Skip to content

Breaking

Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan
Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan

.NET

Everything RedTeam Tribune has reported about .NET: 2 stories, newest first. Part of our Vulnerabilities coverage.

14 Oct
Vulnerabilities

.NET Improper Link Resolution Vulnerability Enables Local Privilege Escalation on Linux and macOS

An authorized attacker can exploit improper link resolution in .NET to elevate privileges locally on Linux and macOS systems running affected runtime versions.

14 Oct
Vulnerabilities

.NET WPF Deserialization Flaw Enables Remote Code Execution on Windows Systems

A high-severity deserialization flaw in .NET WPF lets attackers run code on Windows systems if a user interacts with a crafted link.