Author: admin
Welcome back to the Abstract! Here are the studies this week that gave birth to a one-ton baby, captured a…
Synopsis The Twilio integration webhook handler accepts any POST request without validating Twilio’s ‘X-Twilio-Signature’.When processing media messages, it fetches user-controlled…
CVSSv3 Score: 5.5 An Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability [CWE-22] in FortiSOAR Agent…
VulnCheck observed exploitation of CVE-2025-11953 on December 21, 2025, when our Canary network recorded exploitation of a Metro Development Server.…
MS-ISAC ADVISORY NUMBER:2025-109DATE(S) ISSUED:11/24/2025OVERVIEW:Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary…
Serial number: AV26-293Date: March 27, 2026 On March 26, 2026, Microsoft published a security update to address vulnerabilities in the…
👋 Welcome to the 100th issue of The OSINT Newsletter. This issue contains OSINT news, community posts, tactics, techniques, and…
MS-ISAC ADVISORY NUMBER:2025-110DATE(S) ISSUED:11/24/2025OVERVIEW:A vulnerability has been discovered SonicOS, which could allow for Denial of Service (DoS). SonicOS is the…
The Qualys Threat Research Unit (TRU) discovered several vulnerabilitiesin Apparmor. Details can be found in the Qualys advisory athttps://www.qualys.com/2026/03/10/crack-armor.txtFor the…
CISA Flags Critical PTC Vulnerability That Had German Police Mobilized A critical remote code execution flaw in PTC Windchill and…