Learn Search
OpenVAS plugins for Microsoft Security Bulletins – July 2009 are now available in the SVN repository. The plugins can be also synced via openvas-nvt-sync method.
OpenVAS plugins for Microsoft Security Bulletins – July 2009 are now available in the SVN repository. The plugins can be also synced via openvas-nvt-sync method.
There were 6 bulletins in total, including the much in-news Video ActiveX control (MS09-032)
CVE Research
A single operator compromised 14,530+ Dahua cameras across Ukraine and Russia in 35 days, chaining credential brute-force, a CVE-2021-33044/33045 authentication bypass, and P2P relay abuse to plant a persistent backdoor and harvest transferable admin access.
CVE Research
CVE-2026-19478 is a critical code injection vulnerability in GitLab CE/EE that allows an unauthenticated attacker to modify or delete public projects and user data by abusing a GraphQL directive. A second high-severity issue, CVE-2026-19650, involves cross-site request forgery in the GraphQL multiplex query handler. This article examines how the critical vulnerability works, the availability of a public proof-of-concept, the potential impact on self-managed instances, the affected versions, and the security updates released to remediate both issues.
