24h | 7d | 30d

CVE-2025-30023

Overview

  • Axis Communications AB
  • AXIS Camera Station Pro
11 Jul 2025
Published
11 Jul 2025
Updated
CVSS v3.1
CRITICAL (9.0)
EPSS
0.63%
KEV

Description

The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack.

Statistics

  • 1 Post
  • 2 Interactions
Last activity: 22 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Details and an Axis Camera Station RCE PoC are public. Patch CVE-2025-30026, CVE-2025-30023, and CVE-2026-63286 to prevent camera credential theft.

securityonline.info/axis-camer

  • 2
  • 0
  • 0
  • 22h ago

CVE-2025-30026

Overview

  • Axis Communications AB
  • AXIS Camera Station Pro
11 Jul 2025
Published
11 Jul 2025
Updated
CVSS v4.0
MEDIUM (5.3)
EPSS
0.65%
KEV

Description

The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required.

Statistics

  • 1 Post
  • 2 Interactions
Last activity: 22 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Details and an Axis Camera Station RCE PoC are public. Patch CVE-2025-30026, CVE-2025-30023, and CVE-2026-63286 to prevent camera credential theft.

securityonline.info/axis-camer

  • 2
  • 0
  • 0
  • 22h ago

CVE-2026-63286

Overview

  • Axis Communications AB
  • AXIS Camera Station Pro
28 Oct 2026
Published
28 Oct 2026
Updated
CVSS v3.1
HIGH (7.1)
EPSS
0.08%
KEV

Description

Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro automatically creates one more such backup for recovery purpose when the update is applied. Delete all these backups and change the credentials stored in AXIS Camera Station Pro.

Statistics

  • 1 Post
  • 2 Interactions
Last activity: 22 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Details and an Axis Camera Station RCE PoC are public. Patch CVE-2025-30026, CVE-2025-30023, and CVE-2026-63286 to prevent camera credential theft.

securityonline.info/axis-camer

  • 2
  • 0
  • 0
  • 22h ago

CVE-2026-116078

Overview

  • mtrudel
  • bandit
  • bandit
28 Oct 2026
Published
28 Oct 2026
Updated
CVSS v4.0
HIGH (8.7)
EPSS
0.49%
KEV

Description

Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory via a request body sent as many 1-byte DATA frames. do_read_data/5 in lib/bandit/http2/stream.ex keeps every DATA frame payload as its own list element until the read returns. The :length option of read_body/2 counts body bytes, not frames, so a body of 1-byte frames costs a list cell and a binary term per byte. Interleaving the frames across up to 500 concurrent streams per connection keeps each stream consuming its frames as they arrive; in the reporter's test, 100 streams held 25 to 40 MiB of stream process memory for 5 MB sent. Only routes whose Plug reads the request body are affected, which includes any route behind Plug.Parsers. This issue affects bandit: from 0.3.1 before 1.14.1.

Statistics

  • 1 Post
  • 1 Interaction
Last activity: 1 hour ago

Fediverse

Profile picture fallback
Keila: Open Source Newsletters @keila

It feels like there is a new critical CVE every day now. Just deployed fixes for CVE-2026-116078 (Bandit), CVE-2026-117645 (phoenix_html), and CVE-2026-117666 (ssl_verify_fun) to Keila Cloud. A new release is coming tomorrow.

Shout-out to @TheErlef for publishing the CVEs and the maintainers for fixing them! Make sure to run mix hex.audit regularly! #elixirlang #myelixirstatus

  • 1
  • 0
  • 0
  • 1h ago

CVE-2026-117666

Overview

  • deadtrickster
  • ssl_verify_fun
  • ssl_verify_fun
30 Oct 2026
Published
30 Oct 2026
Updated
CVSS v4.0
CRITICAL (9.1)
EPSS
0.19%
KEV

Description

Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary in the middle to impersonate a TLS peer via a certificate that carries a partial-label wildcard. try_match_wildcard/4 in src/ssl_verify_hostname.erl anchors only the text before and after the * of an identifier such as f*.example.net, so the wildcard also consumes dots and the certificate is accepted for f.evil.example.net. RFC 6125 confines a wildcard to the left-most label. The same matcher lets *.168.1.1 match the IP literal 192.168.1.1. Whole-label wildcards are matched correctly. Erlang/OTP 20.0 and later check the hostname in ssl before a user verify_fun sees valid_peer, so a client that keeps server_name_indication set rejects the mismatch regardless. Exposed are clients that disable SNI, servers that verify client certificate hostnames with this library, and direct callers of verify_cert_hostname/2. This issue affects ssl_verify_fun: from 1.0.1 before 1.1.8.

Statistics

  • 1 Post
  • 1 Interaction
Last activity: 1 hour ago

Fediverse

Profile picture fallback
Keila: Open Source Newsletters @keila

It feels like there is a new critical CVE every day now. Just deployed fixes for CVE-2026-116078 (Bandit), CVE-2026-117645 (phoenix_html), and CVE-2026-117666 (ssl_verify_fun) to Keila Cloud. A new release is coming tomorrow.

Shout-out to @TheErlef for publishing the CVEs and the maintainers for fixing them! Make sure to run mix hex.audit regularly! #elixirlang #myelixirstatus

  • 1
  • 0
  • 0
  • 1h ago

CVE-2026-117645

Overview

  • phoenixframework
  • phoenix_html
  • phoenix_html
30 Oct 2026
Published
30 Oct 2026
Updated
CVSS v4.0
MEDIUM (5.3)
EPSS
0.32%
KEV

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework phoenix_html allows an attacker who controls attribute names to inject attributes and script into rendered HTML via Phoenix.HTML.attributes_escape/1. attributes_escape/1 in lib/phoenix_html.ex escapes attribute values but not attribute names. key_escape/1 passes a binary key through html_escape, which neutralizes quotes and angle brackets but not whitespace, so a key such as x onmouseover ends the attribute and starts a new one. An atom key is only dasherized, so any character passes, including quotes and >. Nested data, aria and phx keys take the same paths. An application is affected when it builds attribute keys from untrusted input and renders them through HEEx <tag {@attrs}>, content_tag/3, or a direct call. Before 3.0.0 the same code lived in Phoenix.HTML.Tag. This issue affects phoenix_html: from 1.0.0 before 3.3.5 and from 4.0.0 before 4.4.0.

Statistics

  • 1 Post
  • 1 Interaction
Last activity: 1 hour ago

Fediverse

Profile picture fallback
Keila: Open Source Newsletters @keila

It feels like there is a new critical CVE every day now. Just deployed fixes for CVE-2026-116078 (Bandit), CVE-2026-117645 (phoenix_html), and CVE-2026-117666 (ssl_verify_fun) to Keila Cloud. A new release is coming tomorrow.

Shout-out to @TheErlef for publishing the CVEs and the maintainers for fixing them! Make sure to run mix hex.audit regularly! #elixirlang #myelixirstatus

  • 1
  • 0
  • 0
  • 1h ago

CVE-2024-50629

Overview

  • Synology
  • DiskStation Manager (DSM)
19 Mar 2025
Published
28 Mar 2025
Updated
CVSS v3.1
MEDIUM (5.3)
EPSS
34.81%
KEV

Description

Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to read limited files via unspecified vectors.

Statistics

  • 1 Post
Last activity: 15 hours ago

Fediverse

Profile picture fallback
🛡️ #1 hacks.gr @hacksgr

Synology is urging customers to update the DiskStation Manager software powering its Network Attached Storage devices following ransomware attacks targeting outdated software.

The vendor observed threat actors exploiting vulnerabilities patched in late 2024, including CVE-2024-10441, CVE-2024-50629, and CVE-2024-10445, to encrypt data and extort users.

Users running vulnerable versions are advised to update immediately.

en.hacks.gr/i-synology-kalei-t

#Synology #NAS #Ransomware #Patch

  • 0
  • 0
  • 0
  • 15h ago

CVE-2026-120306

Overview

  • beam-cloud
  • Beta9 worker
  • github.com/beam-cloud/beta9
01 Nov 2026
Published
02 Nov 2026
Updated
CVSS v3.1
CRITICAL (9.9)
EPSS
0.36%
KEV

Description

Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker. The worker image sets BUILDAH_ISOLATION=chroot, and no buildah invocation passes --isolation, so the step only changes its filesystem root. It keeps the worker pod's PID, network, IPC, and user namespaces, runs as uid 0, and holds CAP_DAC_OVERRIDE. PID 1 in that procfs is the worker entrypoint, so /proc/1/root is the worker container's filesystem and is writable. That filesystem contains the runc, buildah, and runsc binaries the worker uses to start tenant containers, the worker's Kubernetes service account token, and the host directories mounted into the pod. Worker pods are privileged. Clip v2 layered builds are the default, so a tenant with a workspace token reaches this by submitting one image build. The read-only proof confirmed the shared namespaces, CAP_DAC_OVERRIDE, and that the worker's runc binary is visible at /proc/1/root. Fixed in worker 0.1.756: Buildah RUN steps, including the WORKDIR mkdir, use OCI isolation with private PID, IPC, and network namespaces, and tenant ARG values are passed only into the build container.

Statistics

  • 1 Post
Last activity: 8 hours ago

Bluesky

Profile picture fallback
Checkmarx Zero @checkmarxzero.bsky.social
🚨 CVE-2026-120306, CVE-2026-120307 and CVE-2026-120308 (Critical) affect Beta9, Beam Cloud's open source GPU inference platform. A tenant with only a workspace token can escape isolation and reach the shared worker, exposing other tenants' files or the worker's Kubernetes token.
  • 0
  • 0
  • 0
  • 8h ago

CVE-2024-10445

Overview

  • Synology
  • DiskStation Manager (DSM)
19 Mar 2025
Published
28 Mar 2025
Updated
CVSS v3.1
MEDIUM (4.3)
EPSS
0.38%
KEV

Description

Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to write limited files via unspecified vectors.

Statistics

  • 1 Post
Last activity: 15 hours ago

Fediverse

Profile picture fallback
🛡️ #1 hacks.gr @hacksgr

Synology is urging customers to update the DiskStation Manager software powering its Network Attached Storage devices following ransomware attacks targeting outdated software.

The vendor observed threat actors exploiting vulnerabilities patched in late 2024, including CVE-2024-10441, CVE-2024-50629, and CVE-2024-10445, to encrypt data and extort users.

Users running vulnerable versions are advised to update immediately.

en.hacks.gr/i-synology-kalei-t

#Synology #NAS #Ransomware #Patch

  • 0
  • 0
  • 0
  • 15h ago

CVE-2026-120307

Overview

  • beam-cloud
  • Beta9 worker
  • github.com/beam-cloud/beta9
01 Nov 2026
Published
02 Nov 2026
Updated
CVSS v3.1
CRITICAL (9.9)
EPSS
0.48%
KEV

Description

The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's container path into a worker path. If the unresolved path starts with a mount destination, including the default upload mount at /tmp/.beta9, the remainder is joined onto that mount's source with filepath.Join, which cleans parent-directory segments after the prefix check. A long enough run of those segments names any absolute path on the worker. A path that matches no mount is joined onto the container root and opened in the worker's own filesystem, so an absolute symbolic link such as /var/run pointing at /run is followed against the worker root. Upload, download, stat, list, find-in-files, replace-in-files, and delete-file all call this helper. A tenant with a workspace token and one running sandbox can read, write, list, and delete files on the hosting worker as root, including files of other tenants on that machine. A read-only proof downloaded the worker pod's Kubernetes service account token through the file API for a path that did not exist inside the sandbox. In the shipped remote-node manifests that service account is bound to cluster-admin. Fixed in worker 0.1.756: sandbox file operations and workspace sync open paths with os.OpenRoot, so parent-directory and symlink lookups stay inside the container root or the mount source.

Statistics

  • 1 Post
Last activity: 8 hours ago

Bluesky

Profile picture fallback
Checkmarx Zero @checkmarxzero.bsky.social
🚨 CVE-2026-120306, CVE-2026-120307 and CVE-2026-120308 (Critical) affect Beta9, Beam Cloud's open source GPU inference platform. A tenant with only a workspace token can escape isolation and reach the shared worker, exposing other tenants' files or the worker's Kubernetes token.
  • 0
  • 0
  • 0
  • 8h ago
Showing 71 to 80 of 88 CVEs