[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Ubuntu 25.10 Vim Critical Code Exec Risk USN-8213-1 CVE-2026-35177
Several security issues were fixed in Vim.
> Chinese national extradited to US for pandemic-era Silk Typhoon attacks
Xu Zewei was allegedly directed by China’s intelligence services to conduct a sweeping espionage campaign to steal data on COVID-19 research and other U.S. policy interests. The post Chinese national extradited to US for pandemic-era Silk Typhoon attacks appeared first on CyberScoop.
> Cherry Health
Cherry Health, un prestataire de soins de santé basé à Grand Rapids, Michigan, traverse actuellement une panne technologique généralisée affectant son système téléphonique, soulevant des soupçons d'incident de cybersécurité. Bien que les cliniques restent ouvertes pour les rendez-vous planifiés, l'o...
> Marutake Co., Ltd.
La société Marutake Co., Ltd., grossiste en produits pharmaceutiques, a publié un troisième communiqué concernant la panne informatique causée par une attaque par ransomware résultant d'un accès non autorisé. Bien que certaines activités soient encore perturbées, l'approvisionnement en médicaments d...
> CVE-2025-0918: TP-Link HTTP POST body DoS
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here. This report describes a malformed allocation length vulnerability which leads to denial of service. The vulnerability we are disclosing in this advisory affected...
> CVE-2025-14299: TP-Link HTTP POST body DoS
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here. This report describes a malformed allocation length vulnerability which leads to denial of service. The vulnerability we are disclosing in this advisory affected...
> Vulnérabilité dans Python (28 avril 2026)
Une vulnérabilité a été découverte dans Python. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
> CVE-2025-8065: TP-Link ONVIF stack buffer overflow
An attacker sending a malformed ONVIF request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here. This report describes a stack buffer overflow, which leads to pre-auth remote code execution via LAN or WAN (through browser). The vulnerability we are disclosing in...
> CVE-2026-0651: TP-Link HTTP GET path traversal
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here. This report describes a path traversal which can lead to leaking secrets. The vulnerability we are disclosing in this advisory affected a wide range of TP-Link de...
> Rural Municipality of Gimli
La municipalité rurale de Gimli a informé ses résidents avoir été la cible d'une cyberattaque affectant ses systèmes informatiques. L'organisation a engagé une firme de cybersécurité pour enquêter sur l'incident et déterminer l'étendue des dégâts. Actuellement, le bureau municipal est incapable de t...
> CVE-2026-34118: TP-Link HTTP POST body heap buffer overflow
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here. This report describes a heap buffer overflow, which leads to remote code execution. The vulnerability we are disclosing in this advisory affected a wide range of...
> CVE-2026-34119: TP-Link HTTP POST body heap buffer overflow
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here. This report describes a heap buffer overflow, which leads to remote code execution. The vulnerability we are disclosing in this advisory affected a wide range of...
> Multiples vulnérabilités dans Spring (28 avril 2026)
De multiples vulnérabilités ont été découvertes dans Spring. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.
> CVE-2026-34120: TP-Link HTTP POST body heap buffer overflow
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here. This report describes a heap buffer overflow, which leads to remote code execution. The vulnerability we are disclosing in this advisory affected a wide range of...
> CVE-2026-34121: TP-Link HTTP authentication bypass
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here. This report describes an authentication bypass vulnerability in the HTTP server implementation. The vulnerability we are disclosing in this advisory affected a wi...
> Vos données ont-elles déjà fuité ?
Vérifier une fuite de données avec ZATAZ : moteurs France et monde, veille premium et risques cyber.
> CVE-2026-34124: TP-Link HTTP GET stack buffer overflow
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here. This report describes a stack buffer overflow, which leads to denial of service and may potentially lead to remote code execution. The vulnerability we are disclo...
> TAPOcalypse Now: Exploiting TP-Link Smart Devices From Anywhere
Summary Following our hacking of Xiaomi home security cameras, we have decided to look at another market dominating vendor in our region, TP-LINK. In this post, we describe the major findings from our review of new generation TAPO security cameras: a pre-auth RCE stack BOF that can be exploited not...
> Avril noir pour les forums pirates : arrestations, disparitions et fuite revendiquée contre DarkForums
Avril noir pour les forums pirates : HexDex risque 10 ans de prison, DarkForums visé par une fuite de données !
> TVE-2026-04: TP-Link HTTP authentication bypass
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here. This report describes an authentication bypass vulnerability in the HTTP server implementation. The vulnerability we are disclosing in this advisory affected a wi...