CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
advisories
20 articles
ISC Stormcast For Tuesday, August 18th, 2026 https://isc.sans.edu/podcastdetail/10056, (Tue, Aug 18th)
[webapps] Nodemailer 9.0.0 - File Read/ SSRF
Nodemailer 9.0.
[webapps] Linuxfabrik monitoring_plugins_6.0.0 - SSRF
Linuxfabrik monitoring_plugins_6.0.
[remote] PCMan 2.0.7 - Buffer Overflow
PCMan 2.0.
[dos] NanaZip 6.5 - DoS
NanaZip 6.
[webapps] flyto-core 2.26.7 - Arbitrary File Write
flyto-core 2.26.
Apple Patches iOS and macOS, (Mon, Aug 17th)
Apple today released updates for iOS/iPadOS (26 and 18) and macOS 26. This update fixes 108 vulnerabilities and comes about two weeks after the much smaller ...
Apple Screen Sharing Security, (Mon, Aug 17th)
About 20 years ago, with macOS 10.5 (Leopard), Apple introduced screen sharing.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-62593 Ray-Proje...
ISC Stormcast For Monday, August 17th, 2026 https://isc.sans.edu/podcastdetail/10054, (Mon, Aug 17th)
[webapps] WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload
WooCommerce 1.5.
[remote] ipTIME A3004T - Remote Code Execution
ipTIME A3004T - Remote Code Execution
[remote] D-Link DNS_340L - OS Command Injection
D-Link DNS_340L - OS Command Injection
[remote] phpSysInfo 3.4.5 - IP Allowlist Bypass
phpSysInfo 3.4.
[dos] Nmap 7.99 - Extension Header Integer Underflow
Nmap 7.
[webapps] Duplicati 2.2.0.3 - JWT Signing Key Leak
Duplicati 2.2.
[webapps] Joomla JCE_2.9.15 - Remote Code Execution
Joomla JCE_2.9.
[dos] NanaZip 6.5 - DoS
NanaZip 6.
[webapps] flyto_core 2.26.7 - Server-Side Request Forgery
flyto_core 2.26.