PT-2026-95160

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.8.5 Description An unauthenticated GET endpoint at 'web/html/socio/sistema/controller/deletar socios.php' validates the chave parameter against a hardcoded chave correta value found in the public source repository. A...

CVE-2026-54097

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.6, a low-privileged authenticated user of filebrowser with create + delete permissions in their own isolated scope can silently destroy share-link...

EUVD-2024-49596

Malicious code in bioql PyPI...

PT-2022-10813

Name of the Vulnerable Software and Affected Versions IBM CloudPak for Multicloud Monitoring versions 2.0 through 2.3 Description The issue concerns containers running in privileged mode, which can lead to host information leakage or destruction if unauthorized access to these containers allows t...

Iran: We Have Discovered 'Hidden Agenda' Of Oil Ministry Attack

The Iranian government has discovered what it describes as a ‘hidden agenda’ behind a recent malware attack on the country’s Oil Ministry, according to a report published by the FARS News Agency. The statement, from Deputy Oil Minister Hamdollah Mohammadnejad, confirmed earlier reports that the...