LiteLLM · Exploitation confirmedAll articles
Everything the Radar published in the last 30 days, newest first. Search by company, product or CVE.
- LiteLLM · Exploitation confirmed
Linux kernel Kernel Linux: ksmbd · Public exploit codePublic root exploit reported in Linux kernel; no mainline fix yet
Fortinet FortiOS · DisclosedFortinet patches critical flaws found with AI; details due November 10
Storybook dev server · DisclosedStorybook patches code injection from malicious websites; no known exploitation
Plataforma Railway · BreachRailway confirms up to 100,000 workspaces with variables potentially exposed
Quest Diagnostics Quanum Lab Services Manager · BreachQuest Diagnostics confirms patient data accessed in Quanum breach
ISC BIND 9 · DisclosedISC fixes BIND memory corruption from concurrent GSS-TSIG messages
Apple iOS · Exploitation reportedSpyware infects out-of-date iPhones via the web; Apple urges updates
Red Hat · Public exploit codeKeycloak patches unauthenticated account takeover; public exploit available
GMO Internet Onamae.com Desktop Cloud · BreachGMO refuses ransom; attackers publish customer data and threaten ransomware
Google Chrome · Public exploit codeChrome 156 Patches 52 Flaws; Anthropic AI Escaped Sandbox
Implementações HTTP/3 / QPACK · Public exploit codeResearch details QPACK amplification attacks on HTTP/3 stacks
Siemens Software Center · Exploitation confirmedSiemens Software Center flaw exploited in attacks, added to CISA KEV
EG Secure Solutions SiteGuard Server Edition · Exploitation confirmedCommand injection in SiteGuard WAF already exploited, vendor says
RingRTC · DisclosedSignal fixes flaw that kept mic and camera on after hangup
Bytecode Alliance Wasmtime · DisclosedWasmtime Patches Two Critical Sandbox Escape Flaws in Cranelift
Loja oficial online da Good Smile Company · BreachGood Smile Company reports possible member data exposure
Pedido online da Pizza Hut Japan · BreachPizza Hut Japan confirms leak of up to 4.48 million records
CAPCOM ID · BreachCapcom confirms breach of 11.7 million CAPCOM ID accounts
OVHcloud CLI · Exploitation confirmedOVHcloud CLI GitHub releases delivered credential stealer; v0.16.0 fixes it
Anomaly OpenCode AI coding agent no Windows e… · DisclosedOpenCode Patches Critical Remote Code Execution Flaw via MCP
eMudhra · Exploitation confirmedEight eMudhra intermediate CA keys were recoverable; fixes released
Anomaly OpenCode Console · BreachOpenCode Console breach: OpenAI, Anthropic and Google revoke exposed keys
PHP · Exploitation confirmedPHP2Shell campaign reaches several hundred victims, researcher estimates