Aggregator

Submit #856811 / VDB-378125

Linux creator and top-level kernel maintainer Linus Torvalds has made it clear that the Linux kernel project will not adopt an anti-AI stance. He believes that large language models and related tools should be assessed based on their technical value rather than dismissed outright. His comments were part of a discussion on the Linux Media […]

The post Linux Creator Linus Torvalds Rejects Anti-AI Push and Defends LLM Tools appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability was found in code-projects Hospital Bed Management System 1.0. It has been classified as critical. This affects an unknown part of the component Login Form. Performing a manipulation of the argument Username results in sql injection. This vulnerability is known as CVE-2026-16014. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability was found in liftoff-sr CIPster up to 632336d414ef708a542377c1aa8d6fdb7c70a760 and classified as problematic. Affected by this issue is the function CipAppPath::deserialize_symbolic of the file source/src/cip/cipepath.cc. Such manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2026-16013. The attack may be launched remotely. Furthermore, there is an exploit available. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. A patch should be applied to remediate this issue.

Изматывающая атака способна терроризировать компьютер больше месяца без единой паузы.

Submit #856808 / VDB-379756

Submit #856794 / VDB-379755

The call comes in at 4:40 on a Friday. The voice belongs to a senior manager, or sounds close enough, and she needs a password reset before a flight. She is polite, she is in a hurry, and she has the last four of the badge number. Researchers at Harvard Kennedy School, Meta and elsewhere ran a version of that moment past 4,100 US adults, using six commercial voice systems and human callers as a … More →

The post The script, not the voice, is what makes AI voice phishing work appeared first on Help Net Security.

A surge in ACR Stealer activity from late April through mid-June 2026, with operators combining ClickFix social engineering, WebDAV-hosted payloads, PowerShell obfuscation, and steganography to compromise enterprise users. The malware operations rely on ClickFix social-engineering lures to trick victims into pasting attacker-supplied commands into Windows Run dialogs or command prompts, ultimately stealing browser credentials, session […]

The post ACR Stealer Uses ClickFix, WebDAV, and Steganography to Steal Browser Credentials and Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability has been found in TeraTerm Project TTSSH2 up to 3.6.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Length Handler. This manipulation causes improper handling of length parameter inconsistency. This vulnerability appears as CVE-2026-60060. The attack may be initiated remotely. There is no available exploit.

A vulnerability, which was classified as critical, was found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /prescriptionorderdetail.php. The manipulation of the argument delid results in sql injection. This vulnerability is reported as CVE-2026-16009. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability, which was classified as problematic, has been found in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipulation leads to improperly controlled modification of object prototype attributes. This vulnerability is documented as CVE-2026-16008. The attack can be initiated remotely. Additionally, an exploit exists. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in TXOne SafePortAgent and StellarProtect. This affects an unknown function of the component Removable Media Validation. Executing a manipulation can lead to improper access controls. This vulnerability is registered as CVE-2026-41993. The attack needs to be launched locally. No exploit is available.

A vulnerability classified as critical has been found in TeraTerm Project Tera Term up to 3.6.1. The impacted element is an unknown function of the component SSH Connection Handler. Performing a manipulation results in unsigned to signed conversion error. This vulnerability is cataloged as CVE-2026-58317. It is possible to initiate the attack remotely. There is no exploit available.

Submit #856775 / VDB-379753

A vulnerability described as problematic has been identified in SaturdayDrive Ninja Forms Plugin up to 3.3.6 on WordPress. The affected element is the function save_filter of the component AJAX handler. Such manipulation of the argument filter leads to cross site scripting. This vulnerability is listed as CVE-2026-15161. The attack may be performed from remote. There is no available exploit.

Submit #856721 / VDB-379752

A vulnerability marked as problematic has been reported in themeatelier ChatHelp Plugin up to 3.5.1 on WordPress. Impacted is an unknown function of the component Shortcode Handler. This manipulation of the argument number/group causes cross site scripting. This vulnerability is tracked as CVE-2026-15759. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability labeled as critical has been found in Kirki Plugin up to 6.0.13 on WordPress. This issue affects some unknown processing of the component Customizer. The manipulation of the argument Family results in path traversal. This vulnerability is identified as CVE-2026-15457. The attack can be executed remotely. There is not any exploit available.

A vulnerability identified as problematic has been detected in thimpress LearnPress Plugin up to 4.4.1 on WordPress. This vulnerability affects the function check_answer of the component Quiz Answer Handler. The manipulation leads to information disclosure. This vulnerability is referenced as CVE-2026-13765. Remote exploitation of the attack is possible. No exploit is available.