CVE-2026-87846

The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier's...

Uber: Possible to View Driver Waybill via Driver UUID

Due to an access control vulnerability it was possible to view the waybill of an arbitrary driver/partner by supplying their UUID to the /rt/drivers/DRIVERPARTNERUUID/waybill endpoint...

Threat Outbreak Alert RuleID13309: Email Messages Distributing Malicious Software on January 28, 2015

Medium Alert ID: 37208 First Published: 2015 January 28 19:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13309 may contain the following files: Name |...