During its own research, CERT Polska has found 3 XSS vulnerabilities (from CVE-2026-105454 to CVE-2026-105456) in Request Tracker (RT) and RT for Incident Response software (RTIR).
This page shows only the headline and the short summary. The full text is published by the original source.
Bulletin ID: 2026-157-AWS Publication Date: 10/30/2026 09:00 AM PDT Description: We identified CVE-2026-119116, a use-after-free in the SetClient command handler of the kmstool-enclave example application, where an application that executes on the parent EC2 instance could send crafted messages over vsock to corrupt heap memory inside the enclave and execute arbitrary code within it. Only enclave images that include…
یک پیامک خاص می‌تواند بدون اینکه آن را باز کنید، سرویس تماس گوشی اندرویدی شما را از کار بیندازد. این آسیب‌پذیری که با نام غیررسمی SMS of Death شناخته می‌شود، در شرایط شدیدتر حتی ممکن است گوشی را وارد چرخه راه‌اندازی مجدد کند. نکته نگران‌کننده اینجاست که پیام مخرب می‌تواند پیش از نمایش در صندوق پیامک‌ها، باعث بروز اختلال شود.
OverviewAn origin-validation flaw in BeyondTrust Remote Support lets an unauthenticated attacker write files on the appliance and execute code as the site's operating-system user. The entry point is the public customer connection used to start a support session. No account credentials or user interaction are required.The flaw sits between the internal message router, brain, and an appliance-side customer worker, thin…
Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week. The post PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress appeared first on SecurityWeek.
