Skip to content

Breaking

Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan
Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan

critical vulnerability

Everything RedTeam Tribune has reported about critical vulnerability: 2 stories, newest first. Part of our Vulnerabilities coverage.

20 Oct
Vulnerabilities

Apache Tomcat Critical HTTP/2 Async Recycling Bug Leaks User Data; Patch Now

A critical bug in Apache Tomcat allows HTTP/2 asynchronous requests to mix, potentially leaking data between users until patches are applied.

10 Oct
Vulnerabilities

Privasys Go Quote Relay Bug Bypasses Attestation Checks in Pre-v0.5.1 Versions

A critical vulnerability in Privasys Go allows attackers to relay enclave quotes, bypassing attestation checks in versions prior to v0.5.1.