Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports

Filtered Reports

3 / 3 results
Active filter:tag: #web-applications✕ clear
Telerik UI for ASP.NET AJAX RCE exploit published, patch availablehighbug_reportVulnerability
bug_reportVulnerability

Telerik UI for ASP.NET AJAX RCE exploit published, patch available

Telerik UI for ASP.NET AJAX versions 2010.1.309 through 2026.2.519. Exploitation requires non-default configuration: RadAsyncUpload control with custom encryption key and server-side handler reading upload results.

Progress7 Sep · 09:20 UTC
Rails Active Storage flaw enables file read and RCE by unauthenticated userscriticalbug_reportVulnerability
bug_reportVulnerability

Rails Active Storage flaw enables file read and RCE by unauthenticated users

Ruby on Rails applications using the Active Storage framework. Specific vulnerable versions not provided in available data. Patched versions released by Rails team.

Ruby on Rails1 Aug · 12:20 UTC
Rails Active Storage flaw allows file read via crafted image uploadscriticalbug_reportVulnerability
bug_reportVulnerability

Rails Active Storage flaw allows file read via crafted image uploads

Ruby on Rails 7.0.0–7.2.3.1, 8.0.0–8.0.5, 8.1.0–8.1.3 using Active Storage with libvips for image processing and accepting untrusted uploads. Rails 6.0.0–6.1.7.10 affected only when Vips explicitly configured (non-default).

CVE-2026-6606629 Jul · 16:10 UTC