#vulnerability

@vercel Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers #Security #Vulnerability #OpenSource

@cert_vulnerability_notes VU#280377: Dokploy is vulnerable to OS command injection #Vulnerability #CyberSecurity #InfoSec

@cert_vulnerability_notes VU#369093: MLflow dspy and statsmodels flavors bypass pickle deserialization control #Vulnerability #CyberSecurity #SoftwareEngineering

@cert_vulnerability_notes VU#212479: Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment #Vulnerability #CyberSecurity #Exploit

@rapid7_cybersecurity_blog CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild #CyberSecurity #Vulnerability #Exploit

@jerry_gamblin RBP Tracker: Counting the CVE IDs the CVE List Cannot See #Security #CVE #Vulnerability

@akamai_blog CVE-2026-75650: StyleSmuggler -- Critical RCE in Adobe Commerce and Magento #Cybersecurity #Vulnerability #Ecommerce

@rapid7_cybersecurity_blog CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild #CyberSecurity #Vulnerability #Exploit

@cert_vulnerability_notes VU#369611: ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index #Vulnerability #Security #ExLlamaV3

@rapid7_cybersecurity_blog Metasploit Wrap Up: This One Goes to Sixteen! #CyberSecurity #Metasploit #Vulnerability

@wiz_blog Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 #CloudSecurity #CyberSecurity #Vulnerability

@cert_vulnerability_notes VU#687587: AOMEI Backupper amwrtdrv.sys local privilege escalation vulnerability allows arbitrary writes to physical disks #Vulnerability #CyberSecurity #Exploit

@cert_polska Podatność w oprogramowaniu drEryk Gabinet #Vulnerability #CyberSecurity #Software

@black_duck The vulnerability you didn't write #OpenSource #AppSec #Vulnerability

@cert_vulnerability_notes VU#718077: UEFI Shell module embedded in SPI Flash can be used to bypass Secure Boot #Vulnerability #Security #UEFI

@cert_vulnerability_notes VU#859658: Skullcandy Dime 3 wireless earbuds contain an unauthenticated Bluetooth pairing vulnerability #Vulnerability #CyberSecurity #Bluetooth

@searchlight_labs Out of Bounds, Out of Sandbox: RCE in Go JavaScript Engine #Cybersecurity #Vulnerability #Research

@cert_polska Podatność w oprogramowaniu OptimiDoc Server (On-Premise) #CyberSecurity #Vulnerability #InfoSec

@fastly_blog CVE-2026-82329: JFrog Artifactory Authentication Bypass Exploitation Activity #Security #Vulnerability #CVE

@black_duck Stories from the field, part 2: When vulnerability scores don't tell the whole story #Security #OpenSource #Vulnerability

@lobsters Omarchy: Any User Process Can Escalate to Root #Security #Linux #Vulnerability

@specterops Cleartext Credential Recovery in ServiceNow #CyberSecurity #Identity #Vulnerability

@cert_polska Podatność w oprogramowaniu GNU wget #Security #Vulnerability #GNU

@portswigger_research What's in a tag name? JavaScript, apparently #WebSecurity #JavaScript #Vulnerability

@alex_schapiro How a Blackstone real estate company exposed Social Security digits, dates of birth, addresses, and other applicant data through a GraphQL authorization flaw #Security #Vulnerability #GraphQL

@fast_company The business advantage of unfiltered founder vulnerability #Business #Leadership #Vulnerability

@cert_polska Podatność w oprogramowaniu OutSystems Service Center #CyberSecurity #Vulnerability #InfoSec

@lobsters CVE-2026-33696: From a Schema Name to RCE in n8n #Security #RCE #Vulnerability

@wiz_blog Inside the Metabase SQLi: Exploited in the Wild #CloudSecurity #CyberSecurity #Vulnerability

@cert_polska Podatność w oprogramowaniu entr #CyberSecurity #Vulnerability #Software

@new_in_feedly Enrich and triage Atlassian security releases in the Vulnerability Intel Agent #Security #Vulnerability #Intelligence

@portswigger_research CSS:the bomb inside your inbox #WebSecurity #CyberSecurity #Vulnerability

@portswigger_research CRLF-Powered Desync Attacks: Beheading HTTP Streams #WebSecurity #CyberSecurity #Vulnerability

@darknavy_blog DoGNAVY CyberGym Technical Report #CyberSecurity #Vulnerability #Research

@lobsters Apple Screen Sharing Pre-Auth RCE #Security #Apple #Vulnerability

@cert_polska Podatności w skryptach PHP Jabbers #Security #Vulnerability #PHP

@darknavy_blog Patch In, Exploit Out: How deepsec Reconstructed the Pwn2Own Microsoft Edge Sandbox Escape #CyberSecurity #Exploitation #Vulnerability

@wiz_blog CosmosEscape: Taking Over Every Database in Azure Cosmos DB #CloudSecurity #CyberSecurity #Vulnerability

@akamai_blog CVE-2026-66066: Defending Against the "KindaRails2Shell" Pre-Auth RCE #Cybersecurity #Vulnerability #CloudComputing

@cert_polska Podatność w oprogramowaniu diff-so-fancy #Security #Vulnerability #Cybersecurity