The BlueTeam Insider Patch Watch Desk is the part of the BlueTeam Insider newsroom that covers software flaws, vendor advisories and patches. It is a newsroom desk, not a single person. Sections: Vulnerabilities. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 67 articles so far. See the editorial policy or report an error.
A high-severity flaw in MindsDB lets authenticated attackers run arbitrary Python code via the OpenBBtable class, requiring immediate review of access controls.
Read more
F5 released out-of-band fixes for three critical NGINX vulnerabilities that allow remote code execution or denial-of-service attacks on systems with non-default configurations.
Read more
A critical buffer overflow in Pillow's JPEG decoder affects versions up to 12.3.0, allowing arbitrary memory writes via standard lossless image files.
Read more
A heap-based buffer overflow in FreeRDP’s audio channel allows malicious RDP clients to execute code on servers running versions prior to 3.32.1.
Read more
A missing error handler in adm-zip before 0.6.1 allows unauthenticated attackers to crash Node.js processes via corrupted DEFLATE data, rated High severity.
Read more
A high-severity flaw in adm-zip allows attackers to write unvalidated data to disk by exploiting duplicate entries in ZIP archives.
Read more
A missing origin validation in the local WebSocket server of the Textream macOS app allows cross-site hijacking until version 1.5.1 is installed.
Read more
A high-severity flaw in the Cherry Plugin lets attackers download sensitive files like database credentials without logging in.
Read more
Attackers can bypass file existence checks in npm packages to inject OS commands on Windows systems using crafted path suffixes.
Read more
A high-severity vulnerability in the npm Model Context Protocol server allows cross-client data leakage when multiple clients share a single server instance over HTTP.
Read more
A critical flaw in Apache CouchDB lets administrators run arbitrary shell commands as the system user, requiring an immediate upgrade to version 3.5.3.
Read more
A critical flaw in Signal’s RingRTC library allows remote peers to jam call teardown processes, risking persistent audio or video streams in affected versions.
Read more
A critical heap buffer overflow in the Pillow library allows attackers to execute code when saving compressed TIFF images to in-memory buffers.
Read more
Unauthenticated attackers can chain an auth bypass with a report upload bug in Eptura Archibus to execute arbitrary commands on servers before version 2025.02.
Read more
A critical flaw in DB-GPT’s default Docker setup allows unauthenticated remote access to the root database account, granting full administrative privileges to anyone reaching the exposed port.
Read more
Remote code injection in H3C Magic NX15 RPC interface exposes networks to public exploit targeting specific firmware versions.
Read more
A guest-triggerable bug in Linux KVM allows bypassing write tracking via stale SMM MMIO cache entries, potentially letting a virtual machine modify backing pages without detection.
Read more
Attackers can inject malicious RUN commands into Docker builds via crafted YAML files, risking secret exposure and image tampering in BentoML environments.
Read more
Unauthenticated access to CheckCle endpoints allows attackers to steal tokens, disable alerts, and delete records due to empty API rules in default configurations.
Read more
A vulnerability in Broadcom’s 802.11 implementation allows attackers to execute code on routers without credentials, posing a persistent risk to unpatched devices.
Read more
Anthropic’s new AI scanner identifies thousands of flaws, creating a massive triage backlog for security teams managing open-source dependencies.
Read more
Attackers execute OS commands on WeRSS instances through a template parameter flaw that bypasses security filters on public endpoints.
Read more
A medium-severity vulnerability in GPAC allows attackers to crash MP4Box by supplying files with invalid fractional denominators, requiring local access.
Read more
An unauthenticated flaw in the open-source tool allows attackers to decrypt cloud drive tokens using a static AES key embedded in the code.
Read more