CVE-2026-109655

Frappe ERPNext versions before 15.115.0 and 16.x before 16.26.0 are vulnerable to a missing authorization flaw (CWE-862) in certain endpoints. The root cause is a failure to enforce proper role-based authorization checks , which allows authenticated low-privileged users to send requests that modi...

Black Friday 2025 in Review: What Retailers Need to Know About This Year’s Holiday Shopping Season

Holiday shopping season is in full swing, and Black Friday 2025 continued to demonstrate that consumer demand and attacker activity shows no signs of slowing. According to Adobe Analytics, U.S. consumers spent $11.8 billion online on Black Friday, setting a new record and highlighting sustained...

GLPI 跨站脚本漏洞

GLPI is an open source IT and asset management software from GLPI Open Source. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...