13610 matches found
CVE-2026-100833
Contrast (edgelesssys/contrast) versions 1.14.0 through 1.23.0 are vulnerable to container image substitution because generated runtime policies fail to detect certain replacements. The root cause is an allow_storage rule, introduced during a Kata Containers update, that accepts storage entries u...
EUVD-2026-87853
Contrast edgelesssys/contrast versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad rebase during a Kata Containers update accidentally introduced an allowstorage rule that accepts storage entries using the imageguestpull driver witho...
EUVD-2026-87212
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, this vulnerability breaks normal ticket isolation boundaries between agents. Any authenticated agent, even one with no active tickets assigned to them, can view the titles, status, labels, and URL links of...
OpenAI Agent Breached Australian Medicare Statistics Portal
An OpenAI agent bypassed controls on Australia's Medicare statistics portal, accessed non-public data and was not reported to officials for nearly 3 months...
A Data-Driven Analysis of Infostealer Malware Victims
Infostealer malware infects devices worldwide and harvests their most sensitive contents: credentials, browser sessions, private keys, and access certificates. Yet its impact on victims remains difficult to study without an ethical, legal, and curated research dataset. To close this gap, we build...
CISA: Recognizing and Addressing Threats to Statewide Voter Registration Databases
Recently declassified records revealed that China breached multiple state voter registration systems prior to the 2020 election. Unfortunately, this is not a new phenomenon. Unclassified reports from the last decade reveal that Statewide Voter Registration Databases VRDB are attractive targets fo...
CVE-2026-91182
A flaw was found in open-cluster-management. An agent communicating via the gRPC broker can bypass authorization by manipulating the ce-clustername cloud event header attribute, which is used for authorization, independently of the actual event payload. This allows a registered managed cluster to...
ShinyHunters claims FBI breach was revenge for “false” report
Extortion group ShinyHunters is not afraid to make enemies. Now it claims to have breached the FBI. After reportedly taking over ransomware group Clop’s leak site, ShinyHunters says it attacked the FBI to punish the agency for spreading what it calls false information about the group. In a very...
ShinyHunters Hacks FBI Jobs Portal, Claims It Stole Agents’ Data
ShinyHunters hacks the FBI Jobs portal, claims data on FBI agents, and says it stole substantial job applicant records in a PeopleSoft zero-day attack...
The vulnerability of the new VM component in the vm2 library of the NPM package manager allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the new VM component in the vm2 library of the NPM package manager is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
ShinyHunters hacks rival extortion gang and takes over its dark web site
Reportedly, the ShinyHunters extortion group breached the leak site of one of its competitors, the Clop ransomware gang. ShinyHunters is a financially motivated cybercrime and extortion group active since 2019. It is known for stealing large volumes of data and pressuring victims to pay, rather...
A week in security (September 14 – September 20)
Last week on Malwarebytes Labs: New Android malware uses AI to steal bank logins and PINs Did an AI really try to break free from human control? Fake parcel delivery messages steal your card and bank details Flock cameras are tracking people as well as cars Revolut phishing texts appear days afte...
CVE-2026-77568
Mojolicious is a real-time web framework for Perl. Prior to 9.48, the Mojolicious CSRF helpers csrffield, csrftoken, and csrfprotect reuse an unchanged per-session token in rendered HTML. When response compression is enabled and attacker-influenced content is reflected in the same response, an...
UBUNTU-CVE-2026-77568
Mojolicious is a real-time web framework for Perl. Prior to 9.48, the Mojolicious CSRF helpers csrffield, csrftoken, and csrfprotect reuse an unchanged per-session token in rendered HTML. When response compression is enabled and attacker-influenced content is reflected in the same response, an...
CVE-2026-77568
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-15747. Reason: This candidate is a duplicate of CVE-2026-15747. Notes: All CVE users should reference CVE-2026-15747 instead of this candidate...
CVE-2026-77568
This CVE entry is rejected and does not represent an active vulnerability entry.
CVE-2026-77568 Mojolicious: CSRF tokens are vulnerable to BREACH attacks
Mojolicious is a real-time web framework for Perl. Prior to 9.48, the Mojolicious CSRF helpers csrffield, csrftoken, and csrfprotect reuse an unchanged per-session token in rendered HTML. When response compression is enabled and attacker-influenced content is reflected in the same response, an...
EUVD-2026-83035
Mojolicious is a real-time web framework for Perl. Prior to 9.48, the Mojolicious CSRF helpers csrffield, csrftoken, and csrfprotect reuse an unchanged per-session token in rendered HTML. When response compression is enabled and attacker-influenced content is reflected in the same response, an...
CVE-2026-77568 Mojolicious: CSRF tokens are vulnerable to BREACH attacks
Mojolicious is a real-time web framework for Perl. Prior to 9.48, the Mojolicious CSRF helpers csrffield, csrftoken, and csrfprotect reuse an unchanged per-session token in rendered HTML. When response compression is enabled and attacker-influenced content is reflected in the same response, an...
