The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to compromise protected information

The vulnerability of the Win32k.sys component of the Windows operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Malicious code in hehehe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588dd776720f805d7d84a58c93ffcd21ed860e3fc21a48787d732eb6180b974d Package is published as an 'enterprise Windows Diagnostic Utility' but is an anti-proctoring cheating tool that also steals the installer's browser...

The vulnerability of the mirroring mechanism of the Git-based software platform for collaborative code development, GitLab EE, allows a perpetrator to compromise the confidentiality of the protected information.

The vulnerability of the repository mirroring mechanism of the Git-based software platform for collaborative code development in GitLab CE/EE is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the...

The vulnerability of the libcurl library in software applications for interacting with servers via cURL allows a hacker to gain unauthorized access to protected information.

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the webbrowser module in the CPython interpreter allows a hacker to execute arbitrary commands.

The vulnerability of the webbrowser module in the CPython interpreter is related to the lack of measures taken to protect data at the operating level. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

CVE-2026-12955

The CVE-2026-12955 entry describes a vulnerability in the GDPR Cookie Consent plugin for WordPress (versions up to 4.3.6) where missing capability checks and nonce verification in the gdpr_cookie_consent_ajax_save_schedule_scan() function (wp_ajax_gcc_save_schedule_scan) allow authenticated users...

CVE-2026-14475 Cookie Banner for GDPR / CCPA <= 4.3.6 - Authenticated (Administrator+) SQL Injection via 'scan_id' Parameter

The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via the 'scanid' parameter in all versions up to, and including, 4.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

WordPress Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin <= 4.3.6 - Authenticated (Administrator+) SQL Injection vulnerability

Authenticated Administrator+ SQL Injection vulnerability discovered by PRISM in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 4.3.6...

WordPress Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin <= 4.3.6 - Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Scan Schedule Modification vulnerability discovered by PRISM in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 4.3.6...

EUVD-2026-42562

The DSGVO All in one for WP plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 4.9. This is due to the dsgvoresetpolicyservicefunc function lacking both capability checks and nonce verification while processing user-supplied parameters to reset plugin...

ROS-20260709-73-0030

The vulnerability in Portainer-Ce is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...

ROS-20260708-73-0043

The vulnerability in ImageMagick 7 is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260708-73-0042

The vulnerability in ImageMagick is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the HTTPConnection.urlopen() method in the HTTP library of the Urllib3 Python programming language, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the HTTPConnection.urlopen method in the Python HTTP library, Urllib3, is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The Cost of Non-Compliance: Why AI Governance Is the New Enterprise Imperative

AI governance helps enterprises control tool use, reduce compliance risk, protect customer data, and avoid fines as teams adopt AI faster than policy...

The vulnerability of 7-Zip, related to the breach of data protection mechanisms, allows attackers to circumvent existing security measures and perform spear-phishing attacks.

The vulnerability of 7-Zip refers to a flaw in the data protection mechanism implemented by Mark of the Web MOTW. Exploiting this vulnerability allows attackers to bypass existing security measures and perform spear-phishing attacks...

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

webkitgtk: An app may be able to access sensitive user data

A flaw was found in WebKitGTK. Processing or loading malicious web content can allow an app to access sensitive user data due to improper data protection...

webkitgtk: An app may be able to access sensitive user data

A flaw was found in WebKitGTK. Processing or loading malicious web content can allow an app to access sensitive user data due to improper data protection...

Уязвимость компонента Passwords браузера Google Chrome, позволяющая нарушителю получить доступ к защищаемой информации

Уязвимость компонента Passwords браузера Google Chrome связана с нарушением механизма защиты данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к защищаемой информации с помощью специально созданной HTML-страницы...