CVE ID: CVE-2026-125350
Vendor: Google
Product: Chromium
Date Added: 2026-11-10
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-125350

CVE ID: CVE-2026-125350
Vendor: Google
Product: Chromium
Date Added: 2026-11-10
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-125350

CVE ID: CVE-2026-111793
Vendor: Openwave Messaging Limited
Product: Webtop Media Transcoder
Date Added: 2026-11-10
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-111793

CVE ID: CVE-2026-111793
Vendor: Openwave Messaging Limited
Product: Webtop Media Transcoder
Date Added: 2026-11-10
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-111793

CVE ID: CVE-2026-20320
Vendor: Cisco
Product: BroadWorks
Date Added: 2026-11-10
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-20320

CVE ID: CVE-2026-20320
Vendor: Cisco
Product: BroadWorks
Date Added: 2026-11-10
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-20320

🚨 Microsoft confirms hackers are exploiting Outlook zero-day to steal Windows authentication hashes, CVE-2026-124194

Microsoft has patched an actively exploited vulnerability in Outlook that could allow attackers to steal NTLM authentication hashes by tricking users into opening specially crafted files.

The flaw, tracked as CVE-2026-124194 (CVSS 6.5), allows Outlook to connect to attacker-controlled locations without displaying the usual external content security warning, potentially exposing credentials to further attacks.

Microsoft confirmed exploitation in the wild as part of its November 2026 Patch Tuesday updates. Users and administrators are urged to install the latest security fixes immediately.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124194

No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

CVE ID: CVE-2026-124194
Vendor: Microsoft
Product: Office
Date Added: 2026-11-10
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-124194

🚨 Microsoft confirms hackers are exploiting Outlook zero-day to steal Windows authentication hashes, CVE-2026-124194

Microsoft has patched an actively exploited vulnerability in Outlook that could allow attackers to steal NTLM authentication hashes by tricking users into opening specially crafted files.

The flaw, tracked as CVE-2026-124194 (CVSS 6.5), allows Outlook to connect to attacker-controlled locations without displaying the usual external content security warning, potentially exposing credentials to further attacks.

Microsoft confirmed exploitation in the wild as part of its November 2026 Patch Tuesday updates. Users and administrators are urged to install the latest security fixes immediately.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124194

No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

CVE ID: CVE-2026-124194
Vendor: Microsoft
Product: Office
Date Added: 2026-11-10
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-124194

CVE ID: CVE-2026-116606
Vendor: Barracuda Networks
Product: Barracuda Email Security Gateway (ESG)
Date Added: 2026-11-10
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-116606

CVE ID: CVE-2026-116606
Vendor: Barracuda Networks
Product: Barracuda Email Security Gateway (ESG)
Date Added: 2026-11-10
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-116606

CVE ID: CVE-2026-111560
Vendor: Barracuda Networks
Product: Multiple Products
Date Added: 2026-11-10
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-111560

CVE ID: CVE-2026-111560
Vendor: Barracuda Networks
Product: Multiple Products
Date Added: 2026-11-10
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-111560

IBM Patches Actively Exploited Aspera Faspex Authorization Bypass Flaw

CISA added a critical IBM Aspera Faspex vulnerability (CVE-2026-123218) to its Known Exploited Vulnerabilities catalog after confirming active attacks. The flaw allows authenticated users to bypass authorization and gain full administrative control over the file-transfer platform.

**If you use IBM Aspera Faspex 5, update to version 5.0.19 PL1 immediately and verify the faspex-core container image is build 1ce4b13. Until you can patch, restrict the Faspex interface to trusted networks via VPN or IP allowlists. Check your administrator logs for any unauthorized role changes or new accounts created since early November 2026.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/ibm-patches-actively-exploited-aspera-faspex-authorization-bypass-flaw-d-r-e-w-f/gD2P6Ple2L

IBM Patches Actively Exploited Aspera Faspex Authorization Bypass Flaw

CISA added a critical IBM Aspera Faspex vulnerability (CVE-2026-123218) to its Known Exploited Vulnerabilities catalog after confirming active attacks. The flaw allows authenticated users to bypass authorization and gain full administrative control over the file-transfer platform.

**If you use IBM Aspera Faspex 5, update to version 5.0.19 PL1 immediately and verify the faspex-core container image is build 1ce4b13. Until you can patch, restrict the Faspex interface to trusted networks via VPN or IP allowlists. Check your administrator logs for any unauthorized role changes or new accounts created since early November 2026.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/ibm-patches-actively-exploited-aspera-faspex-authorization-bypass-flaw-d-r-e-w-f/gD2P6Ple2L

5️⃣ Für einige Lacher im Netz hat letzte Woche die Meldung gesorgt, dass Windows Paint eine Lücke enthält, welche die Ausführung beliebigen Software-Codes enthält. Aber auch wenn das in der Tat auf den ersten Blick unwahrscheinlich scheint: Schlussendlich besteht bei jeder Software, welche das Laden von Daten (bzw. in diesem Fall Bildern) erlaubt, das Risiko, dass die Laderoutinen Fehler enthalten und so angreifbar sind.
https://www.cve.org/CVERecord?id=CVE-2026-83844

5️⃣ Für einige Lacher im Netz hat letzte Woche die Meldung gesorgt, dass Windows Paint eine Lücke enthält, welche die Ausführung beliebigen Software-Codes enthält. Aber auch wenn das in der Tat auf den ersten Blick unwahrscheinlich scheint: Schlussendlich besteht bei jeder Software, welche das Laden von Daten (bzw. in diesem Fall Bildern) erlaubt, das Risiko, dass die Laderoutinen Fehler enthalten und so angreifbar sind.
https://www.cve.org/CVERecord?id=CVE-2026-83844

📢 [VULN] GitLab, deux failles notées 10 en neuf jours et des serveurs autogérés attaqués trois semaines après le correctif - CVE-2026-97229

Une faille de GitLab notée 10 sur 10, corrigée le 12 octobre, est exploitée en nombre depuis le 4 novembre sur les serveurs que les entreprises hébergent elles-mêmes. GitLab a publié neuf jours plus tard un second correctif critique de même gravité.

🔗 https://itsocial.fr/cybersecurite/cybersecurite-articles/gitlab-deux-failles-notees-10-en-neuf-jours-et-des-serveurs-autogeres-attaques-trois-semaines-apres-le-correctif/
💬 discussion : https://infosec.pub/post/54752165
#CVE #Cyberveille

CVE-2026-84084: CSRF in IBM Guardium Data Protection 12.2 lets remote attackers bypass security restrictions. CVSS 8.8, patch status unknown. Check exposure and apply mitigations now. #CVE #infosec #IBM https://www.valtersit.com/cve/CVE-2026-84084/

Git has released security updates for version 2.56.1 and the 2.50 through 2.55 series, addressing multiple vulnerabilities.

The primary issue, CVE-2026-111760, allowed code execution via malicious repositories during recursive cloning due to a flaw in handling extremely large file paths that could overwrite system files.

Five additional vulnerabilities were patched: CVE-2026-113408, CVE-2026-114467, CVE-2026-114469, CVE-202…

https://en.hacks.gr/krisimi-enimerosi-gia-to-git-diorthothikan-kena-asfaleias-poy-thetoyn-se-kindyno-toys-ypologistes/

#Git #OpenSource #Developers #Vulnerability

Git Fixes Flaw That Exploits Recursive Clones for Code Execution

A newly discovered security flaw in Git, tracked as CVE-2026-111760, could allow hackers to run malicious code on your machine simply by tricking you into performing a recursive clone of a compromised repository. This vulnerability is particularly sneaky, exploiting a weakness in how Git handles long file paths and submodules.

https://osintsights.com/git-fixes-flaw-that-exploits-recursive-clones-for-code-execution?utm_source=mastodon&utm_medium=social

#GitSecurityFlaw #Cve2026111760 #CodeExecution #RecursiveClones #SupplyChain

Git has released security updates for version 2.56.1 and the 2.50 through 2.55 series, addressing multiple vulnerabilities.

The primary issue, CVE-2026-111760, allowed code execution via malicious repositories during recursive cloning due to a flaw in handling extremely large file paths that could overwrite system files.

Five additional vulnerabilities were patched: CVE-2026-113408, CVE-2026-114467, CVE-2026-114469, CVE-202…

https://en.hacks.gr/krisimi-enimerosi-gia-to-git-diorthothikan-kena-asfaleias-poy-thetoyn-se-kindyno-toys-ypologistes/

#Git #OpenSource #Developers #Vulnerability

Git has released security updates for version 2.56.1 and the 2.50 through 2.55 series, addressing multiple vulnerabilities.

The primary issue, CVE-2026-111760, allowed code execution via malicious repositories during recursive cloning due to a flaw in handling extremely large file paths that could overwrite system files.

Five additional vulnerabilities were patched: CVE-2026-113408, CVE-2026-114467, CVE-2026-114469, CVE-202…

https://en.hacks.gr/krisimi-enimerosi-gia-to-git-diorthothikan-kena-asfaleias-poy-thetoyn-se-kindyno-toys-ypologistes/

#Git #OpenSource #Developers #Vulnerability

Git has released security updates for version 2.56.1 and the 2.50 through 2.55 series, addressing multiple vulnerabilities.

The primary issue, CVE-2026-111760, allowed code execution via malicious repositories during recursive cloning due to a flaw in handling extremely large file paths that could overwrite system files.

Five additional vulnerabilities were patched: CVE-2026-113408, CVE-2026-114467, CVE-2026-114469, CVE-202…

https://en.hacks.gr/krisimi-enimerosi-gia-to-git-diorthothikan-kena-asfaleias-poy-thetoyn-se-kindyno-toys-ypologistes/

#Git #OpenSource #Developers #Vulnerability