Aggregator

Mastodon 4.6 adds profile Collections and two-factor controls

Help Net Security
1 week ago

People who run accounts on the open source social network Mastodon can now group profiles together and share those groups across the web. The 4.6 release centers on a feature called Collections, along with reworked profiles, email newsletters, server administration controls, and a set of accessibility changes. Server controls The release gives server administrators a control to require two-factor authentication on member accounts. Jerry, the administrator of infosec.exchange, plans to turn the requirement on and … More →

The post Mastodon 4.6 adds profile Collections and two-factor controls appeared first on Help Net Security.

Anamarija Pogorelec

CVE-2026-12466 | Google Chrome up to 149.0.7827.115 on Windows WebRTC heap-based overflow (EUVD-2026-37551 / Nessus ID 321383)

Vuldb Updates
1 week ago
A vulnerability described as critical has been identified in Google Chrome on Windows. Impacted is an unknown function of the component WebRTC. Executing a manipulation can lead to heap-based buffer overflow. This vulnerability is registered as CVE-2026-12466. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools 8.61/8.62 Updates Environment Management missing authentication (EUVD-2026-36199 / Nessus ID 321385)

Vuldb Updates
1 week ago
A vulnerability labeled as very critical has been found in Oracle PeopleSoft Enterprise PeopleTools 8.61/8.62. The affected element is an unknown function of the component Updates Environment Management. Such manipulation leads to missing authentication. This vulnerability is referenced as CVE-2026-35273. It is possible to launch the attack remotely. Furthermore, an exploit is available. The affected component should be upgraded.
vuldb.com

CVE-2026-42144 | GreycLab CImg prior .3.7.5 PPM File _load_pnm dimension integer overflow (ID 478 / Nessus ID 321387)

Vuldb Updates
1 week ago
A vulnerability classified as problematic was found in GreycLab CImg. Affected by this issue is the function _load_pnm of the component PPM File Handler. The manipulation of the argument dimension results in integer overflow. This vulnerability is reported as CVE-2026-42144. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.
vuldb.com

CVE-2026-12045 | pgAdmin 4 up to 9.15 Database Driver sql injection (Issue 10022 / WID-SEC-2026-2005)

Vuldb Updates
1 week ago
A vulnerability, which was classified as critical, has been found in pgAdmin 4 up to 9.15. Impacted is an unknown function of the component Database Driver. This manipulation causes sql injection. The identification of this vulnerability is CVE-2026-12045. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-15661 | libssh2 up to 1.11.1 SSH src/sftp.c sftp_symlink link_len out-of-bounds (WID-SEC-2026-2007)

Vuldb Updates
1 week ago
A vulnerability, which was classified as critical, was found in libssh2 up to 1.11.1. This vulnerability affects the function sftp_symlink of the file src/sftp.c of the component SSH Handler. The manipulation of the argument link_len results in out-of-bounds read. This vulnerability is identified as CVE-2025-15661. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.
vuldb.com

CVE-2026-56132 | libexpat up to 2.8.1 xmlparse.c doProlog incorrect synchronization (WID-SEC-2026-2008)

Vuldb Updates
1 week ago
A vulnerability has been found in libexpat up to 2.8.1 and classified as problematic. Affected is the function doProlog of the file xmlparse.c. The manipulation leads to incorrect synchronization. This vulnerability is referenced as CVE-2026-56132. The attack can only be performed from a local environment. No exploit is available. The affected component should be upgraded.
vuldb.com

The Hacker News Recognizes ANY.RUN as the Best Security Investigation Platform 2026 

Anyrun
1 week ago

ANY.RUN has been recognized as the Best Security Investigation Platform 2026 at the Cybersecurity Stars Awards by The Hacker News.  This award reflects our dedication to building solutions that make a real impact on daily security operations.  At ANY.RUN, we help SOC and MSSP teams worldwide streamline threat investigation workflows through confident decision-making, full malware and phishing visibility, and actionable insights thataccelerate incident investigations and response.  We thank our global community of security professionals for continuously trusting our solutions and supporting our growth!  Reinforcing Our Position as a Market […]

The post The Hacker News Recognizes ANY.RUN as the Best Security Investigation Platform 2026  appeared first on ANY.RUN's Cybersecurity Blog.

ANY.RUN

CVE-2022-37390 | Foxit PDF Reader AcroForm deletePages use after free (ZDI-22-1062 / EUVD-2022-40024)

Vuldb Updates
1 week ago
A vulnerability was found in Foxit PDF Reader and classified as critical. This impacts the function deletePages of the component AcroForm Handler. Executing a manipulation can lead to use after free. The identification of this vulnerability is CVE-2022-37390. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2022-37388 | Foxit PDF Reader PDF File Parser out-of-bounds (ZDI-22-1060 / EUVD-2022-40022)

Vuldb Updates
1 week ago
A vulnerability was found in Foxit PDF Reader. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component PDF File Parser. The manipulation results in out-of-bounds read. This vulnerability is identified as CVE-2022-37388. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-37387 | Foxit PDF Reader AcroForm deletePages use after free (ZDI-22-1059 / EUVD-2022-40021)

Vuldb Updates
1 week ago
A vulnerability was found in Foxit PDF Reader. It has been rated as critical. Affected by this issue is the function deletePages of the component AcroForm Handler. This manipulation causes use after free. This vulnerability is tracked as CVE-2022-37387. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.
vuldb.com

CVE-2026-46461 | Dell Server Hardware Manager up to 3.2.2 access control (dsa-2026-243 / EUVD-2026-37997)

VulDB Recent Entries
1 week ago
A vulnerability labeled as critical has been found in Dell Server Hardware Manager up to 3.2.2. Affected by this issue is some unknown functionality. Executing a manipulation can lead to improper access controls. This vulnerability is registered as CVE-2026-46461. The attack needs to be launched locally. No exploit is available. The affected component should be upgraded.
vuldb.com

CVE-2026-6798 | 2download Connector for 2DL Hosted Checkout Plugin up to 0.1.5 on WordPress Subscription authorization (EUVD-2026-37996)

VulDB Recent Entries
1 week ago
A vulnerability identified as problematic has been detected in 2download Connector for 2DL Hosted Checkout Plugin up to 0.1.5 on WordPress. Affected by this vulnerability is an unknown functionality of the component Subscription Handler. Performing a manipulation results in missing authorization. This vulnerability is cataloged as CVE-2026-6798. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.
vuldb.com

Managed ad