Aggregator

CVE-2026-35906 | T3 T625Pro/T6825G CGI Endpoint Remote Code Execution

2 weeks 5 days ago

A vulnerability identified as very critical has been detected in T3 T625Pro and T6825G. This vulnerability affects unknown code of the component CGI Endpoint. Performing a manipulation results in Remote Code Execution. This vulnerability is cataloged as CVE-2026-35906. It is possible to initiate the attack remotely. There is no exploit available.

vuldb.com

CVE-2026-28318 | SolarWinds Serv-U resource consumption

VulDB Recent Entries

2 weeks 5 days ago

A vulnerability categorized as problematic has been discovered in SolarWinds Serv-U. This affects an unknown part. Such manipulation leads to resource consumption. This vulnerability is listed as CVE-2026-28318. The attack may be performed from remote. There is no available exploit.

vuldb.com

CVE-2026-47707 | strawberry-graphql strawberry up to 0.315.6 MaxAliasesLimiter Extension resource consumption (EUVD-2026-34271)

VulDB Recent Entries

2 weeks 5 days ago

A vulnerability was found in strawberry-graphql strawberry up to 0.315.6. It has been rated as problematic. Affected by this issue is some unknown functionality of the component MaxAliasesLimiter Extension. This manipulation causes resource consumption. This vulnerability is tracked as CVE-2026-47707. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

vuldb.com

CVE-2026-10860 | MISP up to 2.5.38 CRUD validationError authorization

VulDB Recent Entries

2 weeks 5 days ago

A vulnerability was found in MISP up to 2.5.38. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component CRUD. The manipulation of the argument validationError results in incorrect authorization. This vulnerability is identified as CVE-2026-10860. The attack can be executed remotely. There is not any exploit available.

vuldb.com

CVE-2026-10864 | MISP up to 2.5.38 Dashboard Widget information disclosure

VulDB Recent Entries

2 weeks 5 days ago

A vulnerability was found in MISP up to 2.5.38. It has been classified as problematic. Affected is an unknown function of the component Dashboard Widget. The manipulation leads to information disclosure. This vulnerability is referenced as CVE-2026-10864. Remote exploitation of the attack is possible. No exploit is available. It is suggested to install a patch to address this issue.

vuldb.com

CVE-2026-41065 | Tautulli up to 2.17.0 Newsletter Render Endpoint special elements used in a template engine (EUVD-2026-34273)

VulDB Recent Entries

2 weeks 5 days ago

A vulnerability was found in Tautulli up to 2.17.0 and classified as critical. This impacts an unknown function of the component Newsletter Render Endpoint. Executing a manipulation can lead to improper neutralization of special elements used in a template engine. The identification of this vulnerability is CVE-2026-41065. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

vuldb.com

CVE-2026-10863 | MISP up to 2.5.38 Correlations over-correlation Endpoint CorrelationsController.php overCorrelations input validation

VulDB Recent Entries

2 weeks 5 days ago

A vulnerability has been found in MISP up to 2.5.38 and classified as critical. This affects the function overCorrelations of the file app/Controller/CorrelationsController.php of the component Correlations over-correlation Endpoint. Performing a manipulation results in improper input validation. This vulnerability was named CVE-2026-10863. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

vuldb.com

Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories

The Hackers News

2 weeks 5 days ago

A security researcher found a flaw in Anthropic's Claude Code GitHub Action that let an attacker take over vulnerable public repositories running it, with nothing more than a single opened GitHub issue. Because Anthropic's own action repo used the same workflow, a working attack could have pushed malicious code into the action itself and onto the projects downstream that pull it. RyotaK of GMO

The Hacker News

INC

Dark Feed IO

2 weeks 5 days ago

You must login to view this content

cohenido

Agentic AI Is Transforming Defense, But Only Secure IT Infrastructure Will Maximize It

The Hackers News

2 weeks 5 days ago

Over the past several weeks, the cybersecurity community has been reminded how quickly frontier and agentic AI in defense networks can challenge our assumptions. When Anthropic's Claude Mythos model was made available to a limited set of organizations as a technical preview, it was reported that an unauthorized group claimed that it had gained access within hours. The incident, if true, was

The Hacker News

Proofpoint Warns TA4922 Deploys Atlas RAT, RomulusLoader, SilentRunLoader, and ValleyRAT

Cyber Security News

2 weeks 5 days ago

A sophisticated cybercrime group known as TA4922 is raising alarms across the global security community. The group has been deploying a growing arsenal of malware, including Atlas RAT, RomulusLoader, SilentRunLoader, and ValleyRAT, against organizations in Japan, the United Kingdom, Germany, and across Southeast Asia. These campaigns are financially motivated and show a level of planning […]

The post Proofpoint Warns TA4922 Deploys Atlas RAT, RomulusLoader, SilentRunLoader, and ValleyRAT appeared first on Cyber Security News.

Tushar Subhra Dutta

APT73

Dark Feed IO

2 weeks 5 days ago

You must login to view this content

cohenido

APT73

Dark Feed IO

2 weeks 5 days ago

You must login to view this content

cohenido

CISA directive for AI executive order to be released this week, Andersen says

The Record

2 weeks 5 days ago

The binding operational directive will focus in part on “vulnerability alleviation and vulnerability management,” Andersen said in remarks delivered at the TechNet Cyber conference in Baltimore.

Why eSIMs Are Replacing Traditional SIM Cards

Hack Read

2 weeks 5 days ago

From SIM swap protection to remote provisioning, eSIMs are quickly replacing physical SIM cards. Here’s why the shift matters for security and convenience.

Waqas