CVE-2026-47074: ex_aws_sns verify_message/1 fails to validate SigningCertURL, allowing unauthenticated SNS message signature spoofing; affects versions 2.0.1 to before 2.3.5.
CVE-2026-7747: Totolink N300RH loginauth buffer overflow disclosed with public exploit, immediate patching or isolation required.
A public buffer overflow affecting Edimax BR-6208AC’s /goform/setWAN (pptpDfGateway) is rated 9.0 HIGH; vendor non-responsive, exploit published. Practical steps for inventory, isolation, patching and supplier checks.
Sunnet CTMS and CPAS have an arbitrary file upload vulnerability (CVE-2026-7490) allowing web shells and arbitrary code execution; inventory, isolate uploads, hunt for shells, and apply mitigations immediately.
A newly published CVE shows WP Editor missing nonce checks in add_plugins_page and add_themes_page, allowing forged requests to overwrite plugin and theme PHP if an admin is tricked.
UK aviation safety regulations updated under the retained EU framework; focus on governance and risk management for compliance.
A high severity heap overflow in Wireshark’s TLS dissector affects 4.6.0 to 4.6.4, allowing denial of service and possible code execution. Check vendor guidance, isolate capture hosts and harden analyst workstations immediately.
Donec ullamcorper nulla non metus auctor fringilla. Cras justo odio, dapibus ac facilisis in, egestas eget
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.