inside-pegasus

Inside Pegasus: key documents from WhatsApp v. NSO Group A curated set of NSO Group internal documents, product materials and sworn testimony that entered the public record in WhatsApp Inc. and Meta Platforms, Inc. v. NSO Group Technologies Limited and Q Cyber Technologies Limited , Case No...

CVE-2026-106003

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in the Court Reservation WordPress plugin before 1.12.4's configuration...

CVE-2026-106002

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorisation or nonce verification on one of its challenge-management actions, allowing unauthenticated users to delete arbitrary tournament-ladder challenge records, along with the linked court-booking event when one was...

CVE-2026-106002 Court Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge Deletion

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorisation or nonce verification on one of its challenge-management actions, allowing unauthenticated users to delete arbitrary tournament-ladder challenge records, along with the linked court-booking event when one was...

WordPress Court Reservation plugin < 1.12.4 - Unauthenticated Reservation Type Addition and Deletion vulnerability

Unauthenticated Reservation Type Addition and Deletion vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Court Reservation versions 1.12.4...

WordPress Court Reservation plugin < 1.12.4 - Unauthenticated Arbitrary Challenge Deletion vulnerability

Unauthenticated Arbitrary Challenge Deletion vulnerability discovered by Daniel Dhaniswara in WordPress Plugin Court Reservation versions 1.12.4...

CVE-2026-106003 Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and Deletion

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in the Court Reservation WordPress plugin before 1.12.4's configuration...

EUVD-2026-111704

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in the Court Reservation WordPress plugin before 1.12.4's configuration...

CVE-2026-106003

The Court Reservation WordPress plugin (versions before 1.12.4 ) is vulnerable to an access control flaw. The plugin fails to perform required authorization, authentication, or nonce validation on one of its AJAX actions. This allows unauthenticated users to add or delete reservation types within...

CVE-2026-106002

The Court Reservation WordPress plugin, in versions prior to 1.12.4 , is vulnerable to an authentication bypass due to missing authorisation or nonce verification on specific challenge-management actions. This flaw allows unauthenticated users to delete arbitrary tournament-ladder challenge recor...

EUVD-2026-111703

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorisation or nonce verification on one of its challenge-management actions, allowing unauthenticated users to delete arbitrary tournament-ladder challenge records, along with the linked court-booking event when one was...

PT-2026-127820

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorisation or nonce verification on one of its challenge-management actions, allowing unauthenticated users to delete arbitrary tournament-ladder challenge records, along with the linked court-booking event when one was...

PT-2026-127821

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in the Court Reservation WordPress plugin before 1.12.4's configuration...

The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans

Two US senators say the Trump administration is breaking the law by withholding the FISA court decision while it presses Congress to renew America’s most sweeping surveillance program...

Hackers steal protective order and foster care records from Arizona courts

“Arizona’s court system was targeted by a cyber attack from criminal hackers or their bots.” This is how the Arizona Supreme Court announced that hackers had attacked the state’s court system and stolen the personal information of “many Arizonans.” The court says the attack began with a phishing...

Malicious code in goodmanmax9250-court-automobile (npm)

Source: amazon-inspector 92e8ec273ece14d46829f33af37305d2465eb06ae34f42e400c344cda3a3110e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data

Thomson Reuters disclosed on Wednesday that an unauthorized party obtained files from C-Track , the court case management platform sold by its West Publishing Corporation unit, in March 2026, affecting courts in 11 U.S. states, the U.S. Virgin Islands, and Ontario, Canada. West Publishing said it...

Your AI chats could be used in court

You might tell an AI chatbot secrets that you wouldn't divulge to your closest friends. If you do, though, beware: They could end up as evidence in court. An article in the Washington Post this week highlighted several cases in which people had discussed sensitive information with AI systems like...

CVE-2026-61344

The Superior Court of California Hearing Reminder Service at https://www.hrs.courts.ca.gov exposes an API endpoint that returns court reminder records containing potentially sensitive information without authentication...

CVE-2026-61344 Superior Court of California Hearing Reminder Service unauthenticated information disclosure

The Superior Court of California Hearing Reminder Service at https://www.hrs.courts.ca.gov exposes an API endpoint that returns court reminder records containing potentially sensitive information without authentication...