Apple macOS · DisclosedAll articles
Everything the Radar published in the last 30 days, newest first. Search by company, product or CVE.
143 articles found · clear
- Apple macOS · Disclosed
Oracle PeopleSoft · Exploitation reportedAnalysis: PeopleSoft zero-day used by ShinyHunters was three chained flaws
Mozilla Firefox · DisclosedFirefox 159 patches sandbox escape and same-origin policy bypass
Microsoft Authenticator · Public exploit codePatched Android Authenticator Flaw Let Permissionless Apps Steal Work Tokens
GoAhead web server · DisclosedGoAhead Accepts Revoked Certificates; Public PoC, Fixes Depend on Manufacturers
Apple iOS e iPadOS · Exploitation confirmedApple Patches Exploited CoreGraphics Zero-Day on Older iPhones
Modelos de IA da OpenAI · Public exploit codeOpenAI Patched Compaction Flaw That Exposed Hidden Model Reasoning
Microsoft Windows Server 2008 Service Pack 2 · Public exploit codePoC released for privilege elevation flaw in Windows Server
Mautic self-hosted · DisclosedThree Severe Mautic Flaws; FOFA Sees 29.9K Exposed Instances
Roteadores Wi-Fi com a falha WPSplinter na… · DisclosedWPSplinter: NETGEAR requests PoC; working exploit hits end-of-support ASUS
LINE · DisclosedResearchers: LINE encryption flaws let malicious server replay messages
Microsoft Kernel do Windows · Public exploit codeCVE-2026-40369: unprivileged Windows kernel write reachable from browser sandboxes
Medkey EHR · Public exploit codeIDOR in Medkey EHR exposes other patients' records; PoC public
Apache Camel / Camel K · DisclosedEight Apache Camel flaws allow code execution; fixes available
PHP · DisclosedPHP Publishes Mitigation for Critical RCE CVE-2026-115560, Limited Exploit Conditions
Microsoft .NET · DisclosedMicrosoft Emergency Patch Fixes Critical .NET Buffer Overflow Flaw
Smile Digital Health · DisclosedFour HAPI FHIR flaws allow data leakage in Smile CDR
KeePassXC · DisclosedKeePassXC 2.8.0 fixes use-after-free in legacy KDB import
GPUs AMD Navi31 · Public exploit codeResearcher releases Wake & Break exploit for AMD Navi31 GPU PSP
Cliente Tailscale · DisclosedTailscale Fixes Tailworm in Client 1.104.4; headscale Still Unpatched
Fortinet FortiSIEM · Exploitation confirmedCanada's Cyber Centre reports active exploitation of FortiSIEM RCE
Contrato daosfun · DisclosedResearcher claims critical vulnerability in daosfun contract on Solana mainnet
Electrum Bitcoin wallet · Exploitation reportedElectrum 4.8.3 Fixes Flaw Exploited to Steal Bitcoin
Postiz · DisclosedPostiz 2.25.3 fixes forged tokens and path traversal