https://netsectribune.com/category/cyber-attacks/nigerian-man-gets-8-years-for-hacking-tax-firms/NetSec Tribuneen2026-10-21T07:19:27ZNigerian Man Gets 8 Years for Hacking Tax Firms, Fraud; $10.8M Forfeiture Orderedhttps://netsectribune.com/category/vulnerabilities/nvd-rates-totolink-x2000r-authenticated-command/NetSec Tribuneen2026-10-21T02:56:11ZNVD Rates TOTOLINK X2000R Authenticated Command Injection Flaw Critical With 9.1 CVSS Scorehttps://netsectribune.com/category/vulnerabilities/cve-2026-9814-allows-authenticated-code-execution/NetSec Tribuneen2026-10-21T02:27:26ZCVE-2026-9814 Allows Authenticated Code Execution on Totolink X2000R Routerhttps://netsectribune.com/category/vulnerabilities/trigger-dev-flaw-lets-restricted-keys-expose-root/NetSec Tribuneen2026-10-21T02:19:14ZTrigger.dev Flaw Lets Restricted Keys Expose Root Secrets and Admin Tokenshttps://netsectribune.com/category/vulnerabilities/cve-2026-40615-authenticated-stack-overflow-in/NetSec Tribuneen2026-10-21T00:28:21ZCVE-2026-40615: Authenticated Stack Overflow in Totolink X2000R Firmware Rated CVSS 9.1https://netsectribune.com/category/vulnerabilities/mozilla-and-chrome-strip-trust-for-emudhra-roots/NetSec Tribuneen2026-10-20T23:39:49ZMozilla and Chrome Strip Trust for eMudhra Roots After Intermediate Compromisehttps://netsectribune.com/category/vulnerabilities/perl-dbi-type-confusion-crash-in-versions-before/NetSec Tribuneen2026-10-20T22:30:57ZPerl DBI Type Confusion Crash in Versions Before 1.656 Exposed in Oct 20 Advisoryhttps://netsectribune.com/category/vulnerabilities/shadowserver-sees-unauthenticated-sql-injection/NetSec Tribuneen2026-10-20T21:20:08ZShadowserver Sees Unauthenticated SQL Injection Attacks Against FooSun DotNetCMShttps://netsectribune.com/category/vulnerabilities/apache-tomcat-11-0-27-fixes-critical-cross/NetSec Tribuneen2026-10-20T18:38:04ZApache Tomcat 11.0.27 Fixes Critical Cross-Request Data Leak in Versions 11.0.0-M25 Through 11.0.26https://netsectribune.com/category/vulnerabilities/angular-router-ssr-flaw-crashes-node-js-workers/NetSec Tribuneen2026-10-20T18:33:15ZAngular Router SSR Flaw Crashes Node.js Workers via Query Parameter Amplificationhttps://netsectribune.com/category/cyber-attacks/qilin-and-inc-exploit-pan-os-bypass-to-bypass-mfa/NetSec Tribuneen2026-10-20T18:16:05ZQilin and Inc exploit PAN-OS bypass to bypass MFA and deploy ransomwarehttps://netsectribune.com/category/vulnerabilities/apache-urges-immediate-upgrade-to-couchdb-3-5-3/NetSec Tribuneen2026-10-20T17:55:21ZApache Urges Immediate Upgrade to CouchDB 3.5.3 to Block Critical Shell Command Executionhttps://netsectribune.com/category/vulnerabilities/cve-2026-92853-zero-length-cert-trigger-in-netx/NetSec Tribuneen2026-10-20T16:29:40ZCVE-2026-92853: Zero-Length Cert Trigger in NetX Duo Causes Pre-Auth Integer Wraphttps://netsectribune.com/category/vulnerabilities/advantech-adam-3600-vulnerability-allows-remote/NetSec Tribuneen2026-10-20T10:23:30ZAdvantech ADAM-3600 Vulnerability Allows Remote Code Execution Before Version 2.8.5.0https://netsectribune.com/category/vulnerabilities/db-gpt-mock-function-bug-enables-unauthenticated/NetSec Tribuneen2026-10-20T01:51:10ZDB-GPT Mock Function Bug Enables Unauthenticated Root Code Execution in Containershttps://netsectribune.com/category/vulnerabilities/grav-cms-image-processing-flaw-allows-remote/NetSec Tribuneen2026-10-19T20:19:11ZGrav CMS Image Processing Flaw Allows Remote Memory Exhaustion Attackshttps://netsectribune.com/category/vulnerabilities/cve-2026-112366-picomatch-redos-vulnerability/NetSec Tribuneen2026-10-19T16:08:57ZCVE-2026-112366: Picomatch ReDoS Vulnerability Freezes Node.js Apps via Glob Patternshttps://netsectribune.com/category/vulnerabilities/apache-camel-users-urged-to-patch-cve-2026-88900/NetSec Tribuneen2026-10-19T11:46:08ZApache Camel Users Urged to Patch CVE-2026-88900 to Block Unauthenticated Cluster RCE