Aggregator

A vulnerability was found in xdan Jodit up to 4.13.5. It has been declared as problematic. Affected by this vulnerability is the function denyTags filter of the component Clean-HTML DenyTags Filter. Executing a manipulation can lead to HTML injection. This vulnerability is tracked as CVE-2026-65841. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability categorized as critical has been discovered in copier-org copier up to 9.16.0. This affects an unknown part. The manipulation results in path traversal. This vulnerability is cataloged as CVE-2026-62999. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability labeled as problematic has been found in Coturn up to 4.14.0. This issue affects some unknown processing of the component ACME Redirect. Such manipulation leads to heap-based buffer overflow. This vulnerability is documented as CVE-2026-62959. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in Hugging Face sentence-transformers up to 5.5.1 and classified as problematic. Affected by this issue is the function import_module_class of the file sentence_transformers/util/misc.py of the component Import Module Class Helper. Executing a manipulation of the argument model_name_or_path can lead to code injection. The identification of this vulnerability is CVE-2026-68770. The attack can only be executed locally. There is no exploit available.

A vulnerability was found in Coturn up to 4.14.x. It has been declared as critical. This vulnerability affects the function handle_turn_refresh of the component Mobility Ticket Validation. The manipulation results in improper authentication. This vulnerability is identified as CVE-2026-65981. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.

ИИ-ускорители заставляют полупроводниковую отрасль менять стандарт фотошаблонов.

A phishing campaign routes victims through genuine Microsoft OAuth and Teams infrastructure before showing them a fake login page built entirely inside their own browser, according to researchers at Barracuda. “Instead of delivering a phishing page from a web server, the malicious content is assembled inside the victim’s browser using a blob URL — a temporary browser-generated URL that points to content stored locally in memory rather than on a website,” researchers explained. The attack … More →

The post Cybercriminals are building phishing pages that exist only inside victims’ browsers appeared first on Help Net Security.

A CVSS score 8.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'ELDEN' was reported to the affected vendor on: 2026-09-10, 1 days ago. The vendor is given until 2027-01-08 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Mike Hoefler' was reported to the affected vendor on: 2026-09-10, 1 days ago. The vendor is given until 2027-01-08 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L severity vulnerability discovered by 'Elias Myllymäki' was reported to the affected vendor on: 2026-09-10, 1 days ago. The vendor is given until 2027-01-08 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 8.5 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L severity vulnerability discovered by 'Xander Mackenzie | thetrueartist | @thetrueartist.co.uk' was reported to the affected vendor on: 2026-09-10, 1 days ago. The vendor is given until 2027-01-08 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.6 AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'HeeChan Kim (@heegong123) of TeamH4C' was reported to the affected vendor on: 2026-09-10, 1 days ago. The vendor is given until 2027-01-08 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Mirae' was reported to the affected vendor on: 2026-09-10, 1 days ago. The vendor is given until 2027-01-08 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Meshaal (@unrealmesh)' was reported to the affected vendor on: 2026-09-10, 1 days ago. The vendor is given until 2027-01-08 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Musaab Khan (@bxff)' was reported to the affected vendor on: 2026-09-10, 1 days ago. The vendor is given until 2027-01-08 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Charbel (dwbruijn)' was reported to the affected vendor on: 2026-09-10, 1 days ago. The vendor is given until 2027-01-08 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'NURIHAN KIM (HanTul)' was reported to the affected vendor on: 2026-09-10, 1 days ago. The vendor is given until 2027-01-08 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Musaab Khan (@bxff)' was reported to the affected vendor on: 2026-09-10, 1 days ago. The vendor is given until 2027-01-08 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Musaab Khan (@bxff)' was reported to the affected vendor on: 2026-09-10, 1 days ago. The vendor is given until 2027-01-08 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.7 AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2026-09-10, 1 days ago. The vendor is given until 2027-01-08 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.