https://blueteaminsider.com/section/vulnerabilities/pillow-13-0-0-fixes-vulnerabilities-python-teams/BlueTeam Insideren2026-10-21T19:44:06ZPillow 13.0.0 Fixes Vulnerabilities; Python Teams Urged to Update Imaging Library Versionshttps://blueteaminsider.com/section/cyber-attacks/bronze-sandcastle-abuses-sandboxie-and-other-apps/BlueTeam Insideren2026-10-21T17:45:30ZBRONZE SANDCASTLE abuses Sandboxie and other apps via DLL sideloadinghttps://blueteaminsider.com/section/vulnerabilities/code-injection-in-mindsdb-openbbtable-allows/BlueTeam Insideren2026-10-21T17:35:47ZCode Injection in MindsDB OpenBBtable Allows Remote Code Executionhttps://blueteaminsider.com/section/vulnerabilities/f5-patches-critical-nginx-heap-overflow-and-use/BlueTeam Insideren2026-10-21T09:58:30ZF5 Patches Critical NGINX Heap Overflow and Use-After-Free Flawshttps://blueteaminsider.com/section/vulnerabilities/pillow-jpeg-buffer-overflow-arbitrary-memory/BlueTeam Insideren2026-10-21T08:24:44ZPillow JPEG Buffer Overflow: Arbitrary Memory Writes in v12.3.0 and Earlier via Standard Lossless Fileshttps://blueteaminsider.com/section/cloud-security/connectwise-disables-services-after-stolen-entra/BlueTeam Insideren2026-10-21T08:05:11ZConnectWise Disables Services After Stolen Entra ID Credentials Bypass M365 Passwordshttps://blueteaminsider.com/section/cyber-attacks/iq-lvbs-alleges-unauthorized-access-attempts-from/BlueTeam Insideren2026-10-21T04:14:30ZIQ.Lvbs alleges unauthorized access attempts from Comma.ai IP addresshttps://blueteaminsider.com/section/vulnerabilities/freerdp-heap-buffer-overflow-in-rdpsnd-channel/BlueTeam Insideren2026-10-21T02:38:21ZFreeRDP Heap Buffer Overflow in RDPSND Channel Enables Remote Code Executionhttps://blueteaminsider.com/section/vulnerabilities/adm-zip-uncaught-exception-crashes-node-js-on/BlueTeam Insideren2026-10-21T01:14:54Zadm-zip Uncaught Exception Crashes Node.js on Malformed ZIPhttps://blueteaminsider.com/section/vulnerabilities/adm-zip-cve-2026-114104-inconsistent-entry/BlueTeam Insideren2026-10-21T01:08:28Zadm-zip CVE-2026-114104: Inconsistent Entry Resolution Bypasses Validationhttps://blueteaminsider.com/section/vulnerabilities/textream-websocket-server-lacks-origin-check/BlueTeam Insideren2026-10-20T22:44:09ZTextream WebSocket Server Lacks Origin Check, Exposes Local Datahttps://blueteaminsider.com/section/vulnerabilities/wordpress-cherry-plugin-path-traversal-allows/BlueTeam Insideren2026-10-20T21:11:14ZWordPress Cherry Plugin Path Traversal Allows Unauthenticated File Accesshttps://blueteaminsider.com/section/vulnerabilities/npm-launch-editor-and-vite-command-injection-on/BlueTeam Insideren2026-10-20T20:45:54Znpm launch-editor and Vite Command Injection on Windows via Path Suffix Bypasshttps://blueteaminsider.com/section/vulnerabilities/npm-mcp-server-cve-2026-111770-cross-client-data/BlueTeam Insideren2026-10-20T20:39:04Znpm MCP Server CVE-2026-111770 Cross-Client Data Leak in Shared HTTP Instanceshttps://blueteaminsider.com/section/vulnerabilities/apache-couchdb-cve-2026-86471-allows-admins-to/BlueTeam Insideren2026-10-20T18:14:45ZApache CouchDB CVE-2026-86471 Allows Admins to Execute Shell Commandshttps://blueteaminsider.com/section/cyber-attacks/windows-11-update-bug-blocks-smart-app-control/BlueTeam Insideren2026-10-20T15:09:50ZWindows 11 Update Bug Blocks Smart App Control Activation; Registry Fix Availablehttps://blueteaminsider.com/section/cyber-attacks/generative-ai-enables-custom-malware-creation-and/BlueTeam Insideren2026-10-20T14:24:57ZGenerative AI Enables Custom Malware Creation and Signature Bypasshttps://blueteaminsider.com/section/cloud-security/google-cloud-compute-and-sql-failures-in-london/BlueTeam Insideren2026-10-20T11:50:00ZGoogle Cloud Compute and SQL Failures in London Halt Revolut App and Card Payments for Millionshttps://blueteaminsider.com/section/cyber-attacks/aomei-update-hijacking-delivers-crossroad-via/BlueTeam Insideren2026-10-20T06:16:22ZAOMEI Update Hijacking Delivers CROSSROAD via Config Tamperinghttps://blueteaminsider.com/section/vulnerabilities/signal-ringrtc-queue-saturation-blocks-call/BlueTeam Insideren2026-10-20T05:26:26ZSignal RingRTC Queue Saturation Blocks Call Teardown in Pre-2.72.0 Buildshttps://blueteaminsider.com/section/vulnerabilities/pillow-heap-overflow-in-tiff-handling-exposes/BlueTeam Insideren2026-10-20T03:01:20ZPillow Heap Overflow in TIFF Handling Exposes Python Apps to Code Executionhttps://blueteaminsider.com/section/vulnerabilities/archibus-report-upload-flaw-enables-remote-code/BlueTeam Insideren2026-10-20T01:57:46ZArchibus Report Upload Flaw Enables Remote Code Execution via JSPhttps://blueteaminsider.com/section/vulnerabilities/db-gpt-0-8-2-hardcoded-mysql-root-password/BlueTeam Insideren2026-10-20T01:51:10ZDB-GPT 0.8.2 Hardcoded MySQL Root Password Exposes Database to Remote Attackershttps://blueteaminsider.com/section/vulnerabilities/h3c-magic-nx15-rpc-interface-code-injection-cve/BlueTeam Insideren2026-10-20T00:23:26ZH3C Magic NX15 RPC Interface Code Injection CVE-2026-112371