Announcements

Kludex Starlette: Kludex Starlette HTTP Request/Response Smuggling Vulnerability

4th September 2026

Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability could be chaned with CVE-2026-42271.Source: CISA ...

Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

4th September 2026

Published date: 20 July 2026, 9:43 am

Source: MyCERT (CyberSecurity Malaysia) — https://www.mycert.org.my/portal/details?menu=431fab9c-d24c-4a27-ba93-e92edafdefa5&id=1921af09-3caa-47df-bb9d-1afd4bcd86cf

Continue reading

MA-1472.072026: MyCERT Advisory - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

4th September 2026

Published date: 22 July 2026, 1:26 pm

Source: MyCERT (CyberSecurity Malaysia) — https://www.mycert.org.my/portal/details?menu=431fab9c-d24c-4a27-ba93-e92edafdefa5&id=26c7a882-e759-4120-b27d-cda75da7a9d2

Continue reading

MA-1474.072026: MyCERT Advisory - Critical Vulnerability in Zoom Products

4th September 2026

Published date: 22 July 2026, 1:26 pm

Source: MyCERT (CyberSecurity Malaysia) — https://www.mycert.org.my/portal/details?menu=431fab9c-d24c-4a27-ba93-e92edafdefa5&id=2c386f9b-c42d-4a58-a138-9f26a5ded9f6

Continue reading