Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

06:59 UTC· 9m ago

#information-disclosure — news, CVEs and analysis · ZeroHour

today 43 visits · 56 views · 7 reads·all time 17K views

Tag

#information-disclosure

22 stories this week · 72 this month · 82 in 6 months · mostly security

stories per day · 30 days

Related#zdi 37 #out-of-bounds-read 14 #foxit 12 #pdf-reader 12 #use-after-free 10 #advisory 8 #adobe 7 #apache 7 #linux-kernel 7 #ubuntu 7 #acrobat-reader 6 #access-control 5 #cve 5 #apache-storm 4 #local 4 #microsoft 4 #authentication-bypass 3 #denial-of-service 3

59 stories, newest first · one card per story

1–24 of 59← Prev1 / 3Next →

oss-security·1d ago high

CVE-2026-82386: Apache Roller: XML external entity processing in OPML bookmark import

#apache #apache-roller #xxe

CVE-2026-82386

oss-security·2d ago

[OSSA-2026-041] OpenStack Swift: Cross-container information disclosure via Swift tempurl (CVE-2026-97149)

#openstack #swift #tempurl

CVE-2026-97149

Ubuntu Security Notices·3d ago

USN-8811-1: urllib3 vulnerability

#urllib3 #ubuntu #usn-8811-1

Advisory

Hacker News · security·3d ago high

Radicle: Disclosure of Vulnerability in the Network Protocol

#radicle #git #p2p

2 sources 5 min

ZDI Published Advisories·4d ago

ZDI-26-736: Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

#foxit #pdf-reader #out-of-bounds-read

CVE-2026-91807

ZDI Published Advisories·4d ago

ZDI-26-732: Foxit PDF Reader importIcon NTLM Response Information Disclosure Vulnerability

#foxit #pdf-reader #ntlm

CVE-2026-91796

ZDI Published Advisories·4d ago

ZDI-26-720: Foxit PDF Reader activeDocs Missing Authorization Information Disclosure Vulnerability

#foxit #pdf-reader #information-disclosure

CVE-2026-91788

ZDI Published Advisories·4d ago

ZDI-26-723: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability

#foxit #pdf-reader #use-after-free

CVE-2026-91790

Full Disclosure·4d ago

Teams meeting audio and roster data remain accessible via ACS Call Automation connectCall after a participant is removed from the meeting

#microsoft #teams #azure-communication-services

Vulnerability

Ubuntu Security Notices·4d ago

USN-8733-2: Gzip vulnerabilities

#denial-of-service #gzip #information-disclosure

CVE-2026-41991

oss-security·5d ago

CVE-2026-75158: Apache Airflow: Assets events API returns asset events for every Dag with no per-Dag authorization filter

#apache-airflow #cve-2026-75158 #authorization

CVE-2026-75158

Ubuntu Security Notices·5d ago

USN-8789-1: strongSwan vulnerabilities

#cve-2026-78123 #cve-2026-78124 #denial-of-service

CVE-2026-78123

oss-security·8d ago

CVE-2026-93018: Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p

#cve-2026-93018 #image-processing #imager

CVE-2026-93018

SecurityWeek·8d ago

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products

#azure #cloud #copilot

ZDI Published Advisories·9d ago

ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure Vulnerability

#cisco #identity-services-engine #information-disclosure

CVE-2026-20235

Cisco Security Advisories·10d ago

Cisco Identity Services Engine Information Disclosure Vulnerability

#api #cisco #identity-services-engine

Advisory

Cyber Security News·10d ago high

Critical HPE Vulnerabilities Allow Remote Attackers to Achieve Complete System Compromise

#authentication-bypass #buffer-overflow #edgeconnect

3 min

ZDI Published Advisories·11d ago

ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability

#0day #airbyte #data-connector

CVE-2026-92203

oss-security·11d ago high

CVE-2026-59739: Apache ZooKeeper: Information disclosure via SetWatches reconnect replay

#acl #apache #cve

CVE-2026-59739

oss-security·12d ago

CVE-2026-77883: Apache Syncope: Information disclosure via one-hop JEXL navigation past the JexlContextBuilder name denylist

#apache #cve-2026-77883 #information-disclosure

CVE-2026-77883

2

oss-security·12d ago

CVE-2026-68570: Apache Doris: Authorization bypass leading to unauthorized data access

#apache-doris #authorization-bypass #cve

CVE-2026-68570

Ubuntu Security Notices·12d ago

USN-8757-1: cgit vulnerability

#advisory #cgit #information-disclosure

Advisory

Ubuntu Security Notices·12d ago

USN-8756-1: Yelp vulnerability

#help-viewer #information-disclosure #script-execution

Advisory

ZDI Published Advisories·13d ago

ZDI-26-689: Linux Kernel SCTP Subsystem Race Condition Information Disclosure Vulnerability

#information-disclosure #linux-kernel #local

CVE-2026-46227