Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fixed a bunch of CVEs
Fixed a bunch of CVEs
Fixed a bunch of CVEs
Fix CVE-2026-25554
The OOB read and integer-overflow made by attacker may lead to crash, high consumption of memory or even other more serious consequences. (CVE-2023-32307) Refe…
The config_sortlist function is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow and thus may cau…
Missing message length and attributes length checks** when it handles STUN packets, leading to controllable heap-over-flow (CVE-2023-22741) References: - https…
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An attacker can send a message with evil sdp to FreeSWITCH, which may a cause a crash due to an out-of-bounds access. (CVE-2022-31001) An attacker can send a m…
Security and bug fixes for FreeRDP & Remmina.
Update to v1.4.3 (rhbz#2549665): Security fixes: - [SEC] Fix potential buffer overflow in Record&Play plugin (PR #3688) - [SEC] Fix master/helper session switc…
Baresip v4.12.0 (2026-09-30) Feature: Send Custom X-Headers on Outbound Calls audio: thread-safe usage of psize and ptime in tx_thread() jbuf: safer jbuf_set_i…
Baresip v4.12.0 (2026-09-30) Feature: Send Custom X-Headers on Outbound Calls audio: thread-safe usage of psize and ptime in tx_thread() jbuf: safer jbuf_set_i…
Baresip v4.12.0 (2026-09-30) Feature: Send Custom X-Headers on Outbound Calls audio: thread-safe usage of psize and ptime in tx_thread() jbuf: safer jbuf_set_i…
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data.The first is an automated…
Multiple security vulnerabilities were discovered in the Kamailio SIP server, which could result in denial of service. For the stable distribution (trixie), th…
Cybersecurity researchers have discovered a malicious NuGet package that masquerades as a C# software development kit for Sicoob, one of Brazil's largest coope…
Cybersecurity researchers have discovered two malicious Microsoft Visual Studio Code (VS Code) extensions that are advertised as artificial intelligence (AI)-p…
Cybersecurity researchers have disclosed details of a phishing campaign that delivers a stealthy banking malware-turned-remote access trojan called MostereRAT.…
The embedded copy of pjproject is affected by a buffer overflow vulnerability, which affects applications that use PJSIP DNS resolver. For the stable distribut…
Cybersecurity researchers have shed light on a new campaign targeting Brazilian users since the start of 2025 to infect users with a malicious extension for Ch…
Cybersecurity researchers have shed light on a new campaign targeting Brazilian users since the start of 2025 to infect users with a malicious extension for Ch…
In a sneaky new supply-chain attack , threat actors have been discovered exploiting package naming conventions to trick unsuspecting developers into installing…
