cisakev

Jul 31

Июльский Linux Patch Wednesday

Alexander Leonov

July Linux Patch Wednesday. A total of 2,017 vulnerabilities were addressed (539 in the Linux kernel and 504 in Chromium). For comparison, there were 1,888 vulnerabilities in June. Once again, a new record. Moreover, next month will most likely set another record, as 1,704 vulnerabilities have...

linux 7zip vulnerability mediawiki nginx chromium ffmpeg gogs libssh2 linuxpatchwednesday cisakev vulristics linuxkernel

Jul 20

July "In the Trend of VM" (#29): Microsoft Exchange Server vulnerability

Alexander Leonov

July "In the Trend of VM" (#29): Microsoft Exchange Server vulnerability. Here is my traditional monthly roundup of trending vulnerabilities, according to Positive Technologies. The previous June edition featured four vulnerabilities. This time, there's only one. 🗞 Post on Habr (rus) 🗒 Digest on...

xss javascript github microsoft exchange outlook vulnerability exploit spoofing kev cisa em positivetechnologies owa esu eomt cisakev trendvulns edge

Jul 02

About Cross Site Scripting - Microsoft Exchange (CVE-2026-42897) vulnerability

Alexander Leonov

About Cross Site Scripting - Microsoft Exchange (CVE-2026-42897) vulnerability. The vulnerability was fixed on May 14 outside the regular Microsoft Patch Tuesday cycle. Improper neutralization of input during web page generation (CWE-79, XSS) in Microsoft Exchange Server allows an unauthorized...

xss javascript github microsoft exchange outlook vulnerability exploit spoofing kev cisa em owa esu eomt cisakev edge

Jun 17

June "In the Trend of VM" (#28): Linux kernel, Microsoft Defender, and Palo Alto Networks device vulnerabilities

Alexander Leonov

June "In the Trend of VM" (#28): Linux kernel, Microsoft Defender, and Palo Alto Networks device vulnerabilities. Presenting the traditional monthly roundup of trending vulnerabilities according to Positive Technologies. In the previous May edition, we covered four vulnerabilities. This time,...

linux eop fedora shodan ubuntu windows opensuse github kernel microsoft vulnerability panorama exploit firewall rhel kev apparmor redsun xfrmesp dirtyfrag centosstream v12 positivetechnologies panos cloudngfw paloalto kernelexploit nightmareeclipse microsoftdefender v4bel prismaaccess cisakev trendvulns lpe antimalware hyunwookim fragnesia linuxkernel defender almalinux ngfw rxrpc

Jun 06

About Elevation of Privilege - Microsoft Defender "RedSun" (CVE-2026-41091) vulnerability

Alexander Leonov

About Elevation of Privilege - Microsoft Defender "RedSun" (CVE-2026-41091) vulnerability. Microsoft Defender is a built-in security solution developed by Microsoft to protect the Windows operating system and user data from viruses, malware, and other cyber threats in real time. An improper link...

windows github microsoft vulnerability exploit kev redsun nightmareeclipse microsoftdefender cisakev antimalware defender

Jun 05

About Remote Code Execution - PAN-OS (CVE-2026-0300) vulnerability

Alexander Leonov

About Remote Code Execution - PAN-OS (CVE-2026-0300) vulnerability. PAN-OS is an operating system for Palo Alto Networks firewalls and security platforms. User-ID™ Authentication Portal (also known as Captive Portal) is a non-default PAN-OS feature used to map IP addresses to usernames. By...

shodan vulnerability panorama exploit firewall panos cloudngfw paloalto prismaaccess cisakev ngfw

Jun 02

May Linux Patch Wednesday

Alexander Leonov

May Linux Patch Wednesday. A total of 1,638 vulnerabilities (474 in the Linux kernel). For comparison, in April there were 1,035 vulnerabilities (a record!). And this time it turns out to be a record again, more than one and a half times higher! The acceleration is both impressive and alarming....