7492 matches found
About the security content of macOS Sonoma 14.8.9
About the security content of macOS Sonoma 14.8.9 This document describes the security content of macOS Sonoma 14.8.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...
PT-2026-68882
Name of the Vulnerable Software and Affected Versions WordPress affected versions not specified Description WordPress is subject to a pre-authentication reflected cross-site scripting XSS issue on the login screen. This allows an attacker to execute arbitrary JavaScript in the site origin without...
PT-2026-68772
Name of the Vulnerable Software and Affected Versions macOS Tahoe versions prior to 26.6.1 macOS Sequoia versions prior to 15.7.9 macOS Sonoma versions prior to 14.8.9 Description An authentication bypass exists in the built-in Screen Sharing feature, which allows remote desktop management via th...
About the security content of macOS Tahoe 26.6.1
About the security content of macOS Tahoe 26.6.1 This document describes the security content of macOS Tahoe 26.6.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
macOS 15.x < 15.7.9 (148171)
The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.7.9. It is, therefore, affected by a vulnerability: - An attacker on the network may be able to authenticate to Screen Sharing without valid credentials CVE-2026-65400 Note that Nessus has not tested for this issue...
NPM: Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size
NPM: Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size vulnerability discovered by ? in WordPress Npm electron versions 39.8.10...
CVE-2026-11977
The affected software is the WordPress plugin WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars . The vulnerability is a generic SQL Injection via the parameter wpma_metabox_authors_list in all versions up to and including 3.9.1, caused by insufficient escaping and lac...
Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access
Cybersecurity researchers have disclosed details of an active, multi-wave campaign that employs social engineering lures themed around Adobe and Zoom software updates, business document reviews, and system maintenance utilities to stealthily deploy Remote Monitoring and Management RMM programs li...
SUSE SLED15 / SLES15 Security Update : python-urwid (SUSE-SU-2026:3460-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3460-1 advisory. This update for python-urwid fixes the following issue: - CVE-2026-9323: web session IDs generated by Screen.start are...
Security update for python-urwid
This update for python-urwid fixes the following issue: CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:3460-1 Security update for python-urwid
This update for python-urwid fixes the following issue: - CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868...
SUSE SLED15 / SLES15 Security Update : python-urwid (SUSE-SU-2026:3425-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3425-1 advisory. This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by Screen.start are not...
CVE-2026-17938
An inappropriate implementation flaw was found in the FullScreen component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513989304...
Security update for python-urwid
This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
CVE-2026-64272
A flaw was found in the Linux kernel's mms114 touch screen driver. The driver misinterprets the size of touch event data, causing it to read information from incorrect memory locations. This issue, known as an out-of-bounds read, could be exploited by a local attacker to disrupt system operations...
CVE-2026-17938
Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
PT-2026-66257
Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates
Source code for the Flying Eagle Android remote access trojan RAT framework is circulating through criminal Telegram channels. Hunt.io and independent researcher NetAskari traced matching control panels and certificates to 170 internet servers. They linked the framework to a fake "公安一网通办" Public...
CVE-2026-55977
Successful exploitation of this vulnerability could allow an attacker with local network access to bypass the application's rate-limiting mechanism, enabling brute-forcing of the screen-sharing code and potentially displaying harmful content on the affected screen...
CVE-2026-55977
Successful exploitation of this vulnerability could allow an attacker with local network access to bypass the application's rate-limiting mechanism, enabling brute-forcing of the screen-sharing code and potentially displaying harmful content on the affected screen...