Januscape: 16-Year-Old Linux KVM Bug Enables Cloud VM Escape Attacks
Januscape: A 16-year-old Linux KVM flaw lets cloud VM tenants crash hosts and potentially escape guests. It affects Intel and AMD systems.
Vulnerability Disclosure
20 articles
Google Gemini Live API Flaw Allows RCE via Unconstrained Ephemeral Tokens
A significant security vulnerability in Google’s Gemini Live API has exposed applications to remote code execution (RCE) due to misconfigured ephemeral token...
Cybersecurity jobs available right now: July 7, 2026
Application Security Lead Gett | Israel | Hybrid – View job details As an Application Security Lead, you will lead application and cloud security initiatives...
[remote] iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter
iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter
[webapps] WordPress Bricks Builder Theme - RCE
WordPress Bricks Builder Theme - RCE
[remote] Hydra - Stack Buffer Overflow
Hydra - Stack Buffer Overflow
[webapps] Tenable Nessus 10.12.1 - SQL Injection
Tenable Nessus 10.12.
[webapps] MCPJam Inspector - Remote Code Execution
MCPJam Inspector - Remote Code Execution
'Bad Epoll' vulnerability allows root access on Linux and Android
The Bad Epoll flaw resides within the epoll subsystem of the Linux kernel, a fundamental component for managing network connections and file events.
Opera GX browser vulnerability could allow data theft and DoS attacks
The vulnerability, found by security researcher zhero_web_security, allows for a zero-click cross-site leak (XS-Leak) by exploiting the automatic installatio...
Criminal IP integrates threat intelligence with OpenCTI for automated indicator enrichment
Criminal IP has integrated its threat intelligence with OpenCTI, enabling security teams to automatically convert IP addresses, domains, and URLs into struct...
Proof-of-Concept Exploit Released for Linux ‘Bad Epoll’ Root Access Vulnerability
Organizations are urged to patch after proof-of-concept code makes the Linux root escalation flaw easier to exploit. The post Proof-of-Concept Exploit Releas...
Critical Opera GX Vulnerability Lets Attackers Inject CSS Across Every Webpage
A critical security vulnerability in Opera GX has been disclosed, revealing that attackers could exploit the browser’s GX Mods feature to inject malicious CS...
Prompt Injection Attacks Trick AI Agents Into Making Crypto Payments
Researchers uncovered two campaigns embedding indirect prompt injections in malicious websites to exploit autonomous AI agents browsing the web. The post Pro...
FatFs Vulnerabilities Let Attackers Execute Code via Crafted USB and SD Card Images
A newly disclosed set of vulnerabilities in the widely used FatFs file system library is raising significant concerns across the embedded systems ecosystem. ...
[webapps] WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS)
WordPress Plugin WPZOOM Portfolio 1.4.
[local] MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation
MEmu Android Emulator 9.2.
[webapps] KeepInMind 0.8.4.2 - Stored XSS
KeepInMind 0.8.
Week in review: SimpleHelp vulnerability exploited, Oracle EBS Payments flaw under attack
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Companies keep bolting AI onto their products, and the secu...
Weekly Metasploit Update: Modules for SMB-to-Meterpreter, Peyara Remote Mouse RCE exploit, and more
It's Time to Upgrade Your SMB Session This week, Metasploit contributor Dean Welch has added an SMB to Meterpreter session upgrade module. It uses PsExec to ...