#vulnerabi

CVE-2026-6834: CWE-862 Missing Authorization in aEnrich a+HRD The a+HRD product by aEnrich contains a Missing Authorization vulnerability (CWE-862) identified as CVE-2026-6834. Authenticated remote attackers can exploit this flaw to arbitrarily read database contents through a particular API method wi

aEnrich a+HRD faces a HIGH-severity missing authorization flaw (CVE-2026-6834) — authenticated users can read DB contents. Restrict API access & review user privileges now. No patch yet. radar.offseq.com/threat/cve-2026-6834-cwe... #OffSeq #Vulnerabi...

CVE-2026-40035: CWE-489 Active Debug Code in obsidianforensics unfurl CVE-2026-40035 is a critical vulnerability in the obsidianforensics product 'unfurl' up to version 2025.08. The flaw arises from improper input validation in the config parsing logic that enables Flask debug mode by default. Specifically, t

CRITICAL: obsidianforensics unfurl ≤2025.08 enables Flask debug by default. Attackers may gain remote code execution & sensitive data. Avoid production use & check configs until patched. radar.offseq.com/threat/cve-2026-40035-cw... #OffSeq #Vulnerabi...

CVE-2026-22267: CWE-266: Incorrect Privilege Assignment in Dell PowerProtect Dat CVE-2026-22267 is an Incorrect Privilege Assignment vulnerability classified under CWE-266 affecting Dell PowerProtect Data Manager versions prior to 19.22. This vulnerability allows a low-privileged attacker who has remote access to the sy

Dell PowerProtect Data Manager pre-19.22 has a HIGH severity flaw (CVE-2026-22267) allowing remote privilege escalation. Restrict access, monitor for abuse, and contact Dell for updates. radar.offseq.com/threat/cve-2026-22267-cw... #OffSeq #Vulnerabi...

Microsoft Copilot Flaw Allowed Data Theft via "Reprompt" Session Hijacking Attack A

Microsoft patches 'Reprompt' flaw in Copilot that allowed session hijacking and data theft. Attackers could use malicious URLs to inject hidden commands into AI sessions. Update applied in Jan Patch Tuesday. 🤖 #AI #CyberSecurity #Copilot #Vulnerabi...

📰 Windows PowerShell Kini Beri Peringatan Saat Menjalankan Invoke-WebRequest

👉 Baca artikel lengkap di sini: ahmandonk.com/2025/12/10/powershell-in...

#automation #curl #cve-2025-54100 #invoke-webrequest #kb5074204 #powershell #security-update #vulnerabi

Security threat visualization

🚨 HIGH severity: CVE-2025-12619 in Tenda A15 (v15.13.07.13) enables remote buffer overflow via /goform/openNetworkGateway. Public exploit available — check your exposure & stay alert for fixes. radar.offseq.com/threat/cve-2025-12619-bu... #OffSeq #Vulnerabi...

Security threat visualization

CRITICAL: All SICK AG TLOC100-100 firmware at risk (CVSS 9.3) due to outdated OS. Isolate devices, enforce network controls, monitor for threats. No patch available—take action now! radar.offseq.com/threat/cve-2025-10561-cw... #OffSeq #ICS #Vulnerabi...

Security threat visualization

CRITICAL: Auth bypass in all Elated-Themes Search & Go WP theme versions—attackers can hijack admin accounts via Facebook login. Disable FB login & watch for patches. Details: radar.offseq.com/threat/cve-2025-11522-cw... #OffSeq #WordPress #Vulnerabi...

Security threat visualization

ALERT: CRITICAL flaw in cyberlord92 OAuth SSO plugin for WordPress allows auth bypass & admin takeover. Disable plugin, monitor for new accounts, apply WAF rules. Await patch. radar.offseq.com/threat/cve-2025-9485-cwe... #OffSeq #WordPress #Vulnerabi...

Security threat visualization

HIGH severity: Delta DIALink exposed to remote path traversal (CVE-2025-58320). No patch yet — restrict access, deploy WAF/IPS, monitor for abuse. Protect critical ICS environments! radar.offseq.com/threat/cve-2025-58320-cw... #OffSeq #ICS #Vulnerabi...

Security threat visualization

AMD EPYC™ 9005 Series CPUs face HIGH-severity flaw: local admins can load malicious microcode, risking system integrity. No patch yet—tighten admin controls & monitor for anomalies. radar.offseq.com/threat/cve-2025-0032-cwe... #OffSeq #AMD #Vulnerabi...

Security threat visualization

CRITICAL: TRENDnet TI-G160i, TI-PG102i & TPL-430AP vulnerable (CVE-2025-8731) to remote attacks via default SSH credentials. No patch—change passwords & restrict access now! radar.offseq.com/threat/cve-2025-8731-use... #OffSeq #IoTSecurity #Vulnerabi...