CLSA-2026-1779203719 php: Fix of 6 CVEs

CVE-2026-6722: fix stale SOAPGLOBAL refmap pointer with Apache Map GHSA-85c2-q967-79q5 - CVE-2026-7262: fix broken Apache map value NULL check in soap encoder GHSA-hmxp-6pc4-f3vv - CVE-2026-7568: fix signed integer overflow of char array offset in metaphone GHSA-96wq-48vp-hh57 - CVE-2026-7261:...

CLSA-2026-1779125894 php: Fix of 7 CVEs

CVE-2026-7258: fix out-of-bounds read in urldecode via signed-char to ctype.h GHSA-m8rr-4c36-8gq4 - CVE-2026-6722: fix stale SOAPGLOBAL refmap pointer with Apache Map GHSA-85c2-q967-79q5 - CVE-2026-7259: fix null pointer dereference in phpmbcheckencoding via mberegsearchinit GHSA-wm6j-2649-pv75 -...

EUVD-2014-4472

Malware in sbrugna...

RTM Locker: Emerging Cybercrime Group Targeting Businesses with Ransomware

Cybersecurity researchers have detailed the tactics of a "rising" cybercriminal gang called "Read The Manual" RTM Locker that functions as a private ransomware-as-a-service RaaS provider and carries out opportunistic attacks to generate illicit profit. "The 'Read The Manual' Locker gang uses...

RTM Locker: Emerging Cybercrime Group Targeting Businesses with Ransomware

Cybersecurity researchers have detailed the tactics of a "rising" cybercriminal gang called "Read The Manual" RTM Locker that functions as a private ransomware-as-a-service RaaS provider and carries out opportunistic attacks to generate illicit profit. "The 'Read The Manual' Locker gang uses...

RTM Cybergang Adds New Quoter Ransomware to Crime Spree

The Russian-speaking group behind the infamous RTM banking trojan is now packing a trifecta of threats as it turns up the heat – part of a massive new money-grab campaign. Beyond the banking malware it is known for, attackers have enlisted a recently-discovered ransomware family called Quoter as...

CVE-2014-4545

Multiple cross-site scripting XSS vulnerabilities in pqdialog.php in the Pro Quoter plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 leftorright or 2 author parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in pqdialog.php in the Pro Quoter plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 leftorright or 2 author parameter...

CVE-2014-4545

Multiple cross-site scripting XSS vulnerabilities in pqdialog.php in the Pro Quoter plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 leftorright or 2 author parameter...

CVE-2014-4545

The CVE-2014-4545 entry concerns the WordPress Pro Quoter plugin (versions 1.0 and earlier). It describes multiple XSS vulnerabilities in pq_dialog.php allowing an attacker to inject arbitrary script/HTML via the leftorright or author parameters due to insufficient input sanitization. Affected co...

PT-2014-5967

Name of the Vulnerable Software and Affected Versions Pro Quoter plugin versions 1.0 and earlier for WordPress Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the leftorright ...

CVE-2014-4545: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in pqdialog.php in the Pro Quoter plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 leftorright or 2 author parameter...

WordPress Pro Quoter Plugin <= 1.0 - Multiple XSS

Because of these vulnerabilities in pqdialog.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...