Time4Popcorn · DisclosedAll articles
Everything the Radar published in the last 30 days, newest first. Search by company, product or CVE.
143 articles found · clear
- Time4Popcorn · Disclosed
Laravel framework TokenGuard · Public exploit codePublic PoC for critical Laravel TokenGuard bypass; 2.8 million installs exposed
Ruby · DisclosedRuby Patches Regex Bugs Behind Four Critical GitLab RCE Flaws
Pillow · DisclosedPillow 13.0.0 fixes heap overflows; public PoC executes code via FPX
Echo · DisclosedEcho fixes WebSocket bypass of route access controls
HPE · DisclosedHPE Patches Eight Critical Flaws in Aruba AOS-8 and AOS-10
Microsoft Windows Secure Boot · Exploitation reportedBlackX bootkit bypasses Secure Boot on patched Windows; apply manual revocations
x402 SDKs · Disclosedx402 Patches 25 SDK Flaws That Could Drain AI Agent Balances
Okta Access Gateway · DisclosedOkta patches command execution and authentication bypass in Access Gateway
Arista VeloCloud Orchestrator · Exploitation confirmedArista patches VeloCloud SQL injection zero-day actively exploited in attacks
Google · Exploitation confirmedCISA Confirms Active Node2Shell Exploitation as WordPress Vector Emerges
Linux kernel Kernel Linux: ksmbd · Public exploit codePublic root exploit reported in Linux kernel; no mainline fix yet
Fortinet FortiOS · DisclosedFortinet patches critical flaws found with AI; details due November 10
Storybook dev server · DisclosedStorybook patches code injection from malicious websites; no known exploitation
ISC BIND 9 · DisclosedISC fixes BIND memory corruption from concurrent GSS-TSIG messages
Apple iOS · Exploitation reportedSpyware infects out-of-date iPhones via the web; Apple urges updates
Red Hat · Public exploit codeKeycloak patches unauthenticated account takeover; public exploit available
Google Chrome · Public exploit codeChrome 156 Patches 52 Flaws; Anthropic AI Escaped Sandbox
Implementações HTTP/3 / QPACK · Public exploit codeResearch details QPACK amplification attacks on HTTP/3 stacks
Siemens Software Center · Exploitation confirmedSiemens Software Center flaw exploited in attacks, added to CISA KEV
EG Secure Solutions SiteGuard Server Edition · Exploitation confirmedCommand injection in SiteGuard WAF already exploited, vendor says
RingRTC · DisclosedSignal fixes flaw that kept mic and camera on after hangup
Bytecode Alliance Wasmtime · DisclosedWasmtime Patches Two Critical Sandbox Escape Flaws in Cranelift
Anomaly OpenCode AI coding agent no Windows e… · DisclosedOpenCode Patches Critical Remote Code Execution Flaw via MCP