Posts of last 24 hours

CVE-2026-49219 | ImageMagick up to 6.9.13-47/7.1.2-23 File Parser path traversal (GHSA-xcjm-wqff-m669 / EUVD-2026-36185)
A vulnerability classified as critical was found in ImageMagick up to 6.9.13-47/7.1.2-23. The impacted element is an unknown function of the component File Parser. Executing a manipulation can lead to path traversal. This vulnerability is registered as CVE-2026-49219. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.
https://vuldb.com/vuln/370301
CVE-2026-55481 | grokability Snipe-IT up to 8.6.1 CSS Style Block Renderer default.blade.php cross-domain policy (WID-SEC-2026-2144)
A vulnerability, which was classified as problematic, has been found in grokability Snipe-IT up to 8.6.1. Affected by this issue is some unknown functionality of the file default.blade.php of the component CSS Style Block Renderer. The manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerability is traded as CVE-2026-55481. It is possible to initiate the attack remotely. There is no exploit available.
https://vuldb.com/vuln/377610
CVE-2026-52747 | owasp-modsecurity ModSecurity up to 3.0.15 Request Body Parser multipart.cc cross site scripting (Nessus ID 326376 / WID-SEC-2026-2138)
A vulnerability identified as problematic has been detected in owasp-modsecurity ModSecurity up to 3.0.15. Impacted is an unknown function of the file src/request_body_processor/multipart.cc of the component Request Body Parser. This manipulation causes cross site scripting. This vulnerability is handled as CVE-2026-52747. The attack can be initiated remotely. There is not any exploit available.
https://vuldb.com/vuln/377702
CVE-2026-52761 | owasp-modsecurity ModSecurity up to 3.0.15 Transformation utf8_to_unicode.cc snprintf buffer overflow (Nessus ID 326377 / WID-SEC-2026-2138)
A vulnerability classified as critical was found in owasp-modsecurity ModSecurity up to 3.0.15. Affected is the function snprintf of the file src/actions/transformations/utf8_to_unicode.cc of the component Transformation. The manipulation results in buffer overflow. This vulnerability is identified as CVE-2026-52761. The attack can be executed remotely. There is not any exploit available.
https://vuldb.com/vuln/377707
CVE-2026-41991 | GNU gzip up to 1.14 Gzexe Utility temp file (EUVD-2026-40068 / Nessus ID 325426)
A vulnerability described as problematic has been identified in GNU gzip up to 1.14. Impacted is an unknown function of the component Gzexe Utility. The manipulation results in insecure temporary file. This vulnerability is known as CVE-2026-41991. Attacking locally is a requirement. No exploit is available. A patch should be applied to remediate this issue.
https://vuldb.com/vuln/374611
CVE-2026-39822 | Go standard library os up to 1.25.11/1.26.4 Root Open symlink (Nessus ID 325627 / WID-SEC-2026-2239)
A vulnerability marked as problematic has been reported in Go standard library os up to 1.25.11/1.26.4. This issue affects the function Open of the component Root. The manipulation leads to symlink following. This vulnerability is traded as CVE-2026-39822. An attack has to be approached locally. There is no exploit available.
https://vuldb.com/vuln/376920
CVE-2026-42505 | Go standard library crypto-tls up to 1.25.11/1.26.4 TLS Handshake insertion of sensitive information into sent data (Nessus ID 325629 / WID-SEC-2026-2239)
A vulnerability, which was classified as problematic, was found in Go standard library crypto-tls up to 1.25.11/1.26.4. This impacts an unknown function of the component TLS Handshake. Executing a manipulation can lead to insertion of sensitive information into sent data. The identification of this vulnerability is CVE-2026-42505. The attack may be launched remotely. There is no exploit available.
https://vuldb.com/vuln/376925
Spear-Phishing Campaign Uses Proton Drive Links and LNK Files to Deliver SpyGlace

The APT-C-60 threat actor has continued targeting Japanese organizations with a spear-phishing campaign that abuses Proton Drive, Windows shortcut files, trusted developer platforms, and native Windows utilities to deliver the SpyGlace malware. While the group retains several established tradecraft elements, including the abuse of legitimate services and the use of git.exe to execute malicious scripts, […]

The post Spear-Phishing Campaign Uses Proton Drive Links and LNK Files to Deliver SpyGlace appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

https://gbhackers.com/spear-phishing-uses-proton-drive/
Critical WordPress OAuth SSO Plugin Flaw Allows Unauthenticated Attackers to Gain Admin Access

A critical authentication bypass vulnerability has been disclosed in the widely used miniOrange OAuth Single Sign-On (SSO) WordPress plugin, carrying a near-maximum CVSS score of 9.8. This flaw, tracked as CVE-2026-57807, affects all plugin versions up to and including version 38.5.8. As of now, it remains unpatched, with no official fix available from the vendor. […]

The post Critical WordPress OAuth SSO Plugin Flaw Allows Unauthenticated Attackers to Gain Admin Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

https://gbhackers.com/critical-wordpress-oauth-sso-plugin-flaw/
CVE-2026-1359 | Genolve Plugin up to 5.0.5 on WordPress Capability Check genolve_setOpt improper authorization (EUVD-2026-43166)
A vulnerability marked as critical has been reported in Genolve Plugin up to 5.0.5 on WordPress. Affected by this vulnerability is the function genolve_setOpt of the component Capability Check. This manipulation causes improper authorization. This vulnerability appears as CVE-2026-1359. The attack may be initiated remotely. There is no available exploit.
https://vuldb.com/vuln/377774

Managed ad