// Cyber
Intel Feed

A new Linux kernel local privilege escalation exploit with a public proof-of-concept targets the same subsystem as Dirty Frag but requires a separate patch. Key Takeaways CVE-2026-46300 (Fragnesia) is…

Imagine you build a massive corporate campus with every security control money can buy. Blast resistant doors. Biometric scanners. Guards at every entrance. Maybe something similar to the infamous Dea…

Overview While researching a critical authentication bypass vulnerability, CVE-2026-20127 , which was exploited in-the-wild , Rapid7 Labs discovered a new authentication bypass vulnerability affecting…

Overview On May 13, 2026, Palo Alto Networks published a security advisory for CVE-2026-0265 , a signature verification vulnerability that facilitates authentication bypass on PAN-OS , the operating s…

After a year and one million messages, Elastic's Field Technology team shares five lessons from building production AI agents: why logs matter most, how retrieval thresholds shape quality, and what hi…

Hackers Targeted PraisonAI Vulnerability Hours After Disclosure Attackers began probing for CVE-2026-44338, a PraisonAI authentication bypass flaw, less than four hours after public disclosure. The is…

Dr Fazeelat Duran explores how repeated exposure to distressing material affects law enforcement staff over time—and what organisations can do to better support them.

PJPROJECT 2.16 - Heap Bufferoverflow

ePati Antikor NGFW 2.0.1301 - Authentication Bypass

Apache HertzBeat 1.8.0 - Remote Code Execution

WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI

A vulnerability was found in HCL AION 2.1.0 . It has been declared as problematic . This impacts an unknown function. Executing a manipulation can lead to insertion of sensitive information into sent …

A vulnerability was found in reconurge flowsint up to 1.2.2 . It has been rated as problematic . Affected is an unknown function of the component Description Handler . The manipulation leads to cross …

A vulnerability categorized as critical has been discovered in MagicMirrorOrg MagicMirror up to 2.35.x . Affected by this vulnerability is an unknown functionality of the file /cors of the component E…

A vulnerability identified as critical has been detected in Cisco Catalyst SD-WAN Manager . Affected by this issue is some unknown functionality of the component Web UI . This manipulation causes logg…

A vulnerability labeled as critical has been found in Cisco Catalyst SD-WAN Manager . This affects an unknown part of the component Web UI . Such manipulation leads to logging of excessive data. This …

A vulnerability marked as problematic has been reported in premailer css_parser up to 1.21.x/2.0.x . This vulnerability affects unknown code. Performing a manipulation results in inclusion of function…

A vulnerability described as problematic has been identified in Microsoft kiota-java, Microsoft.Kiota.Abstractions, kiota-http-go, kiota-typescript, -kiota-abstractions and microsoft-kiota-http . This…

A vulnerability classified as critical has been found in huggingface diffusers up to 0.37.x . Impacted is the function DiffusionPipeline.from_pretrained of the file pipeline_loading_utils.py . The man…

A vulnerability classified as problematic was found in Cisco Catalyst SD-WAN Manager . The affected element is an unknown function of the component XML File Parser . The manipulation results in xml ex…

A vulnerability, which was classified as problematic , has been found in Microsoft Exchange Server . The impacted element is an unknown function. This manipulation causes cross site scripting. This vu…

A vulnerability, which was classified as problematic , was found in PoDoFo up to 1.0.3 . This affects the function compute_hash_to_sign of the file src/podofo/private/OpenSSLInternal_Ripped.cpp . Such…

A vulnerability has been found in Microsoft Authenticator on Android/iOS and classified as problematic . This impacts an unknown function. Performing a manipulation results in information disclosure. …