KeePassXC · DisclosedAll articles
Everything the Radar published in the last 30 days, newest first. Search by company, product or CVE.
- KeePassXC · Disclosed
Partido Liberal · BreachWhiteArmor claims leak of Brazil's Liberal Party data
GPUs AMD Navi31 · Public exploit codeResearcher releases Wake & Break exploit for AMD Navi31 GPU PSP
Cliente Tailscale · DisclosedTailscale Fixes Tailworm in Client 1.104.4; headscale Still Unpatched
Fortinet FortiSIEM · Exploitation confirmedCanada's Cyber Centre reports active exploitation of FortiSIEM RCE
Paycloud / Value Design · BreachSupplier breach exposes 1.4 million prepaid card records in Japan
Loja oficial online da Keystone Wallet · BreachKeystone to Destroy 18,835 Wallets After Attacker Steals Authenticity Key
Contrato daosfun · DisclosedResearcher claims critical vulnerability in daosfun contract on Solana mainnet
Electrum Bitcoin wallet · Exploitation reportedElectrum 4.8.3 Fixes Flaw Exploited to Steal Bitcoin
Postiz · DisclosedPostiz 2.25.3 fixes forged tokens and path traversal
Time4Popcorn · DisclosedAbandoned Popcorn Time RCE unpatched; updater disabled on 2 million systems
Laravel framework TokenGuard · Public exploit codePublic PoC for critical Laravel TokenGuard bypass; 2.8 million installs exposed
Initia L1 and rollups · BreachInitia halts L1 and rollups after reported mint exploit
Ruby · DisclosedRuby Patches Regex Bugs Behind Four Critical GitLab RCE Flaws
Pillow · DisclosedPillow 13.0.0 fixes heap overflows; public PoC executes code via FPX
Echo · DisclosedEcho fixes WebSocket bypass of route access controls
HPE · DisclosedHPE Patches Eight Critical Flaws in Aruba AOS-8 and AOS-10
Sistemas de TI do University Hospitals · BreachUniversity Hospitals keeps MyChart, websites offline after unusual server activity
Swell swETH e rswETH · BreachSwell pauses swETH and rswETH after suspected admin key compromise
Microsoft Windows Secure Boot · Exploitation reportedBlackX bootkit bypasses Secure Boot on patched Windows; apply manual revocations
x402 SDKs · Disclosedx402 Patches 25 SDK Flaws That Could Drain AI Agent Balances
Okta Access Gateway · DisclosedOkta patches command execution and authentication bypass in Access Gateway
Arista VeloCloud Orchestrator · Exploitation confirmedArista patches VeloCloud SQL injection zero-day actively exploited in attacks
Google · Exploitation confirmedCISA Confirms Active Node2Shell Exploitation as WordPress Vector Emerges