Debian APT · DisclosedAll articles
Everything the Radar published in the last 30 days, newest first. Search by company, product or CVE.
143 articles found · clear
- Debian APT · Disclosed
Node.js · DisclosedNode.js warns of high-severity flaws; fixes due November 11
Ruby on Rails · DisclosedRails Patches Critical Flaw Enabling Arbitrary Server File Writes
Xen Project Xen · DisclosedXen Patches Cross-VM Memory Flaws; Versions 4.6 to 4.16 Unpatched
Tencent Sogou Input Method · Exploitation reportedTencent Patches Sogou After DNS Hijack Delivered DarkVigil Backdoor
Google Chrome · Exploitation reportedGoogle Rolls Out Chrome 157 With 213 Fixes, Seven Critical
SolarWinds Dameware · DisclosedSolarWinds patches critical command injection flaw in Dameware
SonicWall Global Management System · Exploitation confirmedCritical unpatched SonicWall GMS flaw exposes internal files without authentication
Apple iOS · Public exploit codePDF via AirDrop compromises iPhone in Lockdown Mode; malware survives update
Microsoft Windows Error Reporting · Public exploit codePrivilege escalation exploit for Windows Error Reporting goes public
Barracuda Email Security Gateway · DisclosedBarracuda Flaws Could Be Chained to Bypass Authorization and Gain Root
express-session · DisclosedPrototype pollution can weaken Express session cookies, researcher shows
Google Password Manager · DisclosedGolden Pass-ta-key attack steals all Google-synced passkeys, research shows
Google Android · Exploitation reportedGoogle Patches Critical Zero-Click RCE in Android 14 to 17
Node-RED · Exploitation reportedCritical Node-RED Flaw Exploited to Deploy Linux Bots and Persistent Webshells
WinRAR · Exploitation reportedGorbag Exploits Patched WinRAR Flaw in Espionage Against Ukraine
Google V8 · Public exploit codeResearchers Execute Code in Chrome via Three V8 Flaws
HPE Aruba Networking ArubaOS · DisclosedHPE patches 8 CVSS 10 pre-auth RCE flaws in ArubaOS
Siemens SIMATIC IoT2050 Advanced · Exploitation reportedSiemens IoT2050 Advanced CVSS 10 flaw actively exploited to plant backdoors
CryptoPayment Gateway · Exploitation reportedUnpatched CVSS 10 CryptoPayment Gateway Flaw Faces Exploitation Attempts
Progress WS_FTP Server · DisclosedProgress patches 15 WS_FTP flaws; worst steals admin credentials
Mozilla Firefox · DisclosedFirefox 159 fixes 41 high-severity flaws found by researchers
OpenBSD 8.0 · DisclosedOpenBSD 8.0 patches remotely triggerable IPsec heap overflow and nsd flaws
Langflow · DisclosedLangflow Patches Two Critical Unauthenticated Remote Code Execution Flaws