4735 matches found
WordPress plugin “User Submitted Posts” – Enables users to submit posts from the front end. Security vulnerabilities
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...
Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM shipped with IBM Buinses Automation Workflow (Januar 2026 CPU and CVE-2026-1188)
Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server in IBM Business Automtation Workflow traditional. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected...
Fedora 42 : java-21-openjdk / java-25-openjdk / java-latest-openjdk (2026-1ad57632f2)
The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-1ad57632f2 advisory. January 2026 annual updates ---- January 2026 security update Tenable has extracted the preceding description block directly from the Fedora security advisor...
iPhone Lockdown Mode Protects Washington Post Reporter
404Media is reporting that the FBI could not access a reporter's iPhone because it had Lockdown Mode enabled: The court record shows what devices and data the FBI was able to ultimately access, and which devices it could not, after raiding the home of the reporter, Hannah Natanson, in January as...
Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM DevOps Code ClearCase (CVE-2026-21925, CVE-2026-21945)
Summary IBM WebSphere Application Server WAS is shipped as a component of IBM DevOps Code ClearCase. Information about security vulnerabilities affecting WAS have been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...
PT-2026-5910
GreyNoise сообщает о детектировании скоординированной разведывательной кампании, нацеленной на инфраструктуру Citrix NetScaler, в которой задействовались десятки тысяч резидентных прокси-серверов для выявления панелей авторизации. Активность наблюдалась в период с 28 января по 2 февраля и также...
Oracle Enterprise Manager Cloud Control (January 2026 CPU)
The 13.5 and 24.1 versions of Enterprise Manager Base Platform installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent...
[updated] A fake cloud storage alert that ends at Freecash
Last week we talked about an app that promises users they can make money testing games, or even just by scrolling through TikTok. Imagine our surprise when we ended up on a site promoting that same Freecash app while investigating a “cloud storage” phish. We’ve all probably seen one of those...
CVE-2025-8589
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows Reflected XSS. This issue affects SKSPro: through 07012026...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect WebSphere Service Registry and Repository due to January 2026 CPU
Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, used by WebSphere Service Registry and Repository. These issues were disclosed as part of the IBM Java SDK updates in January 2026. These issues are addressed by WebSphere Application Server shipped with WebSphere...
Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow containers January 2026
Summary In addition to updating many operating system level packages, IBM Business Automation Workflow container fixes address the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-47912 DESCRIPTION: The Parse function permits values other than IPv6 addresses to be included in squar...
CVE-2026-22277
creationtimestamp| type| source ---|---|--- 2026-01-30 09:10:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115983268882462022 2026-01-30 09:24:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdmy7l4uug2c 2026-01-30 10:00:32+00:00| seen|...
CVE-2025-62514
creationtimestamp| type| source ---|---|--- 2026-01-29 17:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdlb7gxhgh2r 2026-01-29 17:45:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdldpnoew42i...
PT-2026-5350
Name of the Vulnerable Software and Affected Versions versions prior to 2026-0007 Description A flaw exists in the writeToParcel function within WindowInfo.cpp that could allow an attacker to trick a user into granting permissions through a tapjacking or overlay attack. This could result in local...
PT-2026-5349
In multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token leak due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-69071
creationtimestamp| type| source ---|---|--- 2026-01-28 23:25:14+00:00| seen| Telegram/uuSlRLHMTPdGOFBeGeajfdGl4dndnQq6XjOCBo23ijfHfg...
CVE-2025-57792
creationtimestamp| type| source ---|---|--- 2026-01-28 19:48:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdj24exqzj2x 2026-01-28 19:56:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdj2l6ujb72t...
CVE-2025-40553
creationtimestamp| type| source ---|---|--- 2026-01-28 10:09:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdhzr4zsua2r 2026-01-28 10:15:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdi24e3bsr2x 2026-01-28 13:21:55+00:00| seen|...