Skip to content
skopnix
Section C · The archive
Every edition · newest first

The archive.

1,104 dispatchespage 1 / 19№ 1,104 – 1,045

  1. Sat 17 Oct 2026

    7 dispatches
    North Korean IT Workers Used Stolen US Identities to Earn $3 MillionAPT
  2. Drupal patches critical RCE flaws, warns exploits may emerge soonVULN
  3. MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native AddonSUPL
  4. Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 TenantsBRCH
  5. BeyondTrust CVE-2026-102764 actively exploited—patch now • BlockStrap RCE on Magento/Commerce (08936e4) • LearnPress CVSS 9.8 PHP injection flaw (CVE-2026-104736) 4 sources verifieVULN
  6. Daily IT Security Digest — 2026-10-17 An authenticated remote code execution vulnerability in Palo Alto Networks PAN-OS (CVE-2026-0322) is being exploited in the wild. The attack tEXPL
  7. Microsoft Patches 1,413 Security Vulnerabilities Microsoft has released security updates addressing a record 1,413 vulnerabilities, including an actively exploited Windows zero-dayVULN

  8. Fri 16 Oct 2026

    6 dispatches
    GHSA-pw5q-rjx4-7f7p: Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hieraVULN
  9. Critical BlockStrap flaw lets hackers run code on Magento serversEXPL
  10. GHSA-h4mw-j7qp-8mwm: Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command ExecutionVULN
  11. CISA adds CVE-2026-102764 (BeyondTrust Remote Support) to the Known Exploited Vulnerabilities catalogKEV
  12. CISA adds CVE-2025-61624 (Fortinet Multiple Products) to the Known Exploited Vulnerabilities catalogKEV
  13. Targeted ads installed Candiru spyware in zero-click attacksMALW

  14. Thu 15 Oct 2026

    1 dispatch
    Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)KEV

  15. Fri 09 Oct 2026

    27 dispatches
    GHSA-m687-p538-r5hp: Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin which should not be trustedVULN
  16. GHSA-j3hg-9rp3-5hw9: Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storageVULN
  17. GHSA-pwhx-cvv3-qj5c: Tina: Code injection via unescaped Git branch name in generated client sourceSUPL
  18. GHSA-x34j-47hf-4xg7: TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragmentVULN
  19. GHSA-c42q-qvc3-j6vg: @tinacms/web-components: tina-markdown writes rich-text link URLs into href without scheme validation, allVULN
  20. GHSA-628f-v4f6-p37r: Contao: Cross-site scripting in the comments bundleVULN
  21. GHSA-wq92-8x3r-fm38: Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the APIVULN
  22. GHSA-pqf9-h8g4-8gmh: Vikunja: Unbounded CSV row cardinality permits API process terminationVULN
  23. GHSA-w7jp-mf2v-8342: Vikunja: Denial of service via decompression bomb in the data importVULN
  24. GHSA-4vh2-39rq-rq8j: Vikunja: Unbounded image decode on avatar and project-background uploads enables decode/resize amplificationVULN
  25. GHSA-qfwc-vx6f-3g6g: Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpointVULN
  26. GHSA-6rvj-qwjf-3m4q: Vikunja: Every /api/v2 pre-auth endpoint is unthrottled on a stock install while its /api/v1 twin is rate limiVULN
  27. GHSA-r6w9-259g-gwrv: Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB rVULN
  28. GHSA-xv7q-fvmc-jx96: Vikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeoverVULN
  29. GHSA-p393-cf76-4jmr: Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config OverwriteVULN
  30. GHSA-4jfq-pmq9-257h: ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud getFileURL Endpoint Leads to Remote Denial of SeVULN
  31. Ransomware: thegentlemen → DeloitteRANS
  32. Ransomware: Black X → bayerRANS
  33. Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) - watchTowr LabsKEV
  34. Belarusian hacktivists admit to 2023 breach of Russian state healthcare networkAPT
  35. GHSA-pfvf-fwfp-25mp: Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthyVULN
  36. When a Wallet Drainer Asks DNS Where to GoMALW
  37. OpenAI says it disrupted Russian and Iranian influence ops that used ChatGPTAPT
  38. Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root AccessEXPL
  39. Man admits to running network of 15,000 money mules for cybercriminalsMISC
  40. FBI Takes Down China-Linked Tools That Scanned US UtilitiesAPT
  41. Thousands of wind and solar park systems sit exposed on the internet across EuropeRSCH

  42. Thu 08 Oct 2026

    19 dispatches
    GHSA-6v25-8wq6-xq4j: Hazelcast allows arbitrary member memory access by low-privileged clientVULN
  43. GHSA-w294-6q5q-53p8: Hazelcast has an authorization bypass in IMap Predicates APIVULN
  44. GHSA-ww5h-9m49-7xx4: fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusiVULN
  45. GHSA-6wjp-v33h-5cvq: PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and insVULN
  46. GHSA-c78w-2q4r-68r7: PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypVULN
  47. GHSA-9mp3-24cc-77mg: PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool CallsVULN
  48. GHSA-hc5v-gxvj-58wh: PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidatVULN
  49. GHSA-5r6c-gj4g-r697: PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessVULN
  50. CISA adds CVE-2016-3081 (Apache Struts) to the Known Exploited Vulnerabilities catalogKEV
  51. CISA adds CVE-2015-5477 (ISC BIND) to the Known Exploited Vulnerabilities catalogKEV
  52. CISA adds CVE-2015-3306 (ProFTPD ProFTPD) to the Known Exploited Vulnerabilities catalogKEV
  53. CISA adds CVE-2023-22894 (Strapi Strapi) to the Known Exploited Vulnerabilities catalogKEV
  54. CISA adds CVE-2021-3199 (ONLYOFFICE Docs) to the Known Exploited Vulnerabilities catalogKEV
  55. DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHubAPT
  56. Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform MalwareAPT
  57. GHSA-6fqq-452j-qhrp: Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends earlyVULN
  58. GHSA-r3rv-jm3r-62q2: MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPESVULN
  59. GHSA-v6pj-gxxw-phfw: MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)VULN
  60. GHSA-48qf-xh34-q73r: MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parametersVULN