Skip to content

Breaking

Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan
Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan

KEV

Everything RedTeam Tribune has reported about KEV: 2 stories, newest first. Part of our Vulnerabilities coverage.

09 Oct
Vulnerabilities

ProFTPD Access Control Flaw: Federal Agencies Must Patch by Oct 11 After CISA KEV Addition

Federal agencies must remediate a critical ProFTPD access control flaw by October 11 after CISA added it to the KEV catalog.

09 Oct
Vulnerabilities

Apache Struts Remote Code Execution: CISA Mandates Federal Patch by Oct 11

CISA added a high-severity Apache Struts flaw to its catalog, forcing federal agencies to patch or mitigate by October 11 to prevent remote code execution.