ClickFix Attacks Expand Using Fake CAPTCHAs, Microsoft Scripts, and Trusted Web Services

Cybersecurity researchers have disclosed details of a new campaign that combines ClickFix-style fake CAPTCHAs with a signed Microsoft Application Virtualization App-V script to distribute an information stealer called Amatera. "Instead of launching PowerShell directly, the attacker uses this scri...

CVE-2026-24801

creationtimestamp| type| source ---|---|--- 2026-01-27 09:21:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdfgnsrnwf26...

CVE-2026-1464

Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager app/src/main/java/org/apache/commons/compress/archivers/tar modules. This vulnerability is associated with program files TarUtils.Java. This issue affects AppManager: before 4.0.4...

CVE-2026-1464 A possible integer overflow vulnerability in RawTherapee/RawTherapee

Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager app/src/main/java/org/apache/commons/compress/archivers/tar modules. This vulnerability is associated with program files TarUtils.Java. This issue affects AppManager: before 4.0.4...

PT-2026-4969

Name of the Vulnerable Software and Affected Versions Performance Evaluation EDD application versions affected versions not specified Description An out-of-band SQL injection vulnerability OOB SQLi exists in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación...

CVE-2026-23683: Missing Authorization

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on confidentiality, integrity and availability are not impacted...

PT-2026-4972

An out-of-band SQL injection vulnerability OOB SQLi has been detected in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter ‘Id usuario' in ‘/evaluacion acciones evalua.aspx’, could allow an attacker to extract...

CVE-2026-1464: Integer Overflow or Wraparound

Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager app/src/main/java/org/apache/commons/compress/archivers/tar modules. This vulnerability is associated with program files TarUtils.Java. This issue affects AppManager: before 4.0.4...

PT-2026-4976

Name of the Vulnerable Software and Affected Versions Performance Evaluation EDD application versions affected versions not specified Description An out-of-band SQL injection flaw exists in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploitation of...

App Manager security vulnerability

App Manager is an Android package manager and viewer developed by Muntashir Al-Islam as a personal project. Versions of App Manager prior to 4.0.4 contained security vulnerabilities, which were caused by integer overflows or circular errors in the TarUtils.Java files...

CVE-2026-1190

creationtimestamp| type| source ---|---|--- 2026-01-26 21:40:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mde7i3kllt26...

CVE-2026-24429

creationtimestamp| type| source ---|---|--- 2026-01-26 20:21:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mde32sdd2s2n...

Get paid to scroll TikTok? The data trade behind Freecash ads

Loyal readers and other privacy-conscious people will be familiar with the expression, “If it’s too good to be true, it’s probably false.” Getting paid handsomely to scroll social media definitely falls into that category. It sounds like an easy side hustle, which usually means there’s a catch. I...

CVE-2025-59108

creationtimestamp| type| source ---|---|--- 2026-01-26 11:54:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdd6qm6z2n2i...

CVE-2025-59090

creationtimestamp| type| source ---|---|--- 2026-01-26 11:51:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdd6la6tda2c...

EUVD-2025-206356

A local privilege escalation vulnerability has been identified in the Kaba exos 9300 System management application d9sysdef.exe. Within this application it is possible to specify an arbitrary executable as well as the weekday and start time, when the specified executable should be run with SYSTEM...

CVE-2026-1300

creationtimestamp| type| source ---|---|--- 2026-01-24 13:37:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md6dja5pwn2m...

CVE-2026-1098

creationtimestamp| type| source ---|---|--- 2026-01-24 11:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md62wkuoyf2g...

CVE-2026-0633

creationtimestamp| type| source ---|---|--- 2026-01-24 10:37:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5zhdwty72c...

CVE-2026-24656

creationtimestamp| type| source ---|---|--- 2026-01-24 05:37:05+00:00| seen| https://seclists.org/oss-sec/2026/q1/112 2026-01-24 06:55:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3md5n3wfzjz2u 2026-01-26 05:51:15+00:00| seen|...