Skip to content

Breaking

Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan
Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan

source code

Everything RedTeam Tribune has reported about source code: 2 stories, newest first. Part of our Vulnerabilities coverage.

16 Oct
Vulnerabilities

Trivy, govulncheck False Positives: Source Flaw Missing in Binary Highlights Assessment Gaps

Security scanners flagged a flaw in source code that does not appear in the final compiled binary, raising questions about vulnerability assessment accuracy.

15 Oct
Vulnerabilities

Hardcoded Secrets Mistakes: 7 Code Errors That Leak Credentials

Hardcoded secrets persist in binary files and git history even after removal, creating a permanent attack surface that standard scanning often misses.