CVE-2026-3787: Uncontrolled Search Path in UltraVNC CVE-2026-3787 identifies a vulnerability in UltraVNC version 1.6.4.0, specifically related to an uncontrolled search path issue within the cryptbase.dll library, a component of the Windows Service. This vulnerability arises when the softwar

UltraVNC 1.6.4.0 faces a HIGH-severity vuln: uncontrolled DLL search path (CVE-2026-3787). Local attackers can escalate privileges. No patch — limit access, monitor endpoints now. radar.offseq.com/threat/cve-2026-3787-unc... #OffSeq #UltraVNC #Vulner...

CVE-2026-1875: CWE-404 Improper Resource Shutdown or Release in Mitsubishi Elect CVE-2026-1875 identifies a vulnerability in Mitsubishi Electric Corporation's MELSEC iQ-F Series FX5-EIP EtherNet/IP Module, which is widely used in industrial automation environments. The vulnerability is classified as CWE-404, indicating

Mitsubishi MELSEC iQ-F FX5-EIP modules face a HIGH-severity DoS flaw (CVE-2026-1875). Remote UDP floods = system reset. Segment networks, block suspicious traffic, and monitor closely. radar.offseq.com/threat/cve-2026-1875-cwe... #OffSeq #ICS #Vulner...

CVE-2026-27028: CWE-306 in Mobility46 mobility46.se CVE-2026-27028 is a critical security vulnerability identified in all versions of the Mobility46 mobility46.se platform, specifically related to the handling of WebSocket endpoints used for Open Charge Point Protocol (OCPP) communications.

CRITICAL: All Mobility46.se versions vulnerable (CVE-2026-27028). Unauthenticated WebSocket endpoints allow remote charger impersonation — enforce strong auth & monitor OCPP now! radar.offseq.com/threat/cve-2026-27028-cw... #OffSeq #EVCharging #Vulner...

CVE-2026-3179: CWE-22 Improper Limitation of a Pathname to a Restricted Director CVE-2026-3179 is a path traversal vulnerability classified under CWE-22 affecting ASUSTOR ADM's FTP Backup functionality. The vulnerability occurs because the ADM software fails to properly sanitize or validate filenames received from FTP s

ASUSTOR ADM faces a CRITICAL path traversal vuln (CVE-2026-3179, 9.2 CVSS). Unauthenticated attackers can overwrite files via FTP Backup. Disable feature or restrict to trusted servers now. radar.offseq.com/threat/cve-2026-3179-cwe... #OffSeq #Vulner...

Security threat visualization

CRITICAL: Growatt ShineLan-X/MIC 3300TL-X v3.6.0.0 missing encryption on config interface. Network attackers can intercept & modify commands. Patch unavailable — apply mitigations now! radar.offseq.com/threat/cve-2025-36751-cw... #OffSeq #ICS #vulner...

Security threat visualization

StreamTube Core plugin CRITICAL flaw: CVE-2025-13615 lets attackers reset any WordPress user password if 'registration password fields' is enabled. Disable it & patch ASAP. More: radar.offseq.com/threat/cve-2025-13615-cw... #OffSeq #WordPress #Vulner...

Security threat visualization

MS Office LTSC for Mac 2021 hit by CRITICAL heap overflow (CVE-2025-60724). Remote code execution possible—no user action needed. Restrict access, monitor endpoints, and await patch. radar.offseq.com/threat/cve-2025-60724-cw... #OffSeq #macOS #Vulner...

Security threat visualization

SAP Solution Manager ST 720 faces a CRITICAL threat (CVE-2025-42887): code injection by authenticated users can lead to total system compromise. Restrict access & watch for patches! ⚠️ radar.offseq.com/threat/cve-2025-42887-cw... #OffSeq #SAP #Vulner...

📰 CISA Perintahkan Lembaga Federal AS Segera Tambal Celah Zero-Day Samsung yang Disalahgunakan Spyware LandFall

👉 Baca artikel lengkap di sini: ahmandonk.com/2025/11/11/cisa-perintah...

#android #cisa #cybersecurity #landfall #samsung #spyware #vulner

📰 Atroposia: Malware MaaS Baru Lengkapi RAT dengan Pemindai Kerentanan Lokal

👉 Baca artikel lengkap di sini: ahmandonk.com/2025/10/29/atroposia-mal...

#dns #hijacking #endpoint #security #exfiltration #keamanan #siber #maas #malware #rat #varonis #vulner

Security threat visualization

Remediation gap = HIGH-severity risk for orgs with many security tools. Automate & unify workflows (e.g., Pentera Resolve) to reduce exposure & boost compliance in cloud environments. More: radar.offseq.com/threat/bridging-the-reme... #OffSeq #Vulner...

Security threat visualization

CRITICAL: Privilege escalation (CVE-2025-7493) in Red Hat Enterprise Linux 10 FreeIPA lets attackers become domain admin. Patch ASAP, audit Kerberos principals, and restrict access! radar.offseq.com/threat/cve-2025-7493-ins... #OffSeq #RedHat #Vulner...

Security threat visualization

CRITICAL: Vasion Print Virtual Appliance Host hit by CVE-2025-34203—outdated containers (Nginx, OpenSSL, Laravel) leave print infra open to attack. Upgrade to 22.0.1002+ & audit images now! radar.offseq.com/threat/cve-2025-34203-cw... #OffSeq #Vulner...

Security threat visualization

HL330-DLS (MC7700, ≤v1.03) hit by HIGH severity OS command injection flaw. No patch yet—limit admin access, monitor activity, & prep for updates. Protect your critical devices! radar.offseq.com/threat/cve-2025-53508-im... #OffSeq #IoTSecurity #Vulner...