https://netsecobserver.com/news/vulnerabilities/openchoreo-api-server-authorization-flaw-allows/NetSec Observeren2026-10-21T16:59:41ZOpenChoreo API server authorization flaw allows cross-component workflow escalationhttps://netsecobserver.com/news/cyber-attacks/eu-probes-booking-com-over-fake-listings-and-data/NetSec Observeren2026-10-21T13:01:49ZEU probes Booking.com over fake listings and data exposure riskshttps://netsecobserver.com/news/vulnerabilities/ai-coding-agent-skills-bypass-sca-and-sast/NetSec Observeren2026-10-21T10:28:28ZAI Coding Agent Skills Bypass SCA and SAST Security Scannershttps://netsecobserver.com/news/vulnerabilities/pillow-memory-disclosure-uninitialized-heap-data/NetSec Observeren2026-10-21T09:37:36ZPillow Memory Disclosure: Uninitialized Heap Data Leaked in TIFF JPEG Decoding Before 13.0.0 Fixhttps://netsecobserver.com/news/vulnerabilities/npm-follow-redirects-1-16-1-fixes-credential-leak/NetSec Observeren2026-10-21T08:56:43Znpm follow-redirects 1.16.1 fixes credential leak in array header handlinghttps://netsecobserver.com/news/vulnerabilities/leaked-php-flaws-php2shell-demand-immediate-pre/NetSec Observeren2026-10-21T08:05:11ZLeaked PHP Flaws PHP2Shell Demand Immediate Pre-Patch Preparationhttps://netsecobserver.com/news/vulnerabilities/totolink-x2000r-remote-code-execution/NetSec Observeren2026-10-21T03:45:17ZTotolink X2000R Remote Code Execution Vulnerability in boa formUpload Functionhttps://netsecobserver.com/news/vulnerabilities/totolink-x2000r-boa-web-server-stack-overflow/NetSec Observeren2026-10-21T02:56:11ZTotolink X2000R boa Web Server Stack Overflow Permits Authenticated Remote Code Execution via HTTPhttps://netsecobserver.com/news/vulnerabilities/astral-uv-path-traversal-in-source-distribution/NetSec Observeren2026-10-21T02:46:35ZAstral uv Path Traversal in Source Distribution Extraction Allows Arbitrary File Writehttps://netsecobserver.com/news/vulnerabilities/totolink-x2000r-router-has-critical-stack-buffer/NetSec Observeren2026-10-21T01:40:56ZTotolink X2000R Router Has Critical Stack Buffer Overflow in DHCP DNS Setuphttps://netsecobserver.com/news/vulnerabilities/totolink-x2000r-boa-server-static-dns2-buffer/NetSec Observeren2026-10-21T01:38:11ZTotolink X2000R boa server static_dns2 buffer overflow enables arbitrary code executionhttps://netsecobserver.com/news/vulnerabilities/nativechurch-wordpress-theme-path-traversal/NetSec Observeren2026-10-20T23:03:16ZNativeChurch WordPress Theme Path Traversal Allows Arbitrary File Downloadhttps://netsecobserver.com/news/vulnerabilities/kiro-crew-cve-2026-112380-critical-missing/NetSec Observeren2026-10-20T21:38:34ZKiro Crew CVE-2026-112380: Critical Missing Authorization in WhatsApp Channel Enables Remote Command Executionhttps://netsecobserver.com/news/vulnerabilities/apache-couchdb-replicator-infinite-redirect-loop/NetSec Observeren2026-10-20T20:28:12ZApache CouchDB Replicator Infinite Redirect Loop Causes Denial of Servicehttps://netsecobserver.com/news/vulnerabilities/adobe-acrobat-for-edge-out-of-bounds-write-allows/NetSec Observeren2026-10-20T19:32:01ZAdobe Acrobat for Edge Out-of-Bounds Write Allows Code Executionhttps://netsecobserver.com/news/cyber-attacks/army-cyber-command-echotribble-program-plans/NetSec Observeren2026-10-20T13:20:04ZArmy Cyber Command ECHOTRIBBLE Program Plans Autonomous AI Network Weaponshttps://netsecobserver.com/news/cyber-attacks/exposed-artex-configs-reveal-ai-assisted-south/NetSec Observeren2026-10-20T11:51:46ZExposed ARTEX Configs Reveal AI-Assisted South Korean Bank Breacheshttps://netsecobserver.com/news/vulnerabilities/threatbook-redagents-orchestrates-four-ai-agents/NetSec Observeren2026-10-20T07:17:41ZThreatBook RedAgents Orchestrates Four AI Agents for Parallel Penetration Testinghttps://netsecobserver.com/news/vulnerabilities/signal-ringrtc-cwe-754-flaw-lets-attackers-flood/NetSec Observeren2026-10-20T05:26:26ZSignal RingRTC CWE-754 Flaw Lets Attackers Flood FSM Queue to Stop A/V Trackshttps://netsecobserver.com/news/vulnerabilities/pillow-flashpix-heap-corruption-allows-code/NetSec Observeren2026-10-20T03:01:20ZPillow FlashPix Heap Corruption Allows Code Execution in Python Appshttps://netsecobserver.com/news/vulnerabilities/ibm-verify-identity-appliance-hard-coded/NetSec Observeren2026-10-20T00:46:42ZIBM Verify Identity Appliance Hard-Coded Credentials Enable Physical Privilege Escalationhttps://netsecobserver.com/news/vulnerabilities/pillow-morphology-zero-width-image-crash-cve-2026/NetSec Observeren2026-10-19T23:31:36ZPillow Morphology Zero-Width Image Crash CVE-2026-112397 Patched in v13.0.0https://netsecobserver.com/news/vulnerabilities/pillow-image-library-fixes-high-severity-double/NetSec Observeren2026-10-19T23:12:45ZPillow Image Library Fixes High-Severity Double-Free Memory Flawhttps://netsecobserver.com/news/vulnerabilities/pingtools-network-utilities-4-64-has-high/NetSec Observeren2026-10-19T18:48:04ZPingTools Network Utilities 4.64 Has High-Severity Command Injection Flaw