Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• IonStack Part I: Unsound IonBanana Peel in Ion Compiler, Slipping Through Firefox's SpiderMonkey JIT ↗ (opens in a new tab)

  Nebula Security · Published 2026-07-10 · First collected 2026-10-24

• Oracle Critical Security Patch Update Advisory - June 2026 ↗ (opens in a new tab)

  Oracle security alerts · Published 2026-06-16 · First collected 2026-10-24

• Zombie COTables: Resurrecting Freed Memory to Escape VirtualBox ↗ (opens in a new tab)

  Exodus Intelligence · Published 2026-06-15 · First collected 2026-10-24

• Bug Hunting on Gemini Spark ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-06-05 · First collected 2026-10-24

• Pwning Minecraft: 4-byte heap overflow to RCE ↗ (opens in a new tab)

  OtterSec · Published 2026-06-02 · First collected 2026-10-24

• Vulnerability Remediation: Process, Tools & Best Practices ↗ (opens in a new tab)

  Resources RSS Feed | ONEKEY · Published 2026-06-01 · First collected 2026-10-24

• Docker Internal (1) ↗ (opens in a new tab)

  u1f383 · Published 2026-05-27 · First collected 2026-10-24

• Microsoft patchetirsdag mai ↗ (opens in a new tab)

  NSM NCSC news · Published 2026-05-12 · First collected 2026-10-24

• France Cybersecurity Challenge 2026 ↗ (opens in a new tab)

  RandoriSec · Published 2026-05-04 · First collected 2026-10-24

• down-the-line - TRX CTF Quals 2026 ↗ (opens in a new tab)

  kqx · Published 2026-04-26 · First collected 2026-10-24

• Microsoft Vibing — capturing screenshots and voice samples without governance ↗ (opens in a new tab)

  DoublePulsar - Medium · Published 2026-04-23 · First collected 2026-10-24

• How Browser Exploits Work: A Case Study of CVE-2025-43529 (DarkSword iOS Chain) ↗ (opens in a new tab)

  8kSec Blog · Published 2026-04-19 · First collected 2026-10-24

• Intercepting WCF Traffic with wcfproxy ↗ (opens in a new tab)

  SySS Tech Blog · Published 2026-04-14 · First collected 2026-10-24

• ICS Security Conference 2026 ↗ (opens in a new tab)

  JPCERT advisories · Published 2026-04-14 · First collected 2026-10-24

• Disabling Security Features in a Locked BIOS ↗ (opens in a new tab)

  MDSec · Published 2026-03-26 · First collected 2026-10-24

• From flat networks to locked up domains with tiering models ↗ (opens in a new tab)

  :: Orange Cyberdefense :: on Orange Cyberdefense · Published 2026-03-09 · First collected 2026-10-24

• sudo restriction bypass via Docker Group in BullFrog GitHub Action ↗ (opens in a new tab)

  devansh · Published 2026-02-28 · First collected 2026-10-24

• Vulnerability REsearch using VulHunt ↗ (opens in a new tab)

  Binarly Research · Published 2026-02-20 · First collected 2026-10-24

• 2025 Hacking the Cloud: Year in Review ↗ (opens in a new tab)

  Hacking The Cloud · Published 2026-01-04 · First collected 2026-10-24

• Reverse Engineering the Tapo C260 and Tapo Discovery Protocol v2 ↗ (opens in a new tab)

  Spaceraccoon's Blog · Published 2026-01-02 · First collected 2026-10-24

• macOS: Shellcoding on Apples (x86_64) ↗ (opens in a new tab)

  Zeyad Azima · Published 2025-11-24 · First collected 2026-10-24

• The Chessboard of Security: Insights on Product Development and Vulnerabilities from a Hacker Perspective ↗ (opens in a new tab)

  Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter · Published 2025-11-07 · First collected 2026-10-24

• An overview of the PPPP protocol for IoT cameras ↗ (opens in a new tab)

  Almost Secure · Published 2025-11-05 · First collected 2026-10-24

• Edimax BR-6208AC Virtual Server cross site scriptingA vulnerability has been ... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-26

• RHSA-2026:89745: Moderate: bind security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-26

• jackson Products: CVSS (Max): 7.5 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-26 · First collected 2026-10-26

• Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software ↗ (opens in a new tab)

  The Hacker News · Published 2026-10-24 · First collected 2026-10-24

• MongoDB security advisory (AV26-1078) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans les produits Red Hat (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-22 · First collected 2026-10-24