CVE-2026-81562 AlexGladkov claude-in-mobile client.ts execSync os command injection

A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os command injection. The attack requires a local approach. The exploit has been released to the public and may be use...

What the Data Says About AI in Security Operations in 2026

AI is officially mainstream in security operations. According to Prophet Security's State of AI in Security Operations 2026 report produced from ViB’s survey of 250+ cybersecurity pros, 40% of security teams now use AI daily. Another 56% are currently testing it out, and only 4% have no plans to...

USN-8685-1: bzip2 vulnerability

It was discovered that bzip2 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a crash, resulting in a denial of service...

USN-8685-1 bzip2 vulnerability

It was discovered that bzip2 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a crash, resulting in a denial of service...

RingReaper

RingReaper RingReaper è un agente di post-esplorazione per Linux progettato per chi ha bisogno di operare in modo stealth, riducendo al minimo le possibilità di essere rilevato da soluzioni EDR. L'idea alla base di questo progetto era sfruttare iouring , la nuova interfaccia I/O asincrona del...

CVE-2026-5218

Softtr Informatics Technology Trading Limited Company E-Commerce Pack (before 5.03.01.49 ) is affected by an improper neutralization of script-related HTML tags (basic XSS), allowing Cross-Site Scripting in a web page. The vulnerability is rated CVSS 4.3 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S...

CVE-2026-5218 HTML Injection in Softtr's E-Commerce Pack

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting XSS. This issue affects E-Commerce Pack: before 5.03.01.49...

EUVD-2026-67002

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting XSS. This issue affects E-Commerce Pack: before 5.03.01.49...

CVE-2026-5218 HTML Injection in Softtr's E-Commerce Pack

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting XSS. This issue affects E-Commerce Pack: before 5.03.01.49...

USN-8684-1: Perl vulnerabilities

It was discovered that Perl incorrectly handled certain arguments to Socket and pack/unpack functions. An attacker could possibly use this issue to read sensitive information from memory. CVE-2026-12087, CVE-2026-57432 It was discovered that Perl incorrectly handled regular expressions with a lar...

USN-8684-1 perl vulnerabilities

It was discovered that Perl incorrectly handled certain arguments to Socket and pack/unpack functions. An attacker could possibly use this issue to read sensitive information from memory. CVE-2026-12087, CVE-2026-57432 It was discovered that Perl incorrectly handled regular expressions with a lar...

CVE-2026-73427

A flaw was found in Trix, a rich text editor. A remote attacker could exploit this vulnerability by convincing a victim to drag and drop a specially crafted JSON payload into an editor using the Level0InputController. This could bypass sanitization and allow the injection of executable JavaScript...

CVE-2026-13586

A flaw was found in Bouncy Castle for Java. This vulnerability allows a remote attacker to cause a Denial of Service DoS by exploiting an iteration-count bound issue in the PKCS12 Message Authentication Code MAC and bag-decryption Key Derivation Function KDF. This could make the affected system...

CVE-2026-59641

A flaw was found in Bouncy Castle for Java. The S/MIME Secure/Multipurpose Internet Mail Extensions validator improperly trusts the signing time asserted by the signer during path validation. This could allow an attacker to bypass certificate path validation, potentially leading to the acceptance...

CVE-2026-58060

A flaw was found in Bouncy Castle for Java. A remote attacker could exploit a vulnerability where the HSS public-key level count is unbounded. This allows for a huge memory allocation during the verification process, leading to a denial of service DoS condition. This issue affects Bouncy Castle f...

CVE-2026-13506

A flaw was found in Bouncy Castle for Java. A remote attacker could exploit a vulnerability related to how the software processes lazy ASN.1 sequences, which can reset an internal nesting-depth guard. This issue could lead to a Denial of Service DoS, making the affected system or application...

CVE-2026-12817

A flaw was found in Bouncy Castle for Java. This vulnerability affects the OpenPGP Authenticated Encryption with Associated Data AEAD decryption process. Specifically, the system fails to verify the final authentication tag when processing data that is aligned in chunks. This oversight could allo...

CVE-2026-12185

A flaw was found in Bouncy Castle for Java. The BKS/UBER keystore component allocates memory based on untrusted length values before performing an integrity check. A remote attacker could exploit this vulnerability by providing a specially crafted keystore, leading to excessive memory allocation...

CVE-2026-12802

A flaw was found in Bouncy Castle for Java. This vulnerability allows a remote attacker to compromise the integrity of data during the decryption of Cryptographic Message Syntax CMS AuthEnvelopedData. The software fails to properly enforce the tag-length, which could enable an attacker to...

CVE-2026-81668

A flaw was found in Katello where the Content View Filter Rules API does not properly enforce authorization on the parent Content View Filter. An authenticated, low-privileged user with Content View permissions in one organization may be able to access and modify filter rules belonging to a Conte...