Visit Website →

Recent Items

CVE-2026-103663 (CERT-PL)

Path Traversal leading to Remote Code Execution in Ollama
Published on 2026-10-08T13:19:04.819000+00:00
Updated on 2026-10-08T13:19:04.819000+00:00

CVE-2026-107278 (CIRCL)

MISP Object Sync Drops Objects and Attributes When Description Is Empty
Published on 2026-10-07T15:42:42.472000+00:00
Updated on 2026-10-07T15:42:42.472000+00:00

CVE-2026-107276 (CIRCL)

MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests
Published on 2026-10-07T15:36:49.564000+00:00
Updated on 2026-10-07T15:36:49.564000+00:00

CVE-2026-33586 (ENISA)

Authenticated SMTP Sender Address Forgery
Published on 2026-10-07T15:00:14.278000+00:00
Updated on 2026-10-07T15:00:14.278000+00:00

CVE-2026-107180 (CIRCL)

MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instances
Published on 2026-10-07T12:49:40.483000+00:00
Updated on 2026-10-07T12:49:40.483000+00:00

CVE-2026-107175 (CIRCL)

MISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group Changes
Published on 2026-10-07T12:38:44.252000+00:00
Updated on 2026-10-07T12:38:44.252000+00:00

CVE-2026-106513 (CIRCL)

MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change
Published on 2026-10-06T18:58:53.245000+00:00
Updated on 2026-10-06T18:58:53.245000+00:00

CVE-2026-106512 (CIRCL)

MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS
Published on 2026-10-06T18:48:29.598000+00:00
Updated on 2026-10-06T18:48:29.598000+00:00

CVE-2025-8352 (ESET)

Denial-of-service vulnerability in ESET PROTECT On-Prem
Published on 2026-10-06T14:50:55.551000+00:00
Updated on 2026-10-06T14:50:55.551000+00:00

CVE-2026-75820 (CERT-PL)

Integer Truncation Leading to Heap Corruption in GNU Aspell
Published on 2026-10-06T10:57:59.621000+00:00
Updated on 2026-10-06T10:57:59.621000+00:00