Aggregator

SLH

Dark Feed IO
2 weeks 6 days ago

You must login to view this content

cohenido

Pear

Dark Feed IO
2 weeks 6 days ago

You must login to view this content

cohenido

Security Affairs newsletter Round 572 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs
2 weeks 6 days ago
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Censys finds 5,219 devices exposed to attacks by Iranian APTs, majority in U.S. GlassWorm evolves with […]
Pierluigi Paganini

CVE-2026-6143 | farion1231 cc-switch up to 3.12.3 ProxyServer server.rs cross-domain policy (Issue 1841)

VulDB Recent Entries
2 weeks 6 days ago
A vulnerability was found in farion1231 cc-switch up to 3.12.3. It has been declared as problematic. Affected by this issue is some unknown functionality of the file src-tauri/src/proxy/server.rs of the component ProxyServer. The manipulation results in permissive cross-domain policy with untrusted domains. This vulnerability is identified as CVE-2026-6143. The attack can be executed remotely. Additionally, an exploit exists.
vuldb.com

Week in review: Windows zero-day exploit leaked, Patch Tuesday forecast

Help Net Security
2 weeks 6 days ago

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Cloudflare moves up its post-quantum deadline as researchers narrow the path to Q-Day Cloudflare announced it is targeting 2029 to complete post-quantum security across its entire product suite, including post-quantum authentication. The company is following a revised roadmap that Google also adopted after announcing that it had improved the quantum algorithm used to break elliptic curve cryptography. Google stopped short … More →

The post Week in review: Windows zero-day exploit leaked, Patch Tuesday forecast appeared first on Help Net Security.

Help Net Security

CVE-2026-6142 | tushar-2223 Hotel Management System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15 /admin/roomdelete.php ID sql injection (Issue 15)

VulDB Recent Entries
2 weeks 6 days ago
A vulnerability was found in tushar-2223 Hotel Management System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/roomdelete.php. The manipulation of the argument ID leads to sql injection. This vulnerability is referenced as CVE-2026-6142. Remote exploitation of the attack is possible. Furthermore, an exploit is available. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.
vuldb.com

CVE-2026-6141 | danielmiessler Personal_AI_Infrastructure up to 2.3.0 parse_url.ts os command injection (ID 659)

VulDB Recent Entries
2 weeks 6 days ago
A vulnerability was found in danielmiessler Personal_AI_Infrastructure up to 2.3.0 and classified as critical. Affected is an unknown function of the file Skills/Parser/Tools/parse_url.ts. Executing a manipulation can lead to os command injection. The identification of this vulnerability is CVE-2026-6141. The attack may be launched remotely. Furthermore, there is an exploit available. It is advisable to implement a patch to correct this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
vuldb.com

CVE-2026-6140 | Totolink A7100RU 7.4cu.2313_b20191024 CGI /cgi-bin/cstecgi.cgi UploadFirmwareFile FileName os command injection

VulDB Recent Entries
2 weeks 6 days ago
A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024 and classified as critical. This impacts the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument FileName results in os command injection. This vulnerability was named CVE-2026-6140. The attack may be initiated remotely. In addition, an exploit is available.
vuldb.com

CVE-2026-6139 | Totolink A7100RU 7.4cu.2313_b20191024 CGI /cgi-bin/cstecgi.cgi UploadOpenVpnCert FileName os command injection

VulDB Recent Entries
2 weeks 6 days ago
A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument FileName leads to os command injection. This vulnerability is uniquely identified as CVE-2026-6139. The attack can be launched remotely. Moreover, an exploit is present.
vuldb.com

CVE-2026-6138 | Totolink A7100RU 7.4cu.2313_b20191024 CGI /cgi-bin/cstecgi.cgi setAccessDeviceCfg mac os command injection

VulDB Recent Entries
2 weeks 6 days ago
A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setAccessDeviceCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument mac causes os command injection. This vulnerability is handled as CVE-2026-6138. The attack can be initiated remotely. Additionally, an exploit exists.
vuldb.com

Managed ad