Aggregator

A vulnerability, which was classified as critical, was found in GDAL up to 3.13.0. Affected by this issue is some unknown functionality of the file frmts/netcdf/netcdfsg.cpp of the component netCDF Driver. The manipulation of the argument geometry results in stack-based buffer overflow. This vulnerability is known as CVE-2026-49014. Attacking locally is a requirement. No exploit is available.

A vulnerability described as problematic has been identified in analogwp Style Kits for Elementor Plugin up to 2.5.0 on WordPress. Affected by this vulnerability is an unknown functionality of the file /wp-json/agwp/v1/tokens/save. Executing a manipulation of the argument Title can lead to cross site scripting. This vulnerability is registered as CVE-2026-6565. It is possible to launch the attack remotely. No exploit is available.

A vulnerability marked as problematic has been reported in OpenStack Swift up to 2.36.1/2.37.1. Affected is the function StreamingInput. Performing a manipulation results in infinite loop. This vulnerability is cataloged as CVE-2026-49017. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

The cybersecurity researchers at ADAMnetworks recently unveiled a novel evasion technique. This method allows malicious data packets to conceal themselves behind trusted domains and Content Delivery Networks (CDNs). Consequently, this development threatens organizations relying...

The post The Underminr Paradigm: Subverting DNS Filters via CDN Networks appeared first on Information Security News.

Researchers have unearthed a critical security vulnerability within the ubiquitous 7-Zip data compression utility. Opening a meticulously engineered disk image triggers arbitrary remote code execution rather than a standard decompression failure. Crucially, this memory...

The post Critical Security Defect Exploits NTFS Processing Architecture Within 7-Zip appeared first on Information Security News.

Perimeter Compromise and Systemic Risk LiteSpeed recently resolved a critical privilege escalation vulnerability within its user-facing cPanel plugin. This severe security defect is tracked globally as CVE-2026-48172. Threat actors are already exploiting this flaw...

The post Remediation of the Critical Privilege Escalation Flaw in LiteSpeed’s cPanel Extension appeared first on Information Security News.

The FreeBSD security apparatus has successfully resolved a high-severity vulnerability, cataloged as CVE-2026-45250, within the setcred(2) system call architecture. This fundamental defect resided within the core kernel logic, empowering an unauthenticated local adversary to...

The post Architectural Rectification of the FatGid Flaw: Securing the FreeBSD Kernel Against Privilege Escalation appeared first on Information Security News.

NASA буквально использовала Марс как рогатку.

Microsoft has issued a cautionary directive to proprietors of Windows 11 ecosystems: failure to transition computational hardware to the modernized Secure Boot cryptographic certificates prior to June 2026 will not precipitate catastrophic boot failures;...

The post Windows 11 Secure Boot: 2026 Expiration Warning appeared first on Information Security News.

The Verus project has successfully reclaimed most of its capital following the recent cryptographic bridge exploit. The community reported that the attacker returned 4,052.4 ETH. Consequently, the team now controls approximately 75% of the...

The post Verus Recovers the Majority of Exploited Bridge Assets appeared first on Information Security News.

The anonymous researcher known as Nightmare-Eclipse has been blocked from two major code-hosting platforms in less than a week, as their disruptive public zero-day campaign against Microsoft draws serious real-world consequences. GitLab moved to suspend the account of security researcher Nightmare-Eclipse on May 26, 2026, just days after GitHub, owned by Microsoft, terminated the researcher’s […]

The post GitLab Suspends Windows Exploit Researcher Nightmare-Eclipse After GitHub Ban appeared first on Cyber Security News.

2026年5月27日 12:21软件资讯01.23K

Cyble analyzes OverlayPhantom, an Android banking trojan targeting 180+ apps across 10 countri

Компании планируют увольнять HR-специалистов, чтобы сберечь корпоративный бюджет.

​真正的医疗 AI 需要架构重塑。

A series of newly documented vulnerabilities in ISC BIND 9 has raised significant security concerns for DNS infrastructure operators, with multiple flaws enabling denial-of-service (DoS) attacks, memory corruption, and potential remote exploitation. The latest entries in the BIND 9 Software Vulnerability Matrix highlight critical risks affecting both recursive resolvers and authoritative name servers, underscoring the […]

The post BIND 9 Software Vulnerabilities Exposes Resolvers and Authoritative Servers to Remote Exploits appeared first on Cyber Security News.

India’s national computer emergency response agency CERT-In has warned enterprises to patch high-risk vulnerabilities on internet-facing and critical systems within 12 hours of discovery or active exploitation. The directive comes as AI-assisted attacks continue to reduce exploitation timelines, increasing pressure on organizations to respond faster. According to CERT-In’s new “Blueprint for Reducing Exposure and Defending […]

The post India’s CERT-In Asks Organizations to Patch Vulnerabilities in Systems Within 12 hours appeared first on Cyber Security News.