CVE-2026-54430

creationtimestamp| type| source ---|---|--- 2026-07-02 13:15:02+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-54430 2026-07-02 23:17:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp62olsut2i 2026-07-03 03:29:23+00:00| seen|...

CVE-2026-4772

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117...

EUVD-2026-41370

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117...

CVE-2026-4772 Stored XSS in TR7's WAF-ASP

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117...

EUVD-2026-41369

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TR7 Cyber ​​Defense Inc. Web Application Firewall allows DOM-Based XSS. This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117...

CVE-2026-4770 DOM-Based XSS in TR7's WAF-ASP

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TR7 Cyber ​​Defense Inc. Web Application Firewall allows DOM-Based XSS. This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117...

CVE-2026-4770

The CVE-2026-4770 entry concerns TR7 Cyber Defense Inc. Web Application Firewall (WAF). The affected component is the Web Application Firewall, with versions from 1.0.42.239 up to, but not including, 1.4.0.117. The vulnerability is a DOM-Based Cross-Site Scripting (XSS) issue arising from imprope...

CVE-2026-13876

creationtimestamp| type| source ---|---|--- 2026-07-02 07:22:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:17:35+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706...

CVE-2026-45997

creationtimestamp| type| source ---|---|--- 2026-07-02 06:45:27+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06 06:16:13+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

Malicious code in @marketfront/infopopup (npm)

The @marketfront/infopopup package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

CVE-2026-39868

creationtimestamp| type| source ---|---|--- 2026-07-01 02:51:08+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:00:58+00:00| seen| https://www.thezdi.com/blog/2026/6/30/the-june-2026-apple-security-update-review 2026-07-02 01:00:42+00:00| seen|...

CVE-2026-53236

creationtimestamp| type| source ---|---|--- 2026-07-01 02:43:43+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:51:22+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2026-53690

creationtimestamp| type| source ---|---|--- 2026-07-01 02:36:30+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-53690...

What the Numbers Say About FIFA 2026 Cyber Risk

The FIFA World Cup 2026 opened on June 11. By that date, according to Check Point Research, the fraud infrastructure targeting it had already been built, staged, and partially deployed. Threat actor activity was pre-planned, months out, across three sectors and at least ten languages. Check Point...

EDB-42392

creationtimestamp| type| source ---|---|--- 2026-06-30 09:23:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6889a30d-c929-4ab6-a8d5-6557dad98cf8...

WordPress Lighthouse theme <= 1.2.12 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Lighthouse versions = 1.2.12...

CVE-2026-53089

creationtimestamp| type| source ---|---|--- 2026-06-28 17:20:12+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpeiaykaj72b 2026-06-28 17:20:15+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpeiazfyfz2v 2026-06-28 17:20:15+00:00| seen|...

CVE-2018-9139

creationtimestamp| type| source ---|---|--- 2026-06-26 01:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5smrhot42n...

CVE-2018-20596

creationtimestamp| type| source ---|---|--- 2026-06-25 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp4kfcn3oa2j...

DoJ Seizes Huione Cloud Account Tied to Cyber Scam Money Laundering

The U.S. Department of Justice DoJ on Tuesday announced the seizure of a cloud computing account put to use by subsidiaries of Cambodia-based corporate conglomerate HuiOne Group, as the Treasury unveiled fresh sanctions against nine individuals and 26 entities linked to Prince Group. "These...