Technical- Other big exploits/vulnerabilities 10-21-26

bigredfish

bigredfish

Known around here
Sep 5, 2016
46,683
94,972
The Swamp
This is a technical oriented thread for published exploits/vulnerabilties


Instead of creating a thread for each one, as they appear to be coming fast and furious with the help of AI, I figured I'd start this thread so that the folks way smarter than me can browse/add to it and decide which ones are of importance to them

Posting each vulnerability/exploit on their own post in this thread


Primer




Good Question
 
Last edited:
  • Like
Reactions: mat200 and johnfitz
JAVA

 
  • Like
Reactions: mat200
The AI gateway library LiteLLM was hijacked again in a supply chain attack.

CONTAINED




 
  • Wow
Reactions: mat200
  • Exclamation
Reactions: mat200
Latest IT security trend

HVOxdX5XQAAUcgN.jpg
 
  • Exclamation
  • Haha
Reactions: mat200 and johnfitz
Linux Kernel
CVSS 9.0

 
  • Exclamation
  • Wow
Reactions: mat200 and johnfitz
People have no idea.

This isn't over and many companies have been compromised

 
  • Wow
Reactions: johnfitz
:thumb:
Right, Its not a direct python exploit. Just thought it was one to take note of
 
Another - Linux kernel
ksmbd, the in-kernel smb server

 
  • Wow
Reactions: johnfitz
Fortinet


 
Last edited:
 
phpMyAdmin, - potentially allowing attackers to BYPASS two-factor authentication

 
  • Wow
Reactions: johnfitz
Solana


 
Last edited:
  • Wow
Reactions: johnfitz
Way too many and coming too fast for me to attempt to keep up with ir do justice.

Feel free to post, I may on really big one, but I’m busy doing my own patching, updating , and prepping
 
  • Like
Reactions: johnfitz
GoAhead Web Server - backend for Millions of IoT, Firewalls, OT, and Military devices

That sounds bad


 
  • Wow
Reactions: johnfitz
TailScale



 
  • Wow
Reactions: johnfitz
Windows

 
  • Wow
Reactions: johnfitz
You must log in or register to reply here.
Top Bottom