🕵️ RESEARCH & DEEP DIVES
GPAC RTP Depacketizer rtp_depacketizer.c gf_rtp_parse_ttxt out-of-boundsA vul... — CVE ThreatInt
Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflowA vulnerabil... — CVE ThreatInt
After guessing a 62^15 complex unique identifier, a malicious logged in user ... — CVE ThreatInt
Circles' remote-instance signature verification fetches the attacker-supplied... — CVE ThreatInt
The Photos app's filter-based "smart albums" build their file listing using t... — CVE ThreatInt
The Deck config API allows authenticated users to set board-scoped configurat... — CVE ThreatInt
The Approval app's approve/reject endpoint is meant to require the file's cur... — CVE ThreatInt
A vulnerability in the team folders (formerly group folders) app when used in... — CVE ThreatInt
Any authenticated user can lock or unlock files they do not own by targeting ... — CVE ThreatInt
django-page-cms through 2.0.13 CSRF via admin mutation viewsdjango-page-cms t... — CVE ThreatInt
django-page-cms through 2.0.13 Unauthorized Content Access via Staff Accountd... — CVE ThreatInt
Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflowA vulnera... — CVE ThreatInt
Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereferenceA flaw has ... — CVE ThreatInt
Freedesktop Poppler SampledFunction Function.cc integer overflowA vulnerabili... — CVE ThreatInt
NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the... — CVE ThreatInt
Steam Windows 0-Day Vulnerability Allows Users to Silently Escalate to Full SYSTEM Privileges — Cyber Security News
🔓 CVEs & KEV
- CVE-2026-65388 — Apple containerization — CVSS 7.5 — A remote attacker who controls a container registry may be able to direct a c...