https://redteamlog.com/category/vulnerabilities/pillow-cve-2026-112897-leaks-heap-memory-via/RedTeam Logen2026-10-21T09:37:36ZPillow CVE-2026-112897 leaks heap memory via crafted TIFF imageshttps://redteamlog.com/category/vulnerabilities/ibm-app-connect-enterprise-critical-cve-2026/RedTeam Logen2026-10-21T07:16:37ZIBM App Connect Enterprise Critical CVE-2026-92559 Enables Remote Sensitive Data Theft via Unrestricted Network Bindingshttps://redteamlog.com/category/vulnerabilities/openstack-manila-cross-project-share-manipulation/RedTeam Logen2026-10-21T06:26:45ZOpenStack Manila Cross-Project Share Manipulation Enables Data Exfiltrationhttps://redteamlog.com/category/vulnerabilities/totolink-x2000r-http-update-flaw-lets/RedTeam Logen2026-10-21T04:34:19ZTotolink X2000R HTTP Update Flaw Lets Authenticated Users Replace System Software Without Verificationhttps://redteamlog.com/category/vulnerabilities/totolink-x2000r-mcli-stack-overflow-grants/RedTeam Logen2026-10-21T04:07:58ZTotolink X2000R Mcli Stack Overflow Grants Authenticated Remote Code Executionhttps://redteamlog.com/category/vulnerabilities/php-rce-flaws-leak-early-teams-urged-to-prep-for/RedTeam Logen2026-10-21T03:21:04ZPHP RCE flaws leak early: Teams urged to prep for Oct 21 patches amid 9.2 severity riskhttps://redteamlog.com/category/vulnerabilities/totolink-x2000r-boa-web-server-stack-overflows/RedTeam Logen2026-10-21T01:58:46ZTotolink X2000R boa web server stack overflows enable arbitrary code execution with CVSS 9.1 critical ratinghttps://redteamlog.com/category/vulnerabilities/totolink-x2000r-pppoe-dns-flaws-grant/RedTeam Logen2026-10-21T00:46:50ZTotolink X2000R PPPoE DNS Flaws Grant Authenticated Users Critical Code Execution Accesshttps://redteamlog.com/category/vulnerabilities/oracle-ebs-tcf-servlets-vulnerable-to/RedTeam Logen2026-10-21T00:39:16ZOracle EBS TCF Servlets Vulnerable to Unauthenticated RCE in Versions 12.2.3-15https://redteamlog.com/category/vulnerabilities/apache-tomcat-buffer-under-read-may-leak-data/RedTeam Logen2026-10-20T19:01:11ZApache Tomcat Buffer Under-Read May Leak Data Between Requestshttps://redteamlog.com/category/vulnerabilities/draytek-vigor2960-command-injection-patch/RedTeam Logen2026-10-20T14:49:59ZDrayTek Vigor2960 Command Injection Patch Released Amid Persistent Public Exploit Risk for End-of-Support Unitshttps://redteamlog.com/category/cyber-attacks/ovhcloud-cli-releases-tampered-with-to-harvest/RedTeam Logen2026-10-20T10:54:36ZOVHcloud CLI Releases Tampered With to Harvest Local Secretshttps://redteamlog.com/category/cyber-attacks/github-actions-stolen-dev-keys-push-fake-scripts/RedTeam Logen2026-10-20T08:06:45ZGitHub Actions: Stolen Dev Keys Push Fake Scripts to Mine Secrets from Git Historyhttps://redteamlog.com/category/vulnerabilities/eptura-archibus-auth-bypass-and-rce/RedTeam Logen2026-10-20T03:33:46ZEptura Archibus Auth Bypass and RCE Vulnerabilities Grant Unauthenticated Database Accesshttps://redteamlog.com/category/vulnerabilities/eptura-archibus-critical-upload-bug-permits/RedTeam Logen2026-10-20T02:21:55ZEptura Archibus Critical Upload Bug Permits Server Command Execution Before 2025.02 Patchhttps://redteamlog.com/category/vulnerabilities/letta-rce-flaw-insecure-defaults-in-v0-16-8/RedTeam Logen2026-10-20T02:11:50ZLetta RCE Flaw: Insecure Defaults in v0.16.8 Enable Unauthenticated Code Execution and DB Accesshttps://redteamlog.com/category/vulnerabilities/github-prototype-pollution-and-ssrf-patches/RedTeam Logen2026-10-20T00:46:42ZGitHub Prototype Pollution and SSRF Patches Broken 4x More Likely to Reach CISA's Exploit Listhttps://redteamlog.com/category/vulnerabilities/h3c-magic-nx15-os-command-injection-cve-2026/RedTeam Logen2026-10-20T00:23:26ZH3C Magic NX15 OS Command Injection CVE-2026-112370: Public Exploit Code Fuels Critical RCE Threathttps://redteamlog.com/category/vulnerabilities/craft-cms-token-flaw-risks-cross-site-data/RedTeam Logen2026-10-19T23:31:36ZCraft CMS Token Flaw Risks Cross-Site Data Mutation in Pre-5.11.0 Versions