The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X. ShinyHunters is the extortion group that said in September it had breached the FBI’s jobs portal and stolen sensitive data on…
CVE ID :CVE-2026-107821 Published : Oct. 9, 2026, 5:27 p.m. | 40 minutes ago Description :MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths,…
CVE ID :CVE-2026-107818 Published : Oct. 9, 2026, 5:23 p.m. | 43 minutes ago Description :MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during…
CVE ID :CVE-2026-55797 Published : Oct. 9, 2026, 5:16 p.m. | 50 minutes ago Description :Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to…
CVE ID :CVE-2026-108157 Published : Oct. 9, 2026, 5:16 p.m. | 50 minutes ago Description :Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email…
CVE ID :CVE-2026-107707 Published : Oct. 8, 2026, 7:51 p.m. | 13 minutes ago Description :Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM.…
CVE ID :CVE-2026-107705 Published : Oct. 8, 2026, 7:51 p.m. | 13 minutes ago Description :Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs.…
CVE ID :CVE-2026-106126 Published : Oct. 8, 2026, 7:47 p.m. | 17 minutes ago Description :A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM…
CVE ID :CVE-2026-104076 Published : Oct. 8, 2026, 7:26 p.m. | 38 minutes ago Description :TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain a missing authentication vulnerability that allows remote unauthenticated attackers to read sensitive device information and modify…
CVE ID :CVE-2026-104075 Published : Oct. 8, 2026, 7:24 p.m. | 40 minutes ago Description :TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain an authentication bypass vulnerability in the web management login endpoint POST /tvu/Login that allows remote unauthenticated…