https://appsecscoop.com/c/vulnerabilities/oneplus-oxygenos-flaws-grant-root-command/AppSec Scoopen2026-10-21T20:23:12ZOnePlus OxygenOS flaws grant root command execution to unprivileged appshttps://appsecscoop.com/c/vulnerabilities/trudesk-users-face-data-leak-risk-as-cve-2026/AppSec Scoopen2026-10-21T20:05:40ZTrudesk Users Face Data Leak Risk as CVE-2026-114400 Allows Unauthenticated Attachment Downloadshttps://appsecscoop.com/c/vulnerabilities/pillow-13-0-0-release-addresses-multiple-security/AppSec Scoopen2026-10-21T19:25:34ZPillow 13.0.0 release addresses multiple security vulnerabilities in Python imaging libraryhttps://appsecscoop.com/c/vulnerabilities/storybook-server-flaw-risks-remote-code-execution/AppSec Scoopen2026-10-21T18:12:24ZStorybook server flaw risks remote code execution on local networkshttps://appsecscoop.com/c/vulnerabilities/php-teams-face-urgent-patching-for-two-leaked/AppSec Scoopen2026-10-21T13:05:45ZPHP teams face urgent patching for two leaked critical flawshttps://appsecscoop.com/c/vulnerabilities/ai-coding-skills-evade-scanners-risking/AppSec Scoopen2026-10-21T10:28:28ZAI coding skills evade scanners, risking credential theft in agent workflowshttps://appsecscoop.com/c/vulnerabilities/organisations-risk-prefixed-system-db-exposure-in/AppSec Scoopen2026-10-21T09:58:30ZOrganisations risk prefixed system DB exposure in CouchDB pre-3.5.3 via CVE-2026-90800 auth bypasshttps://appsecscoop.com/c/vulnerabilities/organisations-urged-to-patch-argo-cd-to-block/AppSec Scoopen2026-10-21T07:47:21ZOrganisations urged to patch Argo CD to block attackers from stealing sensitive tokens and keyshttps://appsecscoop.com/c/vulnerabilities/oracle-soa-suite-flaw-allows-remote-takeover-in/AppSec Scoopen2026-10-21T05:55:19ZOracle SOA Suite flaw allows remote takeover in critical vulnerabilityhttps://appsecscoop.com/c/vulnerabilities/critical-authenticated-rce-flaw-found-in-totolink/AppSec Scoopen2026-10-21T04:34:19ZCritical Authenticated RCE Flaw Found in Totolink X2000R Router Firmwarehttps://appsecscoop.com/c/vulnerabilities/aws-serverless-ci-cd-flaw-lets-repo-pushers/AppSec Scoopen2026-10-21T04:12:55ZAWS Serverless CI/CD Flaw Lets Repo Pushers Escalate Privileges to Access External Resourceshttps://appsecscoop.com/c/vulnerabilities/sites-using-duplicator-face-remote-code-execution/AppSec Scoopen2026-10-21T04:12:54ZSites using Duplicator face remote code execution via object injection flawhttps://appsecscoop.com/c/vulnerabilities/totolink-x2000r-critical-cve-2026-10141-flaw/AppSec Scoopen2026-10-21T03:48:48ZTotolink X2000R Critical CVE-2026-10141 Flaw Enables Authenticated Attackers to Install Unsigned Firmwarehttps://appsecscoop.com/c/vulnerabilities/markdown-it-denial-of-service-flaw-requires/AppSec Scoopen2026-10-21T03:45:17Zmarkdown-it denial of service flaw requires immediate patching for exposed parsershttps://appsecscoop.com/c/vulnerabilities/totolink-x2000r-router-flaw-allows-authenticated/AppSec Scoopen2026-10-21T02:56:11ZTotolink X2000R Router Flaw Allows Authenticated Remote Code Executionhttps://appsecscoop.com/c/vulnerabilities/authenticated-command-injection-in-totolink/AppSec Scoopen2026-10-21T02:30:15ZAuthenticated command injection in TOTOLINK X2000R firmware allows code executionhttps://appsecscoop.com/c/vulnerabilities/network-teams-urged-to-patch-totolink-x2000r/AppSec Scoopen2026-10-21T02:04:37ZNetwork teams urged to patch Totolink X2000R routers after critical authenticated RCE flaw discoveredhttps://appsecscoop.com/c/vulnerabilities/totolink-x2000r-router-authenticated-rce-flaw/AppSec Scoopen2026-10-21T01:15:11ZTotolink X2000R Router Authenticated RCE Flaw Rated Critical by NVDhttps://appsecscoop.com/c/vulnerabilities/authenticated-code-execution-flaws-in-totolink/AppSec Scoopen2026-10-21T00:47:36ZAuthenticated Code Execution Flaws in Totolink X2000R Router Firmwarehttps://appsecscoop.com/c/vulnerabilities/totolink-x2000r-users-face-authenticated-rce-risk/AppSec Scoopen2026-10-21T00:28:21ZTOTOLINK X2000R Users Face Authenticated RCE Risk via Stack Overflow in boa Form Controlhttps://appsecscoop.com/c/vulnerabilities/organisations-face-urgent-risk-as-four-plex-flaws/AppSec Scoopen2026-10-20T23:39:49ZOrganisations face urgent risk as four Plex flaws with SSRF land on CISA KEV listhttps://appsecscoop.com/c/vulnerabilities/authenticated-code-execution-flaw-in-totolink/AppSec Scoopen2026-10-20T22:08:13ZAuthenticated Code Execution Flaw in Totolink X2000R Router Firmwarehttps://appsecscoop.com/c/vulnerabilities/android-sdk-flaw-leaks-auth-headers-via-redirects/AppSec Scoopen2026-10-20T21:27:18ZAndroid SDK flaw leaks auth headers via redirects in A2A Java clienthttps://appsecscoop.com/c/vulnerabilities/apache-tomcat-apr-connector-remains-vulnerable-to/AppSec Scoopen2026-10-20T17:54:24ZApache Tomcat APR connector remains vulnerable to local socket accesshttps://appsecscoop.com/c/vulnerabilities/froxlor-users-risk-total-server-compromise/AppSec Scoopen2026-10-20T17:54:24ZFroxlor Users Risk Total Server Compromise: Critical Cron Flaw Grants Root Access Before 2.3.15https://appsecscoop.com/c/vulnerabilities/apache-tomcat-http-2-trailer-flaw-exposes-data/AppSec Scoopen2026-10-20T17:50:28ZApache Tomcat HTTP/2 trailer flaw exposes data leakage riskshttps://appsecscoop.com/c/vulnerabilities/netx-secure-tls-parser-flaw-allows-pre-auth/AppSec Scoopen2026-10-20T15:50:15ZNetX Secure TLS parser flaw allows pre-auth buffer over-readhttps://appsecscoop.com/c/vulnerabilities/fake-googlebot-ips-and-dns-flaws-expose-orgs-to/AppSec Scoopen2026-10-20T13:20:42ZFake Googlebot IPs and DNS flaws expose orgs to prompt injection and data thefthttps://appsecscoop.com/c/vulnerabilities/red-hat-strimzi-console-flaw-allows-cross-tenant/AppSec Scoopen2026-10-20T11:50:00ZRed Hat Strimzi Console flaw allows cross-tenant cluster accesshttps://appsecscoop.com/c/vulnerabilities/unrestricted-password-brute-force-hits-advantech/AppSec Scoopen2026-10-20T09:39:17ZUnrestricted Password Brute Force Hits Advantech ADAM-3600 Unitshttps://appsecscoop.com/c/vulnerabilities/critical-flaw-in-advantech-adam-3600-units-lets/AppSec Scoopen2026-10-20T09:18:09ZCritical Flaw in Advantech ADAM-3600 Units Lets Attackers Skip Authentication Checkshttps://appsecscoop.com/c/vulnerabilities/glpi-sql-injection-vulnerability-exposes/AppSec Scoopen2026-10-20T08:06:45ZGLPI SQL Injection Vulnerability Exposes Unauthenticated Attack Surfacehttps://appsecscoop.com/c/vulnerabilities/ys-infoware-ba-workflow-sql-injection-risks/AppSec Scoopen2026-10-20T07:41:20ZYS-infoware BA-Workflow SQL Injection Risks Database Integrityhttps://appsecscoop.com/c/vulnerabilities/f5-patches-three-critical-nginx-flaws-risking/AppSec Scoopen2026-10-20T04:06:06ZF5 patches three critical NGINX flaws risking code execution and denial of servicehttps://appsecscoop.com/c/vulnerabilities/langalpha-vulnerability-allows-remote-shell/AppSec Scoopen2026-10-20T03:01:20ZLangAlpha vulnerability allows remote shell execution via prompt injectionhttps://appsecscoop.com/c/vulnerabilities/orgs-urged-to-patch-pillow-cve-2026-112393-to/AppSec Scoopen2026-10-20T02:32:15ZOrgs urged to patch Pillow CVE-2026-112393 to stop TIFF code executionhttps://appsecscoop.com/c/vulnerabilities/unauthenticated-rce-in-langchain-chatchat-exposes/AppSec Scoopen2026-10-20T01:34:06ZUnauthenticated RCE in Langchain-Chatchat exposes shell tool to remote attackershttps://appsecscoop.com/c/vulnerabilities/letta-0-16-8-critical-vulnerability-allows/AppSec Scoopen2026-10-20T01:28:48ZLetta 0.16.8 Critical Vulnerability Allows Unauthenticated Remote Code Executionhttps://appsecscoop.com/c/vulnerabilities/ibm-tririga-flaw-lets-authenticated-users-run/AppSec Scoopen2026-10-20T00:23:26ZIBM TRIRIGA flaw lets authenticated users run arbitrary codehttps://appsecscoop.com/c/vulnerabilities/patch-failures-surge-as-ai-tools-accelerate/AppSec Scoopen2026-10-20T00:05:01ZPatch failures surge as AI tools accelerate vulnerability discoveryhttps://appsecscoop.com/c/vulnerabilities/unpatched-pillow-flaws-leak-heap-memory-in-image/AppSec Scoopen2026-10-19T22:37:59ZUnpatched Pillow flaws leak heap memory in image processing applicationshttps://appsecscoop.com/c/vulnerabilities/pillow-pdf-flaw-causes-denial-of-service-in/AppSec Scoopen2026-10-19T22:14:00ZPillow PDF flaw causes denial of service in Python applicationshttps://appsecscoop.com/c/vulnerabilities/pillow-memory-exhaustion-flaw-risks-service/AppSec Scoopen2026-10-19T22:03:39ZPillow memory exhaustion flaw risks service disruption for Python imaging workflowshttps://appsecscoop.com/c/vulnerabilities/mercury-framework-flaw-enables-unauthenticated/AppSec Scoopen2026-10-19T22:03:39ZMercury framework flaw enables unauthenticated remote code execution