13611 matches found
openSUSE 16 Security Update : perl-Mojolicious (openSUSE-SU-2026:21451-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21451-1 advisory. Changes in perl-Mojolicious: - updated to 9.480.0 9.48 - Fixed a security issue where CSRF tokens were vulnerable to BREACH attacks. Tokens are now mask...
MailAccess v0.13.4
root@kitploit: ███╗ ███╗ █████╗ ██╗██╗ █████╗ ██████╗ ██████╗███████╗███████╗███████╗ ████╗ ████║██╔══██╗██║██║ ██╔══██╗██╔════╝██╔════╝██╔════╝██╔════╝██╔════╝ ██╔████╔██║███████║██║██║ ███████║██║ ██║ █████╗ ███████╗███████╗ ██║╚██╔╝██║██╔══██║██║██║ ██╔══██║██║ ██║ ██╔══╝ ╚════██║╚════██║ ██║...
DEBIAN-CVE-2026-50736
The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message payloads on the subscriber at the privilege level of the apply worker, which is equivalent to a PostgreSQL superuser in default installations. A party actin...
EUVD-2026-49936
The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message payloads on the subscriber at the privilege level of the apply worker, which is equivalent to a PostgreSQL superuser in default installations. A party actin...
ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 Leak
EY confirmed the theft of client tax documents from its third-party support platform. ShinyHunters claims responsibility and is threatening to publish the data...
Fedora 44 : perl-Mojolicious (2026-4334fd85bc)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4334fd85bc advisory. Mojolicious 9.48 fixes a security issue where CSRF tokens were vulnerable to BREACH attacks. Tokens are now masked with a fresh random value on every request...
CVE-2026-43821
Apple has addressed an access issue in Safari , iOS , iPadOS , macOS Tahoe , tvOS , visionOS , and watchOS where an application could potentially read files outside of its sandbox . The vulnerability was mitigated by implementing improved access restrictions . Affected versions include Safari 26....
CVE-2026-43763
A permissions issue in the ATS component of macOS allows an application to read files outside of its sandbox. The vulnerability was addressed by removing the affected code. This issue is fixed in macOS Sequoia 15.7.8 , macOS Sequoia 15.8 , macOS Sonoma 14.8.8 , macOS Tahoe 26.6 , and macOS Tahoe ...
⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
Monday starts with the usual promise that everything is under control. Then the logs wake up. This week, trusted tools crossed lines, old flaws found new work, exposed systems stayed exposed, and attackers kept hiding inside normal-looking services. Nothing looked strange at first. That helped...
CVE-2026-66442
Subscriber Broken Access Control in YayPricing = 3.5.6 versions...
OPENSUSE-SU-2026:21451-1 Security update for perl-Mojolicious
This update for perl-Mojolicious fixes the following issues: Changes in perl-Mojolicious: - updated to 9.480.0 9.48 - Fixed a security issue where CSRF tokens were vulnerable to BREACH attacks. Tokens are now masked with a fresh random value on every request, instead of being reused for the whole...
A week in security (July 20 – July 26)
Last week on Malwarebytes Labs: Don’t get fooled by TikTok resin art scams Call of Duty Mobile scam uses fake free points to steal player accounts OpenAI’s agent escaped its sandbox during a security test Google wants to store a selfie video of your face Beyond the Play Store: How Android threats...
PT-2026-65210
Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.6 iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versions prior to 26.6 Description An access issue...
Modeling Local Exploit Hazard - a Bayesian Framework for Quantifying Exploit Risk and Operational Efficiency
This paper presents a local exploit hazard model : a Bayesian framework that converts the global probabilities produced by an exploit likelihood model ELM, such as the Exploit Prediction Scoring System EPSS, into a daily exploit hazard rate for an organization's own assets. The model measures the...
SQL Injection
Overview @budibase/server is a Budibase Web Server Affected versions of this package are vulnerable to SQL Injection via the multipleStatements configuration in the MySQL integration. An attacker can execute arbitrary SQL commands by injecting malicious input into user fields, potentially leading...
CVE-2026-49744
A vulnerability in the GPU DDK allows kernel software running inside a Guest VM to post improper commands to the GPU Firmware . This triggers an out-of-bounds access (specifically an unchecked ui32TracePointer in rgxfw_log_ex()), resulting in a data write outside the Guest's virtualized GPU memor...
Astra Linux – Vulnerability in Chromium
Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
ROS-20260723-73-0057
The vulnerability in Chromium is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker who operates remotely to circumvent existing security restrictions...
NPM: n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base Directory
NPM: n8n: Path-Confinement Bypass in computer-use searchfiles Allows Reading Files Outside the Base Directory vulnerability discovered by ? in WordPress Npm n8n versions 2.31.5...