https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:16:08.700683+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351388 EUVD-2026-351388 2026-10-02T21:16:08.755956+00:00 EUVD-2026-351388 https://cve.radiocsirt.org/vuln/fkie_cve-2026-64951 fkie_cve-2026-64951 2026-10-02T21:16:08.755994+00:00

A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process.

The problem is a Divide by Zero bug in the ShouldPadFile() function.

 https://cve.radiocsirt.org/vuln/ghsa-frg5-mq2m-h39j GHSA-frg5-mq2m-h39j 2026-10-02T21:16:08.756031+00:00

A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process.

The problem is a Divide by Zero bug in the ShouldPadFile() function.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2728 WID-SEC-W-2026-2728 — Rapid7 Velociraptor: Mehrere Schwachstellen 2026-10-02T21:16:08.756049+00:00

Ein Angreifer kann mehrere Schwachstellen in Rapid7 Velociraptor ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen, Sicherheitsmaßnahmen zu umgehen, Spoofing- und Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, sensible Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.