OpenAI Rotates macOS Certificates Following Axios Supply Chain Breach
OpenAI rotates macOS certificates after downloading a compromised Axios version, urging users to update apps before revoked certificates are blocked in May 2026.
Aggregator
Stolen Rockstar Games analytics data leaked by extortion gang
2 weeks 1 day ago
Rockstar Games has suffered a data breach linked to a recent security incident at Anodot, with the ShinyHunters extortion gang now leaking the stolen data on its data leak site. [...]
Lawrence Abrams
CVE-2026-34621: Adobe Acrobat Reader Prototype Pollution Zero-Day Enables Code Execution via Malicious PDFs
2 weeks 1 day ago
CVE-2026-34621: Adobe Acrobat Reader Prototype Pollution Zero-Day Enables Code Execution via Malicious PDFs
Dark Web Informer
CVE-2026-33657 | EspoCRM up to 9.3.3 post cross site scripting
2 weeks 1 day ago
A vulnerability, which was classified as problematic, was found in EspoCRM up to 9.3.3. This impacts an unknown function. Such manipulation of the argument post leads to basic cross site scripting.
This vulnerability is uniquely identified as CVE-2026-33657. The attack can be launched remotely. No exploit exists.
You should upgrade the affected component.
vuldb.com
CVE-2026-33534 | EspoCRM up to 9.3.3 fromImageUrl isNotInternalHost server-side request forgery
2 weeks 1 day ago
A vulnerability, which was classified as critical, has been found in EspoCRM up to 9.3.3. This affects the function HostCheck::isNotInternalHost of the file /api/v1/Attachment/fromImageUrl. This manipulation causes server-side request forgery.
This vulnerability is handled as CVE-2026-33534. The attack can be initiated remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
vuldb.com
2026软件系统安全赛traffic_hunt
2 weeks 1 day ago
溯源流量题目：traffic_hunt
Lynx
2 weeks 1 day ago
You must login to view this content
cohenido
Critical flaw in wolfSSL library enables forged certificate use
2 weeks 1 day ago
A critical vulnerability in the wolfSSL SSL/TLS library can weaken security via improper verification of the hash algorithm or its size when checking Elliptic Curve Digital Signature Algorithm (ECDSA) signatures. [...]
Bill Toulas
High-Value Brazilian E-commerce Source Code and Database Advertised
2 weeks 1 day ago
You must login to view this content
cohenido
Lamashtu
2 weeks 1 day ago
You must login to view this content
cohenido
Lamashtu
2 weeks 1 day ago
You must login to view this content
cohenido
Lamashtu
2 weeks 1 day ago
You must login to view this content
cohenido
Lamashtu
2 weeks 1 day ago
You must login to view this content
cohenido
Lamashtu
2 weeks 1 day ago
You must login to view this content
cohenido
Lamashtu
2 weeks 1 day ago
You must login to view this content
cohenido
Lamashtu
2 weeks 1 day ago
You must login to view this content
cohenido
Lamashtu New threat Actor
2 weeks 1 day ago
You must login to view this content
cohenido
Lamashtu
2 weeks 1 day ago
You must login to view this content
cohenido
Робот-баскетболист, который никогда не устает и не просит рекламных контрактов. Toyota показала CUE7 в деле
2 weeks 1 day ago
Новая машина метко бросает с дальней дистанции и заодно показывает, как Toyota развивает машинное зрение, управление и физический ИИ.
CVE-2026-40042 | Pachno 1.0.6 XML Parser simplexml_load_string file descriptor (ZSL-2026-5984)
2 weeks 1 day ago
A vulnerability classified as critical was found in Pachno 1.0.6. The impacted element is the function simplexml_load_string of the component XML Parser. The manipulation results in exposure of file descriptor to unintended control sphere ('file descriptor leak').
This vulnerability is known as CVE-2026-40042. It is possible to launch the attack remotely. No exploit is available.
vuldb.com