Aggregator

The KDE ecosystem has secured a grant totaling €1,285,200 from the Sovereign Tech Fund, a German public-interest entity

The post KDE Secures €1.2M Sovereign Tech Fund Grant to Build a Windows Alternative appeared first on Penetration Testing Tools.

A vulnerability was found in WP Maps Plugin up to 4.9.2 on WordPress. It has been declared as critical. Affected is an unknown function. The manipulation results in path traversal. This vulnerability is known as CVE-2026-6381. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

中国电商希音正从美国服装零售商 Everlane 的大股东L Catterton手中收购该公司。这项交易对总部位于旧金山的Everlane估值约为1亿美元，较其在电商热潮高峰时期的估值大幅缩水。知情人

Proprietors of WordPress e-commerce platforms have fallen under siege due to a critical vulnerability discovered in the Funnel

The post Magecart Attack: Critical Flaw in FunnelKit Plugin Sparks Credit Card Skimming on 40,000+ WooCommerce Sites appeared first on Penetration Testing Tools.

Skip to contentSign InPersonal

A new major release of PolarProxy is out with a self-contained single-file binary, expanded platform support (musl/ARM64), and improved container and service plumbing. PolarProxy is a transparent TLS/SSL inspection proxy built for incident responders, malware analysts and security researchers. It de[...]

,  Monday, 18 May 2026 07:01:00 (UTC/GMT)

ARG 即侵入现实游戏（Alternate Reality Game），是一种基于现实世界，融合各种多媒体（如网站、电话、社交媒体等）技术的互动式解谜游戏。由于其与现实的高度结合所带来的沉浸感，一直以

A vulnerability was found in Autoptimize Plugin up to 3.1.14 on WordPress. It has been classified as problematic. This impacts an unknown function of the component Regular Expression Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2026-3220. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Ajax Load More Plugin up to 7.8.3 on WordPress and classified as problematic. This affects an unknown function. Executing a manipulation can lead to cross site scripting. This vulnerability appears as CVE-2026-6495. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

The development framework Next.js has remediated a critical security vulnerability, designated as CVE-2026-44578, which afflicts applications deployed on

The post Open Proxy Risk: High-Severity Next.js SSRF Flaw Exposes Cloud Metadata Endpoints appeared first on Penetration Testing Tools.

A vulnerability has been found in WP Photo Album Plus Plugin 9.1.11.0 on WordPress and classified as critical. The impacted element is an unknown function. Performing a manipulation results in sql injection. This vulnerability is reported as CVE-2026-6379. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Feeds for YouTube Plugin up to 2.6.3 on WordPress. The affected element is the function actions of the component License Key Handler. Such manipulation leads to missing authorization. This vulnerability is documented as CVE-2026-1631. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.

«Деньги не тронем. Пока что» — обещает OpenAI.

The Federal Bureau of Investigation (FBI) has executed a remote reset of thousands of domestic and small-office routers

The post Operation Masquerade: FBI Executes Remote Reset on Thousands of Routers to Purge Russian Malware appeared first on Penetration Testing Tools.

A new analysis of the Lua-based fast16 malware has confirmed that it was a cyber sabotage tool designed to tamper with nuclear weapons testing simulations. According to Broadcom-owned Symantec and Carbon Black teams, the pre-Stuxnet tool was engineered to corrupt uranium-compression simulations that are central to nuclear weapon design. "Fast16's hook engine is selectively interested in

Industrial Sabotage / MalwareA new analysis of the Lua-based fast16 malware has confirmed that it

WordPress websites have once again fallen under siege due to a critical flaw in a popular extension. On

The post Under Siege: Critical Auth Bypass Flaw in Burst Statistics Plugin Puts 115,000+ WordPress Sites at Risk appeared first on Penetration Testing Tools.

AMD Mesa 驱动开发者 Marek Olšák 更新了个人资料，显示他正为 Valve 工作。Marek 是资深 Linux GPU 驱动开发者，长期致力于 AMD Mesa 驱动开