced nvd · 2026-05-13
[NVD] CVE-2026-7168 (MEDIUM 5.3) — Successfully using libcurl to do a transfer over a specific HTTP proxy (`proxyA`) with **Digest** authentication and then changing the proxy host to a second one (`proxyB`) for a second transfer, reusing the same handle, makes libcurl wrongly pass on the `Proxy-Authorization:` henvd · 2026-05-13
[NVD] CVE-2026-6276 (HIGH 7.5) — Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom `Host:` header set, the second request would use stale information and pass on cookies meant for the first honvd · 2026-05-13
[NVD] CVE-2026-6253 (MEDIUM 5.9) — curl might erroneously pass on credentials for a first proxy to a second proxy. This can happen when the following conditions are true: 1. curl is setup to use specific different proxies for different URL schemes 2. the first proxy needs credentials 3. the second proxy uses no nvd · 2026-05-13
[NVD] CVE-2026-5773 (HIGH 7.5) — libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of criteria must be met. Due to anvd · 2026-05-13
[NVD] CVE-2026-5545 (MEDIUM 6.5) — libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Negotiate-authenticated one, when both use the same host. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connnvd · 2026-05-13
[NVD] CVE-2026-4873 (MEDIUM 5.9) — A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasses the TLS requirementnvd · 2026-05-13
A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opensproject_zero · 2026-05-13
[NVD] CVE-2026-42338 (MEDIUM 6.1) — ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-controlled content before embedding it in the HTML strings they return, and AddressError.parseMessage (eminvd · 2026-05-12
[NVD] CVE-2026-34682 (HIGH 7.8) — Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious finvd · 2026-05-12
[NVD] CVE-2026-34681 (HIGH 7.8) — Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious finvd · 2026-05-12
[NVD] CVE-2026-34664 (MEDIUM 6.3) — Substance3D - Designer versions 15.1.0 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive filesnvd · 2026-05-12
[NVD] CVE-2026-34660 (CRITICAL 9.3) — Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web nvd · 2026-05-12
[NVD] CVE-2026-34659 (CRITICAL 9.6) — Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Expnvd · 2026-05-12
The May 2026 Security Update Reviewzdi_blog · 2026-05-12
[NVD] CVE-2026-34687 (HIGH 7.8) — Illustrator versions 29.8.6, 30.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fnvd · 2026-05-12
[NVD] CVE-2026-34676 (HIGH 7.8) — Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious filnvd · 2026-05-12
[NVD] CVE-2026-34675 (HIGH 7.8) — Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious filnvd · 2026-05-12
[NVD] CVE-2026-34663 (MEDIUM 5.5) — Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interactinvd · 2026-05-12
[NVD] CVE-2026-34662 (MEDIUM 5.5) — Illustrator versions 29.8.6, 30.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitatnvd · 2026-05-12
[NVD] CVE-2026-34661 (HIGH 7.8) — Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.nvd · 2026-05-12
[NVD] CVE-2026-34644 (HIGH 7.8) — After Effects versions 26.0, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malinvd · 2026-05-12
[NVD] CVE-2026-34643 (HIGH 7.8) — After Effects versions 26.0, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.nvd · 2026-05-12
[NVD] CVE-2026-34642 (HIGH 7.8) — After Effects versions 26.0, 25.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a maliciousnvd · 2026-05-12
[NVD] CVE-2026-34640 (HIGH 7.8) — Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a manvd · 2026-05-12
[NVD] CVE-2026-34639 (HIGH 7.8) — Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious filnvd · 2026-05-12
[NVD] CVE-2026-34638 (HIGH 7.8) — Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.nvd · 2026-05-12
[NVD] CVE-2026-34637 (HIGH 7.8) — Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious filenvd · 2026-05-12
[NVD] CVE-2026-34636 (HIGH 7.8) — Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious filenvd · 2026-05-12
The Apple macOS Security Update Reviewzdi_blog · 2026-05-12
gosentry brings LibAFL-grade fuzzing to Go's native interfacetrailofbits · 2026-05-12
Elastic Security MCP App: Interactive security operations inside your AI Toolselastic_security · 2026-05-12
[NVD] CVE-2026-43661 (HIGH 7.5) — A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing a malicnvd · 2026-05-11
[NVD] CVE-2026-28969 (HIGH 7.5) — A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.7, macOS Sequoia 15.8, macOS Sonoma 14.8.7, macOS Tahoe 26.5, macOS nvd · 2026-05-11
[NVD] CVE-2026-2614 (HIGH 7.5) — A vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem. The issue arises when a `CreateModelVersion` requestnvd · 2026-05-11
[NVD] CVE-2026-7308 (MEDIUM 5.4) — An authenticated user with upload permission to a hosted repository can store content that causes arbitrary JavaScript to execute in the browser of any user who browses that repository directory via the HTML index page in Sonatype Nexus Repository versions 3.6.0 through versions nvd · 2026-05-11
[NVD] CVE-2026-3609 (HIGH 7.8) — Wellbia's XIGNCODE3 xhunter1.sys kernel driver, version 10.0.10011.16384 through 2023.12.7.78, privilege escalation vulnerability provides access to the IRP_MJ_WRITE command interface, which allows any user process to request a PROCESS_ALL_ACCESS. Note: KVE 2023-5589 (https://nvd · 2026-05-11
[NVD] CVE-2026-3048 (LOW 3.8) — An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections when interacting with a malicious LDAP server.nvd · 2026-05-11
Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomwaredfirreport · 2026-05-11
GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Accessmandiant_gti · 2026-05-11
[NVD] CVE-2026-5084 (MEDIUM 6.5) — WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely. The session handler generates the session id from an MD5 hash seeded with a call to the built-in rand() function. The rand function is passed a maximum value based on the process id, the epocnvd · 2026-05-11
TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attacksnyk · 2026-05-11
[NVD] CVE-2026-8177 (HIGH 7.5) — XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjanvd · 2026-05-10
Copy Fail and DirtyFrag: Linux Page Cache Bugs in the Wildelastic_security · 2026-05-09
[NVD] CVE-2026-41591 (MEDIUM 6.4) — Marko is a declarative, HTML-based language for building web apps. Prior to marko version 5.38.36 and prior to @marko/runtime-tags 6.0.164, when dynamic text is interpolated into a <script> or <style> tag the Marko runtime failed to prevent tag breakout when the closing tag used nvd · 2026-05-08
What Comes Before Ticketsspecterops · 2026-05-08
[NVD] CVE-2026-43437 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() In the drain loop, the local variable 'runtime' is reassigned to a linked stream's runtime (runtime = s->runtime at line 2157). After rnvd · 2026-05-08
[NVD] CVE-2026-43391 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: nsfs: tighten permission checks for handle opening Even privileged services should not necessarily be able to see other privileged service's namespaces so they can't leak information to each other. Use may_see_nvd · 2026-05-08
[NVD] CVE-2026-43344 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix die ID init and look up bugs In snbep_pci2phy_map_init(), in the nr_node_ids > 8 path, uncore_device_to_die() may return -1 when all CPUs associated with the UBOX device are offline. nvd · 2026-05-08
[NVD] CVE-2026-43329 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions The maximum number of flowtable hardware offload actions in IPv6 is: * ethernet mangling (4 payload actions, 2 for each ethernet address) * SNnvd · 2026-05-08
[NVD] CVE-2026-43303 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: clear page->private in free_pages_prepare() Several subsystems (slub, shmem, ttm, etc.) use page->private but don't clear it before freeing pages. When these pages are later allocated as high-ornvd · 2026-05-08
[NVD] CVE-2026-43288 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: ext4: move ext4_percpu_param_init() before ext4_mb_init() When running `kvm-xfstests -c ext4/1k -C 1 generic/383` with the `DOUBLE_CHECK` macro defined, the following panic is triggered: ======================nvd · 2026-05-08
[NVD] CVE-2026-43284 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFL_SHARED_FRAG after skb_splice_from_iter(), so later paths thnvd · 2026-05-08
[NVD] CVE-2026-42264 (HIGH 7.4) — Axios is a promise based HTTP client for the browser and Node.js. From version 1.0.0 to before version 1.15.2, fFive config properties (auth, baseURL, socketPath, beforeRedirect, and insecureHTTPParser) in the HTTP adapter are read via direct property access without hasOwnPropertnvd · 2026-05-08
[NVD] CVE-2026-6737 — An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a local user to bypass driver security mechanisms and obtain restricted touchpad information or render the touchpad unusable via crafted IOCTL requests.Refer to the ' Security Update for ASUS nvd · 2026-05-08
[NVD] CVE-2026-3508 — An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a local user to cause system crash (BSOD) via a read size that exceeds the buffer size.Refer to the ' Security Update for MyASUS ' section on the ASUS Security Advisory for more infornvd · 2026-05-08
Working in London at the World’s Largest Intelligence Companyrecordedfuture · 2026-05-08
Detecting Web Server Probing & Fuzzing in Traefik with Automated Cloudflare Responseelastic_security · 2026-05-08
Shift Happens – Uncovering Two Built-in Command Injections in Windows Context Menusspecterops · 2026-05-07
[NVD] CVE-2026-42011 (HIGH 7.4) — A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during nvd · 2026-05-07
[NVD] CVE-2026-32686 — Uncontrolled Resource Consumption vulnerability in ericmj decimal allows unauthenticated remote Denial of Service. The decimal library does not bound the exponent on parsed input. Storing a decimal with a very large exponent (e.g. Decimal.new("1e1000000000")) is accepted withoutnvd · 2026-05-07
How Cloudflare responded to the “Copy Fail” Linux vulnerabilitycloudflare_security · 2026-05-07
[NVD] CVE-2026-42010 (HIGH 7.1) — A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authenvd · 2026-05-07
PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scalesentinelone · 2026-05-07
[NVD] CVE-2026-41675 (HIGH 7.5) — xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom version 0.6.0 and prior, the package allows attacker-controlled processing instruction data to be serialinvd · 2026-05-07
[NVD] CVE-2026-41674 (HIGH 7.5) — xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom version 0.6.0 and prior, the package serializes DocumentType node fields (internalSubset, publicId, systenvd · 2026-05-07
[NVD] CVE-2026-41673 (HIGH 7.5) — xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom version 0.6.0 and prior, seven recursive traversals in lib/dom.js operate without a depth limit. A sufficnvd · 2026-05-07
[NVD] CVE-2026-41672 (HIGH 7.5) — xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom version 0.6.0 and prior, the package allows attacker-controlled comment content to be serialized into XMLnvd · 2026-05-07
Quantum Risk Explainedrecordedfuture · 2026-05-07
TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlookelastic_security · 2026-05-07
[NVD] CVE-2026-33079 (HIGH 7.5) — In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in `LINK_TITLE_RE` that allows an attacker who can supply Markdown for parsing to cause denial of service. The regular expression used for parsing link titles contanvd · 2026-05-06
[NVD] CVE-2026-42503 (HIGH 8.8) — gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen is given a value without an explicit host (e.g. :8080), or -port is used, gopls will listen on 0.0.0.0. As a result, users might inadvertently cause gopls to nvd · 2026-05-06
Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilitiescisco_psirt · 2026-05-06
Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerabilitycisco_psirt · 2026-05-06
Cisco Identity Services Engine Authentication Bypass Vulnerabilitiescisco_psirt · 2026-05-06
Cisco Prime Infrastructure Information Disclosure Vulnerabilitycisco_psirt · 2026-05-06
Cisco Slido Insecure Direct Object Reference Vulnerabilitycisco_psirt · 2026-05-06
Cisco IoT Field Network Director Vulnerabilitiescisco_psirt · 2026-05-06
Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vulnerabilitycisco_psirt · 2026-05-06
The Accidental C2: Exploring Dev Tunnels for Remote Accessspecterops · 2026-05-06