P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two way C2...

CVE-2016-20098 Moderator Toolbox before 4.0.14 Stored XSS via Removal Reasons Configuration

Moderator Toolbox reddit-moderator-toolbox before 4.0.14 contains a stored cross-site scripting vulnerability in the removalreasons module, which inserts subreddit toolbox wiki fields into popup HTML without encoding. Attackers who can edit the toolbox wiki page can plant JavaScript in fields lik...

CVE-2016-20098 Moderator Toolbox before 4.0.14 Stored XSS via Removal Reasons Configuration

Moderator Toolbox reddit-moderator-toolbox before 4.0.14 contains a stored cross-site scripting vulnerability in the removalreasons module, which inserts subreddit toolbox wiki fields into popup HTML without encoding. Attackers who can edit the toolbox wiki page can plant JavaScript in fields lik...

CVE-2026-39453

Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantly reboots...

CVE-2026-104081

KodExplorer before 4.55 contains a path traversal vulnerability in the unzipprename function within app/function/helper.function.php, where a single non-recursive strreplace sanitization pass can be bypassed using crafted filenames like "....//", combined with PclZip's extract call in...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storagesync, crossplane-provider-aws-signer, crossplane-provider-aws-amp, crossplane-provider-azure-compute, cluster-api, crossplane-provider-aws-s3, crossplane-provider-aws-ce, cloud-sql-proxy, tofu-controller,...

CVE-2026-78660 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storagesync, crossplane-provider-aws-signer, crossplane-provider-aws-amp, crossplane-provider-azure-compute, cluster-api, crossplane-provider-aws-s3, crossplane-provider-aws-ce, cloud-sql-proxy, tofu-controller,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storagesync, crossplane-provider-aws-signer, crossplane-provider-aws-amp, crossplane-provider-azure-compute, cluster-api, crossplane-provider-azure-netapp, cloud-sql-proxy, tofu-controller, crossplane-provider-azure-powerbidedicated,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storagesync, crossplane-provider-aws-signer, crossplane-provider-aws-amp, crossplane-provider-azure-compute, cluster-api, crossplane-provider-aws-s3, caddy, cloud-sql-proxy, tofu-controller, crossplane-provider-azure-powerbidedicated,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storagesync, crossplane-provider-aws-apigateway, crossplane-provider-aws-signer, crossplane-provider-aws-amp, crossplane-provider-azure-compute, cluster-api, crossplane-provider-azure-netapp, crossplane-provider-aws-ce, cloud-sql-proxy,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storagesync, crossplane-provider-aws-apigateway, crossplane-provider-aws-signer, crossplane-provider-aws-amp, crossplane-provider-azure-compute, cluster-api, cloud-sql-proxy, tofu-controller, crossplane-provider-aws-ssoadmin, loki,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storagesync, crossplane-provider-aws-apigateway, crossplane-provider-aws-signer, crossplane-provider-aws-amp, crossplane-provider-azure-compute, cluster-api, cloud-sql-proxy, tofu-controller, crossplane-provider-aws-ssoadmin, loki,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storagesync, crossplane-provider-aws-apigateway, crossplane-provider-aws-signer, crossplane-provider-aws-amp, crossplane-provider-azure-compute, cluster-api, crossplane-provider-azure-netapp, crossplane-provider-aws-ce, cloud-sql-proxy,...

CVE-2026-78663 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storagesync, crossplane-provider-aws-signer, crossplane-provider-aws-amp, crossplane-provider-azure-compute, cluster-api, crossplane-provider-azure-netapp, cloud-sql-proxy, tofu-controller, crossplane-provider-azure-powerbidedicated,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storagesync, crossplane-provider-aws-signer, crossplane-provider-aws-amp, crossplane-provider-azure-compute, cluster-api, crossplane-provider-aws-s3, caddy, cloud-sql-proxy, tofu-controller, crossplane-provider-azure-powerbidedicated,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, kube-bench, external-dns, tofu-controller, local-static-provisioner, clickhouse-operator, dapr, node-feature-discovery...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: kargo, cloud-sql-proxy, external-dns, crossplane-provider-aws-memorydb, tofu-controller, vault-k8s, local-static-provisioner, clickhouse-operator, crossplane-provider-aws-s3, node-feature-discovery...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: loki, cloud-sql-proxy, kube-bench, external-dns, tofu-controller, vault-k8s, local-static-provisioner, dapr, node-feature-discovery...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: loki, cloud-sql-proxy, external-dns, tofu-controller, local-static-provisioner, clickhouse-operator, dapr, node-feature-discovery...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: loki, cloud-sql-proxy, kube-bench, external-dns, tofu-controller, vault-k8s, local-static-provisioner, dapr, node-feature-discovery...