Aggregator

CVE-2026-32446 | Syed Balkhi Contact Form by WPForms Plugin up to 1.9.9.3 on WordPress authorization (EUVD-2026-11991)

Vuldb Updates
1 month 3 weeks ago
A vulnerability was found in Syed Balkhi Contact Form by WPForms Plugin up to 1.9.9.3 on WordPress. It has been declared as critical. This affects an unknown function. Such manipulation leads to missing authorization. This vulnerability is referenced as CVE-2026-32446. It is possible to launch the attack remotely. No exploit is available.
vuldb.com

CVE-2026-32443 | Josh Kohlbach Product Feed Pro for WooCommerce Plugin up to 13.5.2 on WordPress cross-site request forgery (EUVD-2026-11987)

Vuldb Updates
1 month 3 weeks ago
A vulnerability classified as problematic was found in Josh Kohlbach Product Feed Pro for WooCommerce Plugin up to 13.5.2 on WordPress. This affects an unknown function. The manipulation results in cross-site request forgery. This vulnerability is reported as CVE-2026-32443. The attack can be launched remotely. No exploit exists.
vuldb.com

CVE-2026-4163 | Wavlink WL-WN579A3 220323 POST Request /cgi-bin/wireless.cgi SetName/GuestWifi command injection (EUVD-2026-12192)

VulDB Recent Entries
1 month 3 weeks ago
A vulnerability was found in Wavlink WL-WN579A3 220323. It has been classified as critical. This issue affects the function SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler. Performing a manipulation results in command injection. This vulnerability is cataloged as CVE-2026-4163. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. Upgrading the affected component is recommended.
vuldb.com

Interpol – Operation Synergia III leads to 45,000 malicious IPs dismantled and 94 arrests worldwide

Security Affairs
1 month 3 weeks ago
INTERPOL dismantled 45,000 malicious IPs and servers and arrested 94 suspects in a global cybercrime operation. INTERPOL announced a global cybercrime operation (codenamed Operation Synergia III) involving 72 countries that dismantled 45,000 malicious IP addresses and servers linked to phishing, malware, and ransomware. The international law enforcement operation led to 94 arrests, 110 ongoing investigations, […]
Pierluigi Paganini

Malicious npm Packages Posing as Solara Executor Target Discord, Browsers, and Crypto Wallets

Cyber Security News
1 month 3 weeks ago

JFrog security researchers Guy Korolevski and Meitar Palas uncovered a sophisticated supply chain attack on the npm ecosystem on March 12, 2026, in which threat actors disguised an information-stealing malware as a legitimate Roblox script executor. The campaign, self-named Cipher stealer, used two malicious packages bluelite-bot-manager and test-logsmodule-v-zisko, to deliver a Windows executable capable of harvesting Discord credentials, […]

The post Malicious npm Packages Posing as Solara Executor Target Discord, Browsers, and Crypto Wallets appeared first on Cyber Security News.

Dhivya

Managed ad