https://security-recipes.ai/recipes/cve/Recent content in CVE Recipes on security-recipes.aien-ushttps://security-recipes.ai/recipes/cve/cve-2023-34362-moveit-transfer-sql-injection/https://security-recipes.ai/recipes/cve/cve-2023-34362-moveit-transfer-sql-injection/Sun, 12 Jul 2026 00:00:00 GMTKnown-exploited SQL injection in MOVEit Transfer's web application. Contain HTTP/S exposure, preserve evidence, assess compromise, and upgrade every node with a current Progress-supported release.https://security-recipes.ai/recipes/cve/cve-2024-3400-pan-os-globalprotect-command-injection/https://security-recipes.ai/recipes/cve/cve-2024-3400-pan-os-globalprotect-command-injection/Sun, 12 Jul 2026 00:00:00 GMTCritical unauthenticated PAN-OS GlobalProtect command injection. Upgrade every exposed firewall to a vendor-fixed release, apply the documented Threat Prevention containment while rollout is pending, and preserve evidence before reboot when compromise is suspected.https://security-recipes.ai/recipes/cve/cve-2025-60455-modular-max-serve/https://security-recipes.ai/recipes/cve/cve-2025-60455-modular-max-serve/Sun, 26 Apr 2026 00:00:00 GMTCritical unsafe deserialization in modular (<25.6.0) when experimental kvcache agent is enabled.https://security-recipes.ai/recipes/cve/cve-2026-33116-dotnet-crypto-xml-dos/https://security-recipes.ai/recipes/cve/cve-2026-33116-dotnet-crypto-xml-dos/Sun, 26 Apr 2026 00:00:00 GMTHigh-severity DoS in System.Security.Cryptography.Xml with patched releases in .NET 8/9/10 trains.https://security-recipes.ai/recipes/cve/cve-2021-44228-log4shell/https://security-recipes.ai/recipes/cve/cve-2021-44228-log4shell/Sat, 25 Apr 2026 00:00:00 GMTJNDI-lookup RCE in Log4j 2.x. Upgrade to 2.17.1+, set `formatMsgNoLookups=true`, remove `JndiLookup.class` from vendored JARs.https://security-recipes.ai/recipes/cve/cve-2024-3094-xz-utils/https://security-recipes.ai/recipes/cve/cve-2024-3094-xz-utils/Sat, 25 Apr 2026 00:00:00 GMTMaintainer-implanted backdoor in liblzma reachable through sshd. Roll back to 5.4.x; treat any network-exposed affected host as compromised.https://security-recipes.ai/recipes/cve/cve-2014-0160-heartbleed/https://security-recipes.ai/recipes/cve/cve-2014-0160-heartbleed/Sat, 25 Apr 2026 00:00:00 GMTOpenSSL heartbeat-extension memory disclosure. Patching is necessary but not sufficient — rotate every key and revoke every cert from the exposure window.https://security-recipes.ai/recipes/cve/cve-2014-6271-shellshock/https://security-recipes.ai/recipes/cve/cve-2014-6271-shellshock/Sat, 25 Apr 2026 00:00:00 GMTBash function-export parser RCE — and the five sibling CVEs that came with it. Upgrade Bash through every patch level; audit CGI / DHCP / SSH-hook surfaces.https://security-recipes.ai/recipes/cve/cve-2017-18342-pyyaml/https://security-recipes.ai/recipes/cve/cve-2017-18342-pyyaml/Sat, 25 Apr 2026 00:00:00 GMT`yaml.load` resolved arbitrary Python tags by default. Replace with `safe_load` and pin PyYAML ≥ 6.0 where the unsafe default was finally removed.https://security-recipes.ai/recipes/cve/cve-2024-6387-regresshion/https://security-recipes.ai/recipes/cve/cve-2024-6387-regresshion/Sat, 25 Apr 2026 00:00:00 GMTOpenSSH signal-handler race RCE on glibc Linux. Upgrade to 9.8p1+; mitigate immediately via `LoginGraceTime 0` if the upgrade has to wait.