Browsing: Alerts

Overview The Open5GS WebUI component contains default hardcoded secrets used for security-sensitive operations, including JSON Web Token (JWT) signing. If…

Iran Linked Cyber Activity and Relevance to Alberta OrganizationsThis report is distributed as TLP:CLEAR. Recipients may share this information without…

Overview The binary-parser library for Node.js contains a code injection vulnerability that may allow arbitrary JavaScript code execution if untrusted…

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit…

Synopsis Tenable Research has identified and responsibly disclosed a critical privilege escalation vulnerability in GCP Eventarc. This flaw allowed an…

For the oldstable distribution (bookworm), this problem has been fixedin version 1.34-2+deb12u2.For the stable distribution (trixie), this problem has been…

Serial number: AV26-024Date: January 13, 2026Updated: March 18, 2026 On January 13, 2026, Microsoft published security advisories to address vulnerabilities in multiple products.…

HomeDescriptionA flaw has been found in Linksys MR9600 2.0.6.206937. Affected is the function smartConnectConfigure of the file SmartConnect.lua. Executing a…

MS-ISAC ADVISORY NUMBER:2026-008DATE(S) ISSUED:01/28/2026OVERVIEW:Multiple vulnerabilities have been discovered in SolarWinds Web Help Desk, the most severe of which could allow…

Overview An out-of-bounds memory access vulnerability exists in the uncompressed decoder component of libheif. A maliciously crafted HEIF image can…