China-Linked UNC3886 Targets Singapore Telecom Sector in Cyber Espionage Campaign

The Cyber Security Agency CSA of Singapore on Monday revealed that the China-nexus cyber espionage group known as UNC3886 targeted its telecommunications sector. "UNC3886 had launched a deliberate, targeted, and well-planned campaign against Singapore's telecommunications sector," CSA said. "All...

Important: Red Hat Security Advisory: RHACS 4.9.3 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

CVE-2026-22906

CVE-2026-22906 involves credentials disclosure caused by AES-ECB encryption with a hardcoded key in a configuration file. An unauthenticated remote attacker that can obtain the config file can decrypt and recover plaintext usernames and passwords, with higher risk when combined with an authentica...

libssh 0.7.6 Advanced SSH Security Testing Tool

This is an advanced SSH security testing tool for libssh that provides robust session management, signal handling, safe memory management, and multiple operational modes while also checking banners to see if libssh is vulnerable to CVE-2018-10933...

PT-2026-7084

Name of the Vulnerable Software and Affected Versions WAGO 0852-1322 affected versions not specified Description User credentials are stored using AES-ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining the configuration file can decrypt and recover plaintext usernam...

CVE-2026-1675

The Advanced Country Blocker plugin for WordPress is vulnerable to Authorization Bypass in all versions up to, and including, 2.3.1 due to the use of a predictable default value for the secret bypass key created during installation without requiring users to change it. This makes it possible for...

CVE-2026-1675

The Advanced Country Blocker plugin for WordPress is vulnerable to Authorization Bypass in all versions up to, and including, 2.3.1 due to the use of a predictable default value for the secret bypass key created during installation without requiring users to change it. This makes it possible for...

CVE-2026-1675 Advanced Country Blocker <= 2.3.1 - Unauthenticated Authorization Bypass via Insecure Default Secret Key

The Advanced Country Blocker plugin for WordPress is vulnerable to Authorization Bypass in all versions up to, and including, 2.3.1 due to the use of a predictable default value for the secret bypass key created during installation without requiring users to change it. This makes it possible for...

CVE-2026-1675

The Advanced Country Blocker plugin for WordPress is vulnerable to Authorization Bypass in all versions up to, and including, 2.3.1 due to the use of a predictable default value for the secret bypass key created during installation without requiring users to change it. This makes it possible for...

CVE-2026-1675 Advanced Country Blocker <= 2.3.1 - Unauthenticated Authorization Bypass via Insecure Default Secret Key

The Advanced Country Blocker plugin for WordPress is vulnerable to Authorization Bypass in all versions up to, and including, 2.3.1 due to the use of a predictable default value for the secret bypass key created during installation without requiring users to change it. This makes it possible for...

WordPress plugin Advanced Country Blocker 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

AirCatch: Effectively Tracing Advanced Tag-Based Trackers

Tag-based tracking ecosystems help users locate lost items, but can be leveraged for unwanted tracking and stalking. Existing protocol-driven defenses and prior academic solutions largely assume stable identifiers or predictable beaconing. However, identifier-based defenses fundamentally break do...

CVE-2026-1675: Initialization of a Resource with an Insecure Default

The Advanced Country Blocker plugin for WordPress is vulnerable to Authorization Bypass in all versions up to, and including, 2.3.1 due to the use of a predictable default value for the secret bypass key created during installation without requiring users to change it. This makes it possible for...

PT-2026-6896

Name of the Vulnerable Software and Affected Versions Advanced Country Blocker plugin for WordPress versions prior to 2.3.2 Description The Advanced Country Blocker plugin for WordPress is susceptible to an authorization bypass. This is due to the use of a predictable default value for the secret...

WordPress Advanced Country Blocker plugin <= 2.3.1 - Unauthenticated Authorization Bypass via Insecure Default Secret Key vulnerability

Unauthenticated Authorization Bypass via Insecure Default Secret Key vulnerability discovered by Hector Flores in WordPress Plugin Advanced Country Blocker versions = 2.3.1...

org.datanucleus:datanucleus-accessplatform-jdo-neo4j (>=3.1.2, <=3.3.3), org.datanucleus:datanucleus-neo4j (>=3.1.0-m1, <=3.2.2) +8 more potentially affected by CVE-2026-1337 via org.neo4j:neo4j (1.7.2)

org.neo4j:neo4j MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.datanucleus:datanucleus-accessplatform-jdo-neo4j =3.1.2, =3.1.0-m1, =3.3, =3.6.1 Source cves: CVE-2026-1337 Source advisory:...

org.liquigraph.trinity:trinity-embedded-2x (1.0.0-m01), org.liquigraph.trinity:trinity-neo4j-v2 (1.0.0-m01) +6 more potentially affected by CVE-2026-1337 via org.neo4j:neo4j (2.0.0)

org.neo4j:neo4j MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.liquigraph.trinity:trinity-embedded-2x 1.0.0-m01 - org.liquigraph.trinity:trinity-neo4j-v2 1.0.0-m01 -...

org.neo4j.app:neo4j-server (2.1.0-rc1), org.neo4j.app:neo4j-server-advanced (2.1.0-rc1) +4 more potentially affected by CVE-2026-1337 via org.neo4j:neo4j (2.1.0-rc1)

org.neo4j:neo4j MAVEN version 2.1.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.neo4j.app:neo4j-server 2.1.0-rc1 - org.neo4j.app:neo4j-server-advanced 2.1.0-rc1 - org.neo4j.app:neo4j-server-enterprise...

org.neo4j.app:neo4j-server (2.0.0-m02), org.neo4j.app:neo4j-server-advanced (2.0.0-m02) +3 more potentially affected by CVE-2026-1337 via org.neo4j:neo4j (2.0.0-m02)

org.neo4j:neo4j MAVEN version 2.0.0-m02 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.neo4j.app:neo4j-server 2.0.0-m02 - org.neo4j.app:neo4j-server-advanced 2.0.0-m02 - org.neo4j.app:neo4j-server-enterprise...

com.buschmais.jqassistant:commandline (1.2.0), com.buschmais.jqassistant:jqassistant-maven-plugin (1.2.0) +13 more potentially affected by CVE-2026-1337 via org.neo4j:neo4j (2.3.8)

org.neo4j:neo4j MAVEN version 2.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - com.buschmais.jqassistant:commandline 1.2.0 - com.buschmais.jqassistant:jqassistant-maven-plugin 1.2.0 -...