Aggregator

A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/pos_transac.php?action=add. This manipulation of the argument Customer causes sql injection. This vulnerability is handled as CVE-2026-86235. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability described as critical has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/cust_transac.php?action=add. The manipulation of the argument firstname results in sql injection. This vulnerability is known as CVE-2026-86234. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability marked as critical has been reported in itsourcecode Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /pages/us_del.php?type=user. The manipulation of the argument ID leads to sql injection. This vulnerability is traded as CVE-2026-86233. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability labeled as critical has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup_del.php?type=supplier. Executing a manipulation of the argument ID can lead to sql injection. This vulnerability appears as CVE-2026-86232. The attack may be performed from remote. In addition, an exploit is available.

Submit #898738 / VDB-399393

Submit #898638 / VDB-399392

Submit #898594 / VDB-399391

Submit #898593 / VDB-399390

Submit #898592 / VDB-399389

A vulnerability identified as problematic has been detected in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file src/main/java/com/jcraft/jsch/KnownHosts.java. Performing a manipulation of the argument known_hosts results in improper check for certificate revocation. This vulnerability is reported as CVE-2026-86231. The attack is possible to be carried out remotely. Moreover, an exploit is present. You should upgrade the affected component.

Submit #898485 / VDB-399388

OpenAI обо всём знала, но предпочла это скрыть.

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Anthropic locks out Claude users after infostealers hijack login sessions Anthropic has started locking users out of their Claude accounts due to their login sessions having been compromised through infostealer malware. September 2026 Patch Tuesday forecast: All we need is more time The Patch Apocalypse is continuing unabated. We are seeing record numbers of patches being released and reported CVEs … More →

The post Week in review: Claude accounts compromised through infostealer, Patch Tuesday forecast appeared first on Help Net Security.

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. PaperCut Flaws Exploited in Attacks on U.S. and European Schools Broadcom Patches Critical VMware Workstation and Fusion […]

Компания перепутала статус уязвимости и спровоцировала панику в ИБ-отделе.

什么是好产品这个问题的答案，正在迅速改变？

A vulnerability categorized as problematic has been discovered in Kirki Plugin up to 6.2.x on WordPress. This impacts an unknown function. Such manipulation leads to cross site scripting. This vulnerability is documented as CVE-2026-84219. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Bold Page Builder Plugin up to 5.9.8 on WordPress. It has been rated as problematic. This affects an unknown function of the component Shortcode Handler. This manipulation causes cross site scripting. This vulnerability is registered as CVE-2026-84028. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

Любой сегодняшний архив рискует стать достоянием общественности уже совсем скоро.

幽默风趣版本