Search: “Socket”

201 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 339 Vulnerability 204 Exploit / PoC 73 Threat actor 57 Ransomware 51 Data breach 45 Industry 30 Policy & legal 23 Phishing & fraud 20 Research 8 Advisory 8 Tools 5

SeverityAll critical 217 high 401 medium 176 low 62 info 7

New ZcopyReaper Linux Kernel Vulnerability Enables Privilege Escalation Attacks

ZcopyReaper (CVE-2026-43502) lets unprivileged local attackers reach root on Linux via an RDS zero-copy cleanup flaw dating to kernel 4.17.

CVE-2026-43502 is a lifetime-management error in rds_message_purge() that mishandles zero-copy sends before socket attachment, corrupting kernel memory and enabling local privilege escalation without capabilities or user namespaces. NebuSec demonstrated the exploit on openSUSE kernel 6.4.0-150600.23.100; vulnerable systems need CONFIG_INET, CONFIG_AIO, CONFIG_RDS, and CONFIG_RDS_TCP. The fix landed in mainline commit 44b550d88b26 (Linux 7.1-rc3) with backports to Ubuntu 7.0.0, 6.8.0, and 5.15.0 kernels and multiple Debian branches. NebuSec also released public exploits for 20 additional Linux kernel vulnerabilities in its CyberMeowfia repository.

Cyber Security NewsSep 14, 13:29 UTC · 2d agoVulnerability CVE-2026-43502

Fuzzing µCOS protocol stacks, Part 2: Handling multiple requests per test case

Cisco TalosAug 28, 16:00 UTC · Aug 28, 2024Vulnerability in the wild

Fuzzing µC/OS protocol stacks, Part 1: HTTP server fuzzing

Cisco TalosAug 28, 16:00 UTC · Aug 28, 2024Vulnerability

Patch Tuesday for August 2022 fixed actively exploited zero

Security AffairsAug 9, 21:25 UTC · Aug 9, 2022Vulnerability in the wildCVE-2022-34713 CVE-2022-30133 CVE-2022-35744+46 CVEs1

New Tor Browser 7.0 implements multiprocess mode, content sandbox, and Unix domain sockets

Security AffairsJun 9, 10:33 UTC · Jun 9, 2017Vulnerability

Hands-On Review: Converged Networking and Security with Cato Networks

The Hacker NewsMay 8, 14:25 UTC · May 8, 2017Vulnerability

Uncovering weaknesses in Apple macOS and VMWare vCenter: 12 vulnerabilities in RPC implementation

Cisco TalosJul 13, 16:00 UTC · Jul 13, 2023Vulnerability

Vulnerability Deep Dive: TP-Link TL-R600VPN remote code execution vulnerabilities

Cisco TalosJan 15, 20:02 UTC · Jan 15, 2019Vulnerability

Mini Shai

Infosecurity MagazineMay 12, 14:45 UTC · May 12, 2026Vulnerability

CVE-2016-8655 - A new 5-Year

Security AffairsDec 8, 07:27 UTC · Dec 8, 2016Vulnerability CVE-2016-8655

Dell Secure Connect Gateway Vulnerabilities Allow Hackers to Gain Unauthorized Access

Dell patches three critical flaws (CVSS up to 9.8) in Secure Connect Gateway 5.0 enabling admin token replay, unauthenticated RCE, and root escalation.

Dell disclosed three critical vulnerabilities in Secure Connect Gateway 5.0 appliance and application deployments. CVE-2026-80172 (CVSS 9.8) lets unauthenticated attackers replay captured requests, which lack nonce validation and time limits, to repeatedly mint administrator access and refresh tokens. CVE-2026-61410 (9.4) is a missing-authorization flaw enabling unauthenticated remote command execution, and CVE-2026-80238 (9.3) is an exposed Docker socket allowing local privilege escalation to root and container escape. Fixes ship in appliance 5.36.00.16 and application 5.36.00.00.

Cyber Security NewsSep 8, 15:22 UTC · 8d agoVulnerability CVE-2026-80172 CVE-2026-61410 CVE-2026-80238

North Korea-linked Supply Chain Attack Targets Developers with 35 Malicious npm Packages

The Hacker NewsJun 25, 09:20 UTC · Jun 25, 2025Vulnerability

Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open

The Hacker NewsJun 4, 10:11 UTC · Jun 4, 2025Vulnerability2

ToddyCat: Unveiling an unknown APT actor attacking high

Kaspersky SecurelistJun 21, 10:00 UTC · Jun 21, 2022Vulnerability

Vulnerability Spotlight: Microsoft issues security update for Azure Sphere

Cisco TalosJul 31, 16:56 UTC · Jul 31, 2020Vulnerability in the wild

The Mutiny Fuzzing Framework and Decept Proxy

Cisco TalosDec 7, 18:06 UTC · Dec 7, 2017Vulnerability CVE-2014-7815

Hacking the Belkin E Series OmniView 2

Cisco TalosApr 6, 13:30 UTC · Apr 6, 2017Vulnerability

Threat Spotlight: Group 72, Opening the ZxShell

Cisco TalosOct 28, 15:10 UTC · Oct 28, 2014Vulnerability CVE-2011-2462 CVE-2013-3163 CVE-2014-0322

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential

The Hacker NewsJun 2, 08:55 UTC · Jun 2, 2026Vulnerability

What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant

Kaspersky SecurelistMay 29, 07:00 UTC · May 29, 2026Vulnerability CVE-2025-55182 CVE-2023-4911 CVE-2021-4034+3 CVEs

Packagist Supply Chain Attack Infects 8 Packages Using GitHub

The Hacker NewsMay 24, 08:14 UTC · May 24, 2026Vulnerability

New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions

The Hacker NewsMay 3, 06:13 UTC · May 3, 2026Vulnerability CVE-2026-31431 CVE-2022-0847

Researchers Uncover Chrome Extensions Abusing Affiliate Links and Stealing ChatGPT Access

The Hacker NewsJan 31, 07:21 UTC · Jan 31, 2026Vulnerability CVE-2020-28707

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

The Hacker NewsDec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-29927 CVE-2025-66478

Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3

The Hacker NewsAug 25, 17:53 UTC · Aug 25, 2025Vulnerability CVE-2025-90741

Over 70 Malicious npm and VS Code Packages Found Stealing Data and Crypto

The Hacker NewsMay 26, 15:12 UTC · May 26, 2025Vulnerability

Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access

The Hacker NewsFeb 6, 03:47 UTC · Feb 6, 2025Vulnerability

Meta's Llama Framework Flaw Exposes AI Systems to Remote Code Execution Risks

The Hacker NewsJan 28, 05:26 UTC · Jan 28, 2025Vulnerability CVE-2024-50050 CVE-2024-36601

A closer look at the Mercedes

Kaspersky SecurelistJan 17, 10:56 UTC · Jan 17, 2025Vulnerability

Cybercriminals Target Ethereum Developers with Fake Hardhat npm Packages

The Hacker NewsJan 6, 11:09 UTC · Jan 6, 2025Vulnerability

LilacSquid APT targeted orgs in the U.S., Europe, and Asia

Security AffairsMay 31, 11:19 UTC · May 31, 2024Vulnerability

Now-fixed Linux kernel vulnerabilities enabled local privilege escalation (CVE-2021-26708)

Help Net SecurityMar 3, 00:00 UTC · Mar 3, 2021Vulnerability CVE-2021-26708

Netdata: Distributed real-time performance and health monitoring

Help Net SecuritySep 18, 00:00 UTC · Sep 18, 2017Vulnerability

CVE-2017-6074 is a new 11-year old Linux Kernel vulnerability discoveredCVE-2017-6074 is a new 11-year old Linux Kernel vulnerability discovered

Security AffairsFeb 22, 21:46 UTC · Feb 22, 2017Vulnerability CVE-2017-6074 CVE-2016-8655

5-Year-Old Linux Kernel Local Privilege Escalation Flaw Discovered

The Hacker NewsDec 7, 16:14 UTC · Dec 7, 2016Vulnerability CVE-2016-8655

Flock cameras are riddled with security vulnerabilities and hardcoded creds

Leaked Flock ALPR camera firmware reveals EOL Android 8.1, a 2017 Linux kernel, and hardcoded API keys granting access to production credentials.

DDoSecrets published filesystem images from an in-use Flock ALPR camera, obtained by the hacker collective stegan0gram and investigated by 404 Media and Wired. Micah Lee's analysis shows the camera runs Android 8.1 with a security patch level of 2018-06-05 and Linux kernel 3.18.71, missing roughly eight years of Android fixes. The firmware exposes a hardcoded API key for Flock's hpnotiq backend that can retrieve Auth0 client credentials for any camera by MAC address, with credentials stored in plaintext. Likely unpatched flaws include CVE-2021-1905 (Qualcomm Adreno use-after-free) and CVE-2018-9568 (WrongZone kernel socket type confusion); Flock says it received no reports via its disclosure policy.

Hacker News · securitySep 16, 22:19 UTC · 8h agoVulnerability 3 sources HN 35↑ · 3 comments CVE-2021-1905 CVE-2018-9568

Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894)

CVE-2026-90894 in Parallels Desktop for Mac lets any local user gain root via argument injection; patched in v27.0.0, PoC withheld.

JFrog researchers disclosed CVE-2026-90894, an argument injection flaw in Parallels Desktop for Mac v26.4.0 on Apple silicon that lets any local user gain root on the host. The chain combines a world-writable Unix socket for prl_disp_service (which runs as root), weak peer-credential authentication, and argument injection via --use-compress-program in the appliance extraction tar path. Alludo fixed the flaw in Parallels Desktop v27.0.0 in early September 2026; JFrog published technical details but withheld its proof-of-concept script.

Help Net Securityupdated Sep 16, 13:14 UTC · 18h agofirst Sep 16, 12:36 UTC · 18h agoVulnerability 4 sources CVE-2026-90894