CVE/vulnerability
HashiCorp Consul Vulnerability Allows Attackers to Bypass Authorization and Gain Elevated Privileges
HashiCorp disclosed a vulnerability in consul-k8s, a cross-namespace authorization bypass that could let attackers with limited Kubernetes permissions gain elevated Consul privileges.
This vulnerability...
Apple
Apple Fixes Actively Exploited iOS Zero-Day Vulnerability in CoreGraphics
Apple has released updates for iOS 18.7.11 and iPadOS 18.7.11 to address three security vulnerabilities, including a CoreGraphics flaw connected to sophisticated targeted attacks....
CVE/vulnerability
KeePassXC 2.8.0 Released to Fix Multiple Security Vulnerabilities Affecting Password Manager
KeePassXC has released version 2.8.0 to address multiple security vulnerabilities related to database imports, browser integration, SSH key handling, and the protection of sensitive...
CVE/vulnerability
Apache Camel Vulnerabilities Allow Remote Code Execution, Authentication Bypass, and Data Theft
Apache Camel’s security advisories document critical and high-severity vulnerabilities that could allow for remote code execution, authentication bypass, credential exposure, and unauthorized file access....
CVE/vulnerability
Microsoft Authenticator Flaw Allows Android Apps With Zero Permissions to Steal Authentication Tokens
A high-severity vulnerability in Microsoft Authenticator for Android could let a malicious app, without any Android permissions, impersonate trusted Microsoft apps and steal authentication...
CVE/vulnerability
Cloudflare Adds New WAF Rules to Detect Attacks Targeting CVE-2026-111497
Cloudflare announced an emergency release of its Web Application Firewall (WAF) on October 25, 2026. This update introduces two detection rules for the Brotli...
CVE/vulnerability
Hacker Demonstrates PHP Remote Code Execution in StealMyBitcoin Challenge, Shares Exploit
A security researcher has successfully demonstrated a PHP remote code execution (RCE) exploit against the Steal My Bitcoin challenge.
This proof-of-concept (PoC) exploit illustrates...
CVE/vulnerability
Tailscale SSH Vulnerabilities Allow Attackers to Gain Root Access to Connected Servers
Security researchers have revealed multiple high-severity vulnerabilities in Tailscale and Headscale that could let attackers gain root access to connected servers, bypass network security...