News
UltraVNC: 3 Critical Flaws (CVE-2026-7840) — Repeater Takeover With No Password, Update to 1.8.2.4
SecurityInfrastructure
UltraVNC has three critical flaws. The repeater can be hijacked with no password (CVE-2026-7840, CVSS 9.8); a viewer bug lets a rogue server seize your PC. Update to 1.8.2.4.
2026.07.0185 views
News
Pre-Auth RCE in IBM Db2 (CVE-2026-10109): Patch the Core Database Now
SecurityInfrastructure
IBM Db2, the enterprise core database, has a flaw (CVE-2026-10109): tampering with the pre-login connection exchange runs commands on the server with no authentication. Rated 9.8; IBM has shipped special fix builds — apply now.
2026.07.0120 views
News
Conductor CVE-2026-58138: PoC is public, no confirmed attacks yet
SecurityInfrastructure
Conductor (formerly Netflix Conductor), a platform that chains business processes, has a flaw (CVE-2026-58138): sending one crafted workflow definition to the API runs commands before login. Rated 9.8; update to 3.30.2 now.
2026.07.0138 views
News
Adobe ColdFusion Flaw Now Exploited in Attacks — CVE-2026-48282, Seven 10.0s, Patch Now
InfrastructureSecurity
Adobe ColdFusion has 9 new flaws that let attackers take over a server from outside with no login. Five are rated a perfect 10.0 (CVE-2026-48276 et al.). Adobe shipped a fix (APSB26-68) — update now.
2026.07.0161 views
News
LLaMA-Factory RCE Flaw (CVE-2026-58116): An Exposed Web UI Lets Anyone Hijack the Server
SecurityAI
LLaMA-Factory, a popular AI fine-tuning tool, has a critical flaw (CVE-2026-58116): an exposed training screen lets a malicious model hijack the server. No fix yet.
2026.06.3024 views
News
RPG Maker MV/MZ Flaw (CVE-2026-56137): Shared Save Can Hijack Your PC
Securitygame
Games made with RPG Maker MV/MZ have a flaw (CVE-2026-56137): loading a save someone else shared can hijack your PC. No fix yet, so don't load untrusted saves.
2026.06.3023 views
News
AWS WAF Body-Inspection Bypass (CVE-2026-13762/13763, CVSS 9.8): Attacks Can Slip Past on CloudFront and the Load Balancer
SecurityInfrastructure
AWS WAF, the web shield on Amazon's cloud, has a flaw (CVE-2026-13762/13763, CVSS 9.8): splitting an attack across HTTP/2 frames slips past body inspection. CloudFront is auto-fixed; load balancer (ALB) users must change a setting.
2026.06.3046 views
News
Critical Auth-Bypass in SimpleHelp (CVE-2026-48558, CVSS 10): Attackers Can Take Over Every Managed PC — Now in CISA KEV, Update to 5.5.16
SecurityInfrastructure
SimpleHelp remote-support software has a critical auth-bypass flaw (CVE-2026-48558, CVSS 10): attackers forge a login to create an admin technician and take over every managed PC. Now in CISA KEV — update to 5.5.16.
2026.06.3051 views
News
Snowflake CLI Had a Code-Injection Flaw Before 3.19.0: Building a Malicious Project Can Take Over Your Machine
SecurityDevelopmentInfrastructure
Snowflake CLI, the official tool for the Snowflake cloud data platform, has a code-injection flaw (CVE-2026-13749, CVSS 8.8): building or deploying a malicious project runs attacker code on your machine. Fixed in 3.19.0 — update now.
2026.06.3027 views
News
Command Injection in vscode-java (CVE-2026-12856, CVSS 8.8): A Malicious Java File Can Take Over Your Machine — Update to 1.55.0
DevelopmentSecurity
Language Support for Java by Red Hat, a popular VS Code extension, has a flaw (CVE-2026-12856, CVSS 8.8): opening a malicious Java file and clicking a JavaDoc hover link can take over your machine. Update to 1.55.0.
2026.06.3059 views
News
libzypp (openSUSE/SUSE Linux) File-Overwrite Flaw: What It Is and How to Fix It
SecurityLinuxInfrastructure
libzypp, the openSUSE/SUSE Linux package manager, has a path traversal flaw (CVE-2026-25707, CVSS up to 8.8): a malicious repository can overwrite system files. Update to the fixed version now.
2026.06.2933 views
Lab
Is PostgreSQL 18 Faster? A 20M-Row Benchmark vs 17
DevelopmentInfrastructure
Is PostgreSQL 18 really faster? We loaded the same 20M rows into 17.9 and 18 and measured. The big aggregation, where async I/O should shine, got slower instead. Only skip scan clearly won. One setting can flip the result. What to know before upgrading.
2026.06.29110 views
