Recent Advisories

Severity ID Title Vendor Product Date Type
NONE THN:E1615BDF4B6...

Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer_THN:E1615BDF4B62CB1432BC9279BE9C0DE7

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkqwlAgmL-HrE2pSx8xqfY4-AyYZ59wK4x5AWtnCXSHRoBO1wcYTpWw42Fe6VRoAT77e914MSqZW56fKX95I...

N/A N/A THN
CRITICAL 10 THN:E2766B13B3B...

LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root_THN:E2766B13B3BBC0B8100BFD2FE1780857

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjM0W1UqsbcZ-8IV_n8ov3V24MQ74VaKe3auGFWNunDUfubEBeKEGREuFjC9-i7H_fLfSwFQQ5wqe8bhVWvAU...

N/A N/A THN
CRITICAL 9.8 THN:090748905BC...

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV_THN:090748905BCD2E05CB2679EBE28F1EAD

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKqQ4Uk8lGWwF7f6lrmP6dRHkEmQTJsqFs8xvJ5256xUcHTeWMNVMkPguALNqLPpJWneU9XWIEzi4jSUVTiS...

N/A N/A THN
HIGH 7.5 MS:CVE-2026-3039

BIND 9 server memory exhaustion during GSS-API TKEY negotiation_MS:CVE-2026-3039

{“lastseen”:”2026-05-23T07:16:22″,”description”:””,”published”:”2026-05-23T08:01:...

N/A N/A MSCVE
HIGH 7.5 MS:CVE-2026-5946

Invalid handling of CLASS != IN_MS:CVE-2026-5946

{“lastseen”:”2026-05-23T07:16:22″,”description”:””,”published”:”2026-05-23T08:01:...

N/A N/A MSCVE
CRITICAL 9.8 MS:CVE-2026-3593

Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation_MS:CVE-2026-3593

{“lastseen”:”2026-05-23T07:16:22″,”description”:””,”published”:”2026-05-23T08:01:...

N/A N/A MSCVE
MEDIUM 5.3 MS:CVE-2026-5950

Unbounded resend loop in BIND 9 resolver_MS:CVE-2026-5950

{“lastseen”:”2026-05-23T07:16:22″,”description”:””,”published”:”2026-05-23T08:01:...

N/A N/A MSCVE
HIGH 7.5 MS:CVE-2026-5947

SIG(0) validation during query flood may lead to undefined behavior_MS:CVE-2026-5947

{“lastseen”:”2026-05-23T07:16:22″,”description”:””,”published”:”2026-05-23T08:01:...

N/A N/A MSCVE
NONE TRENDMICROBLOG:...

Analyzing Void Dokkaebi’s Cython-Compiled InvisibleFerret Malware_TRENDMICROBLOG:FE3D9CADB53C53E2D8C590C90EE9B230

Void Dokkaebi, a North Korea-aligned intrusion set, has updated its information-stealing malware, InvisibleFerret, shifting its delivery format to ...

N/A N/A TRENDMICROBLOG
NONE SCHNEIER:9C4AB9...

Friday Squid Blogging: Regulating Squid Fishing in the South Pacific_SCHNEIER:9C4AB9C86E9BE62671E4466A4E88CB49

The South Pacific Regional Fisheries Management Organization (SPRFMO) needs to regulate squid fishing in the South Pacific. As usual, you can also...

N/A N/A SCHNEIER