Bixby Vulnerability Chain: Malicious Link Could Give Attackers Control of Galaxy Devices
A chain of vulnerabilities in Samsung software allowed a malicious link to trigger remote compromise of a device. The attack was demonstrated at Pwn2Own
Vulnerabilities
More news
Page 34 / 38 · 342 articles
SQL Injection Turns an Oracle Database into a Platform for Windows Attacks
Exploits SQL injection in Oracle databases to deploy the khunt toolkit, enabling Windows attacks and credential dumping, with risk reduction tips.
Google ADK for Python: A Chain of Vulnerabilities Enables Attacks Between AI Agents
Discover how a chain of vulnerabilities in Google ADK for Python enables attacks between AI agents, affecting GitHub and CI/CD pipelines.
OVSwrap: Open vSwitch datapath vulnerability enables root escalation
The CVE-2026-64531 vulnerability, dubbed OVSwrap , affects the Open vSwitch kernel datapath and has a CVSS score of 7.8 , rated high. An unprivileged
CISA Adds Three Vulnerabilities to KEV Catalog: Langflow, Tomcat and N-central Affected
CISA adds three actively exploited vulnerabilities to the KEV catalog, impacting Langflow, Apache Tomcat, and N-central. Patch immediately by August 7, 2026.
Thermo Fisher: High-Severity Flaw Could Alter Genetic Data in Applied Biosystems Systems
A high-severity flaw CVE-2026-17583 in Thermo Fisher's Applied Biosystems software could alter genetic data. Learn about affected versions and fixes.
TP-Link Omada: 15 ZTP Vulnerabilities Could Open the Door to Enterprise Networks
TP-Link fixed 15 ZTP vulnerabilities in Omada ecosystem that could lead to RCE and network compromise. Learn about impacts and security measures.
Acrisure KARR BT and DR-100 Bluetooth Flaw Enables Unauthorized Vehicle Commands
On August 4, 2026, CISA published an advisory on CVE-2026-18411 , a vulnerability affecting Acrisure KARR BT and DR-100 products. The issue stems from the
tl;dv, the AI meeting assistant, exposes 180k meetings: live spying possible
A critical flaw in tl;dv exposes 180k meetings and 80k users. Attackers exploit missing Firestore rules to impersonate the bot and spy on live calls.