Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Bypassing egress filtering in BullFrog GitHub Action ↗ (opens in a new tab)

  devansh · Published 2026-02-28 · First collected 2026-10-24

• Mobile Malware Analysis Part 8 - deVixor ↗ (opens in a new tab)

  8kSec Blog · Published 2026-02-25 · First collected 2026-10-24

• VulHunt in Practice: Detecting a Remote Code Execution Vulnerability in rsync ↗ (opens in a new tab)

  Binarly Research · Published 2026-01-30 · First collected 2026-10-24

• Merry Christmas Day! Have a MongoDB security incident. ↗ (opens in a new tab)

  DoublePulsar - Medium · Published 2025-12-26 · First collected 2026-10-24

• IAM Persistence through Eventual Consistency ↗ (opens in a new tab)

  Hacking The Cloud · Published 2025-12-14 · First collected 2026-10-24

• [CONFERENCE] GreHack 2025 ↗ (opens in a new tab)

  RandoriSec · Published 2025-12-12 · First collected 2026-10-24

• pipetap – a windows named pipe proxy tool ↗ (opens in a new tab)

  :: Orange Cyberdefense :: on Orange Cyberdefense · Published 2025-11-21 · First collected 2026-10-24

• fr0tt benotes Bookmark Metadata Endpoint PostController.php getUrlInfo server... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-26

• RHSA-2026:89760: Important: container-tools:rhel8 security, bug fix, and enhancement update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-26

• grafana: CVSS (Max): 7.5 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-26 · First collected 2026-10-26

• CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud ↗ (opens in a new tab)

  NCSC Finland Daily Security News · Published 2026-10-25 · First collected 2026-10-25

• Multiples vulnérabilités dans le noyau Linux de Debian (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• Splunk security advisory (AV26-1077) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-22 · First collected 2026-10-24

• Multiple Cisco Products Snort 3 Denial of Service Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-22 · First collected 2026-10-24

• My KQL Query Counted Two Tag Writes. The Records Told a More Useful Story. ↗ (opens in a new tab)

  System Weakness - Medium · Published 2026-10-22 · First collected 2026-10-24

• NCSC-2026-0447 [1.00] [M/H] Kwetsbaarheden verholpen in GitLab door GitLab Inc. ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-22 · First collected 2026-10-24

• Security Alert (A26-10-41): Multiple Vulnerabilities in Nginx Products ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-22 · First collected 2026-10-24

• GitLab Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-22 · First collected 2026-10-24

• DSA-6577-1 chromium - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-22 · First collected 2026-10-24

• USN-8950-1: poppler vulnerability ↗ (opens in a new tab)

  Ubuntu security notices · Published 2026-10-21 · First collected 2026-10-24

• Risolte vulnerabilità in ISC BIND 9 ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-21 · First collected 2026-10-24

• CC-4875 - Critical Vulnerabilities in PHP (PHP2Shell) ↗ (opens in a new tab)

  Cyber Alert Feed · Published 2026-10-21 · First collected 2026-10-24

• [0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the formWlanMP manufacturing-test handler, root command execution (7.2) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-20 · First collected 2026-10-24

• Poland Ran Pegasus Without Holding The Keys ↗ (opens in a new tab)

  Secjuice · Published 2026-10-20 · First collected 2026-10-24

• WARNING: Heap-Based Buffer Overflows in NGINX Plus and NGINX Open Source Can Be Exploited to Cause Denial of Service or Code Execution, Patch Immediately! ↗ (opens in a new tab)

  CERT.BE advisories · Published 2026-10-19 · First collected 2026-10-24

• CISA Adds Two Known Exploited Vulnerabilities to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-10-16 · First collected 2026-10-24

• CVE-2026-0312 Checkov by Prisma Cloud: Path Traversal Vulnerabilities (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-10-14 · First collected 2026-10-24

• FreeBSD-SA-26:70.tcp ↗ (opens in a new tab)

  FreeBSD security · Published 2026-10-14 · First collected 2026-10-24

• VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration ↗ (opens in a new tab)

  CERT/CC Vulnerability Notes · Published 2026-10-13 · First collected 2026-10-24

• Fabric API Authentication bypass ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-10-13 · First collected 2026-10-24