https://netsecobserver.com/news/vulnerabilities/graphql-core-comment-padding-bypasses-token/NetSec Observeren2026-10-22T17:24:12ZGraphQL-core Comment Padding Bypasses Token Limits in High Severity Flawhttps://netsecobserver.com/news/vulnerabilities/gitpython-hook-injection-allows-code-execution-in/NetSec Observeren2026-10-22T17:19:31ZGitPython Hook Injection Allows Code Execution in Submodule Cloneshttps://netsecobserver.com/news/vulnerabilities/pillow-exif-parser-vulnerability-causes-cpu/NetSec Observeren2026-10-22T16:44:15ZPillow EXIF Parser Vulnerability Causes CPU Exhaustion in PNG Processinghttps://netsecobserver.com/news/cyber-attacks/fortiweb-and-fortigate-flaws-enable-k0t-operator/NetSec Observeren2026-10-22T16:44:15ZFortiWeb and FortiGate flaws enable k0t operator to steal 70,000 credentials via path traversal and brute forcehttps://netsecobserver.com/news/vulnerabilities/linux-kernel-vulnerabilities-accidentally-leaked/NetSec Observeren2026-10-22T10:14:38ZLinux Kernel Vulnerabilities Accidentally Leaked to Public Mailing Listhttps://netsecobserver.com/news/vulnerabilities/anthropic-finds-open-source-projects-drop/NetSec Observeren2026-10-22T09:29:50ZAnthropic finds open-source projects drop security controls silentlyhttps://netsecobserver.com/news/vulnerabilities/freertos-kernel-flaws-allow-privilege-escalation/NetSec Observeren2026-10-22T06:03:28ZFreeRTOS-Kernel Flaws Allow Privilege Escalation and Memory Corruptionhttps://netsecobserver.com/news/vulnerabilities/oracle-trusted-answer-search-pl-sql-package/NetSec Observeren2026-10-22T05:29:19ZOracle Trusted Answer Search PL/SQL Package Vulnerability Enables Critical Data Manipulationhttps://netsecobserver.com/news/vulnerabilities/oracle-weblogic-server-t3-and-iiop-protocol-flaw/NetSec Observeren2026-10-22T04:53:48ZOracle WebLogic Server T3 and IIOP Protocol Flaw Enables Remote Takeoverhttps://netsecobserver.com/news/vulnerabilities/oracle-http-server-ossl-module-flaw-cve-2026/NetSec Observeren2026-10-22T04:37:43ZOracle HTTP Server OSSL Module Flaw CVE-2026-87347 Allows Data Manipulationhttps://netsecobserver.com/news/vulnerabilities/secure-firewall-posture-ipc-input-validation-flaw/NetSec Observeren2026-10-22T03:52:30ZSecure Firewall Posture IPC Input Validation Flaw Grants Local Attackers SYSTEM or Root Accesshttps://netsecobserver.com/news/vulnerabilities/oracle-essbase-http-vulnerability-enables-low/NetSec Observeren2026-10-22T03:41:12ZOracle Essbase HTTP Vulnerability Enables Low-Privilege Data Modification and Deletionhttps://netsecobserver.com/news/vulnerabilities/openchoreo-api-server-authorization-flaw-allows/NetSec Observeren2026-10-21T16:59:41ZOpenChoreo API server authorization flaw allows cross-component workflow escalationhttps://netsecobserver.com/news/cyber-attacks/eu-probes-booking-com-over-fake-listings-and-data/NetSec Observeren2026-10-21T13:01:49ZEU probes Booking.com over fake listings and data exposure riskshttps://netsecobserver.com/news/vulnerabilities/ai-coding-agent-skills-bypass-sca-and-sast/NetSec Observeren2026-10-21T10:28:28ZAI Coding Agent Skills Bypass SCA and SAST Security Scannershttps://netsecobserver.com/news/vulnerabilities/pillow-memory-disclosure-uninitialized-heap-data/NetSec Observeren2026-10-21T09:37:36ZPillow Memory Disclosure: Uninitialized Heap Data Leaked in TIFF JPEG Decoding Before 13.0.0 Fixhttps://netsecobserver.com/news/vulnerabilities/npm-follow-redirects-1-16-1-fixes-credential-leak/NetSec Observeren2026-10-21T08:56:43Znpm follow-redirects 1.16.1 fixes credential leak in array header handlinghttps://netsecobserver.com/news/vulnerabilities/leaked-php-flaws-php2shell-demand-immediate-pre/NetSec Observeren2026-10-21T08:05:11ZLeaked PHP Flaws PHP2Shell Demand Immediate Pre-Patch Preparationhttps://netsecobserver.com/news/vulnerabilities/totolink-x2000r-remote-code-execution/NetSec Observeren2026-10-21T03:45:17ZTotolink X2000R Remote Code Execution Vulnerability in boa formUpload Functionhttps://netsecobserver.com/news/vulnerabilities/totolink-x2000r-boa-web-server-stack-overflow/NetSec Observeren2026-10-21T02:56:11ZTotolink X2000R boa Web Server Stack Overflow Permits Authenticated Remote Code Execution via HTTPhttps://netsecobserver.com/news/vulnerabilities/astral-uv-path-traversal-in-source-distribution/NetSec Observeren2026-10-21T02:46:35ZAstral uv Path Traversal in Source Distribution Extraction Allows Arbitrary File Writehttps://netsecobserver.com/news/vulnerabilities/totolink-x2000r-router-has-critical-stack-buffer/NetSec Observeren2026-10-21T01:40:56ZTotolink X2000R Router Has Critical Stack Buffer Overflow in DHCP DNS Setuphttps://netsecobserver.com/news/vulnerabilities/totolink-x2000r-boa-server-static-dns2-buffer/NetSec Observeren2026-10-21T01:38:11ZTotolink X2000R boa server static_dns2 buffer overflow enables arbitrary code executionhttps://netsecobserver.com/news/vulnerabilities/nativechurch-wordpress-theme-path-traversal/NetSec Observeren2026-10-20T23:03:16ZNativeChurch WordPress Theme Path Traversal Allows Arbitrary File Downloadhttps://netsecobserver.com/news/vulnerabilities/kiro-crew-cve-2026-112380-critical-missing/NetSec Observeren2026-10-20T21:38:34ZKiro Crew CVE-2026-112380: Critical Missing Authorization in WhatsApp Channel Enables Remote Command Executionhttps://netsecobserver.com/news/vulnerabilities/apache-couchdb-replicator-infinite-redirect-loop/NetSec Observeren2026-10-20T20:28:12ZApache CouchDB Replicator Infinite Redirect Loop Causes Denial of Servicehttps://netsecobserver.com/news/vulnerabilities/adobe-acrobat-for-edge-out-of-bounds-write-allows/NetSec Observeren2026-10-20T19:32:01ZAdobe Acrobat for Edge Out-of-Bounds Write Allows Code Execution