Aggregator

Camaleon CMS v2.9.0 - Path Traversal

Js2Py 0.74 - RCE

Frigate NVR 0.16.3 - Remote Code Execution

NiceGUI 3.6.1 - Path Traversal

SumatraPDF 3.5.2 - Remote Code Execution

JUNG Smart Visu Server 1.1.1050 - Dos

Windows 11 25H2 - Heap Overflow

BusyBox 1.37.0 - Path Traversal

HUSTOJ Zip-Slip v26.01.24 - RCE

Repetier-Server 1.4.10 - Path Traversal

Windows 11 23H2 - Denial of Service (DoS)

Google Chrome 145.0.7632.75 - CSSFontFeatureValuesMap

Python-Multipart 0.0.22 - Path Traversal

FUXA 1.2.8 - Authentication Bypass + RCE Exploit

Global financial institutions are panicked over Anthropic's new superhacker AI model. Cyber experts aren't quite as worried.

KasadaIQ’s Q1 2026 Threat Intelligence Report highlights a structural shift in automated threats: AI is now embedded across the adversary lifecycle. From large-scale account commoditization to verification bypass and AI agent exploitation, organizations face a rapidly evolving and industrialized threat environment.

The post KasadaIQ’s Q1 Insights: How AI Became Adversary Infrastructure appeared first on Security Boulevard.

A vulnerability was found in Linux Kernel up to 6.6.121/6.12.67/6.18.7/6.19-rc6. It has been declared as critical. Affected by this vulnerability is the function st_lsm6dsx_write_event of the component iio. The manipulation of the argument event_spec results in null pointer dereference. This vulnerability is reported as CVE-2025-71198. The attacker must have access to the local network to execute the attack. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.121/6.12.66/6.18.6/6.19-rc5. It has been classified as critical. Affected is the function probe of the component stm32-usphyc. The manipulation of the argument index leads to off-by-one. This vulnerability is documented as CVE-2025-71196. The attack requires being on the local network. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.121/6.12.67/6.18.7/6.19-rc6. This vulnerability affects the function alarms_store of the component w1. Performing a manipulation of the argument buf results in buffer overflow. This vulnerability is known as CVE-2025-71197. Access to the local network is required for this attack. No exploit is available. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.121/6.12.66/6.18.6/6.19-rc5 and classified as critical. This impacts an unknown function of the component dmaengine. Executing a manipulation of the argument max_register can lead to memory corruption. This vulnerability is registered as CVE-2025-71195. The attack requires access to the local network. No exploit is available. It is suggested to upgrade the affected component.