CISA issues urgent warning for actively exploited zero-day CVE-2026-104935 in Ivanti Connect Secure. The auth bypass flaw allows RCE. Patch immediately. #Ivanti #ZeroDay #CVE #InfoSec
π cyber[.]netsecops[.]io

π¨ EUVD-2022-24632 π 7.8/10 π An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specia... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-24632 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2022-4552 π 5.3/10 π’ OpenSSL π The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then th... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4552 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2022-2698 π n/a π’ OpenSSL π The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attack... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-2698 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2022-24767 π n/a π An out-of-bounds read flaw was found in the Linux kernelβs TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIO... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-24767 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2022-3867 π 7.5/10 π’ OpenSSL π The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. Thi... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3867 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2022-24965 π n/a π A use-after-free flaw was found in the Linux kernelβs Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-24965 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2022-25125 π n/a π A NULL pointer dereference flaw was found in the Linux kernelβs KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c. Th... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-25125 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-101021 π 5.5/10 π A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file. The lo... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101021 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-101020 π 9.8/10 π’ TR7 Cyber ββDefense Inc. π Missing authentication for critical function vulnerability in TR7 Cyber ββDefense Inc. TR7 ASP on virtual appliance and TR7 Cyber ββDef... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101020 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2022-25155 π n/a π A use-after-free flaw was found in the Linux kernelβs pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_in... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-25155 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-101019 π 9.8/10 π’ TR7 Cyber ββDefense Inc. π Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber ββDefense Inc. TR... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101019 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2022-34369 π n/a π A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34369 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-101022 π 7.3/10 π’ VideoWhisper.com π Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured A... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101022 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2026-101023 π 6.5/10 π’ Muralidharan Ramasamy π Missing Authorization vulnerability in Muralidharan Ramasamy Push Notification for Post and BuddyPress push-notification-for-post-and-budd... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101023 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2022-6221 π n/a π’ OpenSSL π AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. Th... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-6221 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2022-34438 π n/a π A flaw was found in the Linux kernelβs KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causin... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34438 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2022-6272 π n/a π’ OpenSSL π The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA i... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-6272 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2022-34596 π 7.5/10 π’ Linux kernel π io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34596 #cybersecurity #infosec #cve #euvd
π¨ EUVD-2022-34761 π 6.9/10 π’ Linux kernel π Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trus... π https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34761 #cybersecurity #infosec #cve #euvd