Aggregator

A vulnerability was found in libssh2 up to 1.11.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component SSH Handler. Executing a manipulation can lead to integer overflow. This vulnerability is handled as CVE-2026-58050. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability was found in Nmap up to 7.99. It has been classified as critical. Affected is an unknown function of the file libnetutil/netutil.cc. Performing a manipulation results in integer underflow. This vulnerability is known as CVE-2026-58058. Remote exploitation of the attack is possible. Furthermore, an exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in MyBB up to 1.8.40 and classified as critical. This impacts the function verify_usergroup of the component User Module. Such manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-58054. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability has been found in libssh2 up to 1.11.1 and classified as problematic. This affects an unknown function of the component SSH Handler. This manipulation causes uninitialized resource. This vulnerability appears as CVE-2026-58051. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability, which was classified as critical, was found in Gitea act_runner up to 0.262.0. The impacted element is an unknown function of the component Docker Backend. The manipulation results in improper privilege management. This vulnerability is reported as CVE-2026-58053. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability, which was classified as critical, has been found in FFmpeg. The affected element is an unknown function of the file libavcodec/rasc.c of the component Media Handler. The manipulation leads to out-of-bounds write. This vulnerability is documented as CVE-2026-58049. The attack can be initiated remotely. Additionally, an exploit exists. Applying a patch is the recommended action to fix this issue.

A vulnerability classified as problematic was found in nmedia Frontend File Manager Plugin up to 23.6 on WordPress. Impacted is the function sanitize_key of the file wp-config.php of the component AJAX Handler. Executing a manipulation of the argument wpfm_dir_path can lead to file inclusion. This vulnerability is registered as CVE-2026-8095. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in zephyrproject zephyr up to 4.4.x. This issue affects the function uart_rx_enable of the file drivers/serial/uart_mchp_sercom_g1.c. Performing a manipulation results in out-of-bounds write. This vulnerability is cataloged as CVE-2026-10644. The attack must originate from the local network. There is no exploit available. It is recommended to upgrade the affected component.

Создал дипфейк, передал организатору, тот позвонил жертве. Почему бы не посадить всех троих?

A vulnerability has been found in Vmware Spring for Apache Pulsar up to 1.1.17/1.2.17/2.0.5 and classified as problematic. This affects an unknown function of the component JsonPulsarHeaderMapper. The manipulation leads to deserialization. This vulnerability is uniquely identified as CVE-2026-41732. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

腾讯内测TenPay Go 面向境外人士来华支付记者了解到，腾讯正在内测一款面向境外人士的 “来华生活便利助手”，旨在提供包括移动支付服务的一站式数字生活服务。该App将支持在全国数千万家微信支付合作

Сервис управления внезапно становится главным слабым звеном периметра.

Your browser does not support the audio element.SpeedbyPuneetPahuja@ppahujabyPuneetPahuja@ppahujaTec

Новый завод замкнёт цикл, который атомная отрасль пыталась замкнуть полвека.

土耳其语撰写的渗透测试技术书籍（第二卷），书名为《Sızma Testçisinin Defteri》（《渗透测试员笔记》），副标题为"从网络边界到根权限——实战笔记精选"。

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

New StorybyLearn RepobyLearn Repo@learnLets geek out. The HackerNoon library is now ranked by readi

A threat actor using the alias 0xSec has posted what they describe as the database of Flawireless, a US-based wholesaler of mobile phone accessories and refurbished electronics that also trades as Techy Extra.