Author: admin
Number: AL26-012Date: May 15, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to…
HomeDescriptionVersions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the jsondiffpatch.patch() and jsondiffpatch/formatters/jsonpatch.patch() APIs. An attacker…
Hackers have injected credential-stealing malware into newly published versions of node-ipc, a popular inter-process communication package, in a new supply…
For the oldstable distribution (bookworm), this problem has been fixedin version 7:5.1.9-0+deb12u1.We recommend that you upgrade your ffmpeg packages.For the…
For the oldstable distribution (bookworm), this problem has been fixedin version 2.5.0-2+deb12u3.For the stable distribution (trixie), this problem has been…
During the second day of Pwn2Own Berlin 2026, competitors collected $385,750 in cash awards after exploiting 15 unique zero-day vulnerabilities…
CVSSv3 Score: 4.0 An Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’) vulnerability [CWE-88] in FortiDeceptor WEB UI…
リモートで○されそう Source link
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required…
Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild Microsoft warned that attackers are exploiting CVE-2026-42897, an on-prem Exchange…