Source intelligence
425 collected source records. Original advisories and security research.
300 matching sources · Newest published first
Open CVE tracker →Original publisher records, awaiting Egret editorial review. Headlines open the original source; CVE identifiers open the tracker.
Scroll across the table to see all columns.
| Published | Finding / research | Publisher | Identifiers |
|---|---|---|---|
| Microsoft Security Advisory CVE-2026-114150 - ASP.NET Core Information Disclosure Vulnerability GHSA: GHSA-6vjv-7wm8-p67r CVE: CVE-2026-114150 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.AspNetCore.App.Runtime.linux-arm (nuget) Affected versions: >= 11.0.0-preview.2.26159.112, <=… |
GitHub Advisory Database | CVE-2026-114150GHSA-6VJV-7WM8-P67R |
|
| Microsoft Security Advisory CVE-2026-118748 - ASP.NET Core Denial of Service Vulnerability GHSA: GHSA-5h82-77p6-2wp3 CVE: CVE-2026-118748 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.AspNetCore.App.Runtime.linux-arm (nuget) Affected versions: >= 11.0.0-preview.7.26381.103, <=… |
GitHub Advisory Database | CVE-2026-118748GHSA-5H82-77P6-2WP3 |
|
| Microsoft Security Advisory CVE-2026-114155 - .NET Elevation of Privilege Vulnerability GHSA: GHSA-q7j6-px74-p2vw CVE: CVE-2026-114155 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.DotNet.HotReload.Watch.Aspire (nuget) Affected versions: >= 10.0.300, <= 10.0.303 Patched ver… |
GitHub Advisory Database | CVE-2026-114155GHSA-Q7J6-PX74-P2VW |
|
| Citrus Ransomware: tactics, techniques, procedures, and links to Toy Ghouls In recent years, cyberthreats have increasingly taken a hybrid approach, combining time-tested techniques for advancing through infrastructure, modern methods of evading network filters, and automation powered by large l… |
Securelist | ||
| CISA flags Cisco BroadWorks flaw as actively exploited in attacks The US Cybersecurity and Infrastructure Security Agency (CISA) warned on Tuesday that hackers are now exploiting a high-severity Cisco BroadWorks vulnerability in attacks. Cisco BroadWorks is a cloud unified communicatio… |
BleepingComputer | ||
| eBPF Rootkits: Why Underground Actors Are Taking Notice For years, eBPF (extended Berkeley Packet Filter) has been one of the most celebrated technologies in the Linux kernel. It lets developers run sandboxed programs inside the kernel without writing kernel modules, while po… |
BleepingComputer | ||
| Active ScreenConnect attacks breach MSPs, impact dozens of organizations Update 11/11/26: Added additional information from ConnectWise and Huntress. ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environm… |
BleepingComputer | None reported |
|
| Hackers use AntiFox AI agents in AWS credential-theft attacks Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services and AWS environments. The infrastructure hosting AntiFox was used f… |
BleepingComputer | None reported |
|
| У DigiCert произошла утечка данных клиентов Удостоверяющий центр DigiCert уведомил клиентов об утечке данных. Причиной стала ошибка, допущенная во время миграции внутренней системы: еще в феврале 2025 года эту систему переместили из сети, доступной только через VP… |
Xakep | None reported |
|
| EtherHiding. Как хакеры превратили смарт-контракты в хранилища малвари Содержание статьи В UNC5342 входят многочисленные северокорейские группировки, ответственные, например, за кампанию Contagious Interview с поддельными предложениями о работе. Сегодня посмотрим, как EtherHiding работает и… |
Xakep | None reported |
|
| Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities Microsoft has released its monthly security update for November 2026, which includes 1095 vulnerabilities affecting a range of products, including 64 that Microsoft marked as "critical." Microsoft notes that 1 of the vul… |
Cisco Talos | ||
| Уязвимости Plex2Shell используются для атак на NAS Qnap В компании Qnap сообщили о случаях компрометации NAS, на которых установлен уязвимый Plex Media Server. По информации специалистов, в атаках хакеры используют цепочку уязвимостей Plex2Shell, поэтому владельцам устройств … |
Xakep | ||
| Binance: уязвимость в iOS может привести к утечке ключей криптокошельков Представители криптобиржи Binance предупредили об уязвимости worse_query в iOS, которая позволяет одному приложению прочитать файлы других. По данным компании, под угрозой могут оказаться seed-фразы криптокошельков, прив… |
Xakep | ||
| Critical RCE Vulnerability in Apache HTTP Server: Everything You Need To Know | Wiz Blog Critical RCE Vulnerability in Apache HTTP Server: Everything You Need To Know Detect and mitigate CVE-2026-119618, a critical RCE vulnerability in Apache HTTP Server. According to Wiz data, 64% of cloud environments have… |
Wiz Research | ||
| CVE-2026-111579 - Forminator Forms 1.58.0 - 1.58.3 - Unauthenticated Privilege Escalation via Paid Registration Form When Stripe Gateway Unavailable CVE-2026-111579 Forminator Forms 1.58.0 - 1.58.3 - Unauthenticated Privilege Escalation via Paid Registration Form When Stripe Gateway Unavailable Description The Forminator Forms WordPress plugin before 1.58.4 does not … |
CVE Feed | ||
| CVE-2026-115735 - Somatic Framework <= 1.8.14 - Subscriber+ Arbitrary File Deletion CVE-2026-115735 Somatic Framework <= 1.8.14 - Subscriber+ Arbitrary File Deletion Description The Somatic Framework WordPress plugin through 1.8.14 does not perform an authorization check or validate a user-supplied file… |
CVE Feed | ||
| Microsoft November Patch Tuesday: one exploited Outlook bug and 30 wormable flaws Microsoft November Patch Tuesday addressed about 1,090 new vulnerabilities, which is less than the roughly 1,400 last month. Two months in a row now exceed every previous year from Microsoft, and the overall count is a b… |
Security Affairs | ||
| Hackers Advertise a $1,000 Gmail Tool That Allegedly Survives Password Resets A developer of hacking tools is selling a $1,000 per month feature that allegedly gives criminals continuous access to Gmail inboxes. The cybersecurity firm Hudson Rock reports that the tool can keep reading a victim’s m… |
Security Affairs | None reported |
|
| CVE-2026-115734 - Pay With a Tweet <= 1.0.5 - Subscriber+ Arbitrary File Deletion via Button Download Path CVE-2026-115734 Pay With a Tweet <= 1.0.5 - Subscriber+ Arbitrary File Deletion via Button Download Path Description The Pay with a tweet WordPress plugin through 1.0.5 does not validate a file path before deleting it, n… |
CVE Feed | ||
| CVE-2026-117523 - Dynific Addons for Elementor < 1.3.1 - Subscriber+ Module Settings Update via aep_module AJAX Action CVE-2026-117523 Dynific Addons for Elementor < 1.3.1 - Subscriber+ Module Settings Update via aep_module AJAX Action Description The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.… |
CVE Feed | ||
| CVE-2026-117522 - Dynific Addons for Elementor < 1.3.1 - Author+ Stored XSS via Post Title in Post Image Widget CVE-2026-117522 Dynific Addons for Elementor < 1.3.1 - Author+ Stored XSS via Post Title in Post Image Widget Description The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does … |
CVE Feed | ||
| CVE-2026-117521 - Dynific Addons for Elementor < 1.3.1 - Author+ Stored XSS via Display Name in Post Author Widget CVE-2026-117521 Dynific Addons for Elementor < 1.3.1 - Author+ Stored XSS via Display Name in Post Author Widget Description The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 do… |
CVE Feed | ||
| Microsoft Security Advisory CVE-2026-109481 - ASP.NET Core Elevation of Privilege Vulnerability GHSA: GHSA-xw2x-23jm-j582 CVE: CVE-2026-109481 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.AspNetCore.App.Runtime.linux-arm (nuget) Affected versions: >= 11.0.0-preview.6.26359.118, <=… |
GitHub Advisory Database | CVE-2026-109481GHSA-XW2X-23JM-J582 |
|
| Microsoft Security Advisory CVE-2026-118750 - ASP.NET Core Denial of Service Vulnerability GHSA: GHSA-6527-9fp8-r4x6 CVE: CVE-2026-118750 Reported severity: medium Advisory package entry 1: Affected package: Microsoft.AspNetCore.WebUtilities (nuget) Affected versions: >= 2.3.0, <= 2.3.13 Patched version: 2.3.1… |
GitHub Advisory Database | CVE-2026-118750GHSA-6527-9FP8-R4X6 |