https://redteamlog.com/category/vulnerabilities/oracle-solaris-ips-critical-flaw-grants/RedTeam Logen2026-10-22T05:06:29ZOracle Solaris IPS Critical Flaw Grants Unauthenticated Remote Control Over Versions 11.3 and 11.4https://redteamlog.com/category/vulnerabilities/oracle-weblogic-server-critical-vulnerability/RedTeam Logen2026-10-22T04:53:13ZOracle WebLogic Server Critical Vulnerability Enables Remote Data Theft Without Credentialshttps://redteamlog.com/category/vulnerabilities/oracle-soa-suite-http-vulnerability-enables-low/RedTeam Logen2026-10-22T04:32:27ZOracle SOA Suite HTTP Vulnerability Enables Low-Priv Users to Alter or Delete Critical Data in Versions 12.2 and 14.1https://redteamlog.com/category/vulnerabilities/oracle-identity-manager-connector-unauthenticated/RedTeam Logen2026-10-22T03:58:28ZOracle Identity Manager Connector: Unauthenticated LDAP Bug Enables Full Data Accesshttps://redteamlog.com/category/vulnerabilities/mikrotik-routeros-token-replay-bug-enables/RedTeam Logen2026-10-22T01:15:08ZMikroTik RouterOS Token Replay Bug Enables Session Hijacking via Fixed Saltshttps://redteamlog.com/category/vulnerabilities/pillow-cve-2026-112897-leaks-heap-memory-via/RedTeam Logen2026-10-21T09:37:36ZPillow CVE-2026-112897 leaks heap memory via crafted TIFF imageshttps://redteamlog.com/category/vulnerabilities/ibm-app-connect-enterprise-critical-cve-2026/RedTeam Logen2026-10-21T07:16:37ZIBM App Connect Enterprise Critical CVE-2026-92559 Enables Remote Sensitive Data Theft via Unrestricted Network Bindingshttps://redteamlog.com/category/vulnerabilities/openstack-manila-cross-project-share-manipulation/RedTeam Logen2026-10-21T06:26:45ZOpenStack Manila Cross-Project Share Manipulation Enables Data Exfiltrationhttps://redteamlog.com/category/vulnerabilities/totolink-x2000r-http-update-flaw-lets/RedTeam Logen2026-10-21T04:34:19ZTotolink X2000R HTTP Update Flaw Lets Authenticated Users Replace System Software Without Verificationhttps://redteamlog.com/category/vulnerabilities/totolink-x2000r-mcli-stack-overflow-grants/RedTeam Logen2026-10-21T04:07:58ZTotolink X2000R Mcli Stack Overflow Grants Authenticated Remote Code Executionhttps://redteamlog.com/category/vulnerabilities/php-rce-flaws-leak-early-teams-urged-to-prep-for/RedTeam Logen2026-10-21T03:21:04ZPHP RCE flaws leak early: Teams urged to prep for Oct 21 patches amid 9.2 severity riskhttps://redteamlog.com/category/vulnerabilities/totolink-x2000r-boa-web-server-stack-overflows/RedTeam Logen2026-10-21T01:58:46ZTotolink X2000R boa web server stack overflows enable arbitrary code execution with CVSS 9.1 critical ratinghttps://redteamlog.com/category/vulnerabilities/totolink-x2000r-pppoe-dns-flaws-grant/RedTeam Logen2026-10-21T00:46:50ZTotolink X2000R PPPoE DNS Flaws Grant Authenticated Users Critical Code Execution Accesshttps://redteamlog.com/category/vulnerabilities/oracle-ebs-tcf-servlets-vulnerable-to/RedTeam Logen2026-10-21T00:39:16ZOracle EBS TCF Servlets Vulnerable to Unauthenticated RCE in Versions 12.2.3-15https://redteamlog.com/category/vulnerabilities/apache-tomcat-buffer-under-read-may-leak-data/RedTeam Logen2026-10-20T19:01:11ZApache Tomcat Buffer Under-Read May Leak Data Between Requestshttps://redteamlog.com/category/vulnerabilities/draytek-vigor2960-command-injection-patch/RedTeam Logen2026-10-20T14:49:59ZDrayTek Vigor2960 Command Injection Patch Released Amid Persistent Public Exploit Risk for End-of-Support Unitshttps://redteamlog.com/category/cyber-attacks/ovhcloud-cli-releases-tampered-with-to-harvest/RedTeam Logen2026-10-20T10:54:36ZOVHcloud CLI Releases Tampered With to Harvest Local Secretshttps://redteamlog.com/category/cyber-attacks/github-actions-stolen-dev-keys-push-fake-scripts/RedTeam Logen2026-10-20T08:06:45ZGitHub Actions: Stolen Dev Keys Push Fake Scripts to Mine Secrets from Git History