نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
The Hacker News

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71, released yesterday. Only servers with HTTP/2 enabled are affected, according to Red Hat, which ships the server as part of Red Hat Enterprise Linux. An attacker who can reach the

آسیب‌پذیری و روز صفر سیستم‌عامل
خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
The Hacker News

Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2

N-able on Thursday said it's taking additional precautions in the wake of public disclosure of a new set of flaws tracked as 4EverAble2Shell and Agent2Shell. "We are restricting certain N-central features and integrations," the company said in a Thursday update. "These measures may affect some functionality, but we believe taking additional precautions while remediation is completed is the

منبع
Qualys Blog

AI Didn’t Create a New Kind of Risk. It Removed the Time You Had to Fix the Old One.

Mandiant’s AI Risk and Resilience 2026 report shows attackers putting agentic AI to work across the intrusion. Vulnerability exploitation is still the leading way in, and the window to fix it is closing. Executive Summary Mandiant and Google Threat Intelligence Group (GTIG) published AI Risk and Resilience 2026 in September. Attackers now use agentic AI […]

بدافزار و آلودگی آسیب‌پذیری و روز صفر فیشینگ
منبع
CERT/CC Vulnerability Notes

VU#644655: TightVNC and UltraVNC Viewer contains a heap-based buffer overflow

Overview A heap-based buffer overflow exists in the Tight JPEG decoding component of the TightVNC Windows Viewer version 1.3.10 and affected UltraVNC Windows Viewers. An attacker controlling a malicious VNC server can trigger memory corruption by sending a specially crafted screen update. Successful exploitation can crash the viewer and may allow arbitrary code execution, although only denial of service conditions we…

آسیب‌پذیری و روز صفر بات‌نت و DDoS سیستم‌عامل
منبع