CVE-2026-118983

The VikWidgetsLoader WordPress plugin, in versions prior to 1.12.3 , is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists because the plugin fails to properly sanitize or escape several block attributes before they are output as HTML attributes. An attacker with Contributor role p...

Learn.BlueJam

BlueJam KNOB Attack With KNOB your Bluetooth speakers can be monitored for iPhone and Android use. The first way you can do this is to step up the KNOB attack. The second is to let the KNOB attack decrypt or weaken Bluetooth traffic between the two devices. By doing this, you will have an...

CVE-2026-72580 duhow xiaoai-patch - OS Command Injection in /mute and /unmute Endpoints

An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running the patch. The /mute and /unmute endpoint handlers in api/main.py pass the user-supplied silent query parameter directl...

CVE-2026-72580

An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running the patch. The /mute and /unmute endpoint handlers in api/main.py pass the user-supplied silent query parameter directl...

CVE-2026-72580

An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running the patch. The /mute and /unmute endpoint handlers in api/main.py pass the user-supplied silent query parameter directl...

EUVD-2026-55226

An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running the patch. The /mute and /unmute endpoint handlers in api/main.py pass the user-supplied silent query parameter directl...

PT-2026-69464

Name of the Vulnerable Software and Affected Versions duhow/xiaoai-patch versions prior to commit fb07049 Description An OS command injection flaw allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers. The issue occurs because the /mute and /unmute endpoints in...

CVE-2026-72580: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running the patch. The /mute and /unmute endpoint handlers in api/main.py pass the user-supplied silent query parameter directl...

A Usable and Secure Bengali CAPTCHA

Text-based CAPTCHAs Completely Automated Public Turing test to tell Computers and Humans Apart have traditionally been a simple, affordable, lightweight, yet very effective security mechanism to distinguish human users from automated bots on the web, serving as a preventive measure against many...

Aembit Announces Agenda and Speaker Lineup for NHIcon 2026 on Agentic AI Security

Silver Spring, Maryland, 15th January 2026, CyberNewsWire...

Hundreds of Millions of Audio Devices Need a Patch to Prevent Wireless Hacking and Tracking

Flaws in how 17 models of headphones and speakers use Google’s one-tap Fast Pair Bluetooth protocol have left devices open to eavesdroppers and stalkers...

CVE-2023-25977

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in 9seeds.Com CPT – Speakers plugin = 1.1 versions...

EUVD-2021-24992

Malware in sbrugna...

EUVD-2018-3355

Malware in sbrugna...

EUVD-2021-24995

Malware in sbrugna...

EUVD-2025-27577

Malicious code in bioql PyPI...

EUVD-2022-51376

Malicious code in bioql PyPI...

EUVD-2023-29864

Malicious code in bioql PyPI...

Living Security Unveils HRMCon 2025 Speakers as Report Finds Firms Detect Just 19% of Human Risk

Austin / TX, United States, 25th September 2025, CyberNewsWire...

Malicious ISO File Used in Romance Scam Targeting German Speakers

Sublime Security reveals a cunning romance/adult-themed scam targeting German speakers, leveraging Keitaro TDS to deliver an AutoIT-based malware loader. Learn how this sophisticated campaign operates, its deceptive tactics, and the hidden payload...