BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

The Internet Systems Consortium ISC has released BIND 9.20.29 and 9.21.26 to fix fourteen security flaws it disclosed on 16 September in BIND 9, its open-source DNS server software. One of them affects any BIND server that answers DNS-over-HTTPS DoH. A sender with no credentials can crash the...

CVE-2026-50605 Privilege Escalation Vulnerability in NitroSense and PredatorSense Software

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. Insufficient access controls within a privileged service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, this could lead to...

CVE-2026-50605 Privilege Escalation Vulnerability in NitroSense and PredatorSense Software

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. Insufficient access controls within a privileged service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, this could lead to...

WordPress ShareOpenly plugin < 1.2.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by blacksolo1 in WordPress Plugin ShareOpenly versions 1.2.1...

WordPress User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin <= 3.16.1 - Unauthenticated Limited File Upload vulnerability

Unauthenticated Limited File Upload vulnerability discovered by Nir Yehoshua in WordPress Plugin Profile Builder versions = 3.16.1...

WordPress Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) plugin <= 9.8.1 - Missing Authorization to 2FA Bypass vulnerability

Missing Authorization to 2FA Bypass vulnerability discovered by Michael Holmquist in WordPress Plugin Really Simple SSL versions = 9.8.1...

WordPress OSM – OpenStreetMap plugin < 6.1.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Naoya Takahashi nakko in WordPress Plugin OSM versions 6.1.15...

WordPress Loops & Logic plugin <= 4.3.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Joshua Martinelle in WordPress Plugin Loops & Logic versions = 4.3.1...

WordPress JWT Authentication for WP REST APIs plugin <= 4.7.0 - Unauthenticated Authentication Method Downgrade vulnerability

Unauthenticated Authentication Method Downgrade vulnerability discovered by Choriyev Qahramon in WordPress Plugin WordPress REST API Authentication versions = 4.7.0...

WordPress Design Scuole Italia plugin 1.0-2.18.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by ? in WordPress Theme Design Scuole Italia versions 1.0-2.18.2...

WordPress Seraphinite Accelerator plugin < 2.29.24 - Subscriber+ DoS vulnerability

Subscriber+ DoS vulnerability discovered by Ángel PS drtz in WordPress Plugin Seraphinite Accelerator versions 2.29.24...

WordPress Design Scuole Italia plugin 2.6.0-2.18.1 - Unauthenticated Arbitrary File Donwload vulnerability

Unauthenticated Arbitrary File Donwload vulnerability discovered by ? in WordPress Theme Design Scuole Italia versions 2.6.0-2.18.1...

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

Cisco has warned of a fresh maximum-severity security flaw impacting Identity Services Engine ISE that has come under active exploitation. The vulnerability, tracked as CVE-2026-76460 CVSS score: 10.0, could allow an unauthenticated, remote attacker to bypass authentication. "This vulnerability i...

WordPress LearnPress plugin 4.2.6.4-4.4.6 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin LearnPress versions 4.2.6.4-4.4.6...

WordPress Optimole plugin 4.2.3-4.2.11 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Jakub Herman in WordPress Plugin Optimole versions 4.2.3-4.2.11...

WordPress MultiVendorX plugin 5.0.0-5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite vulnerability

Subscriber+ Arbitrary Store Data and Ownership Overwrite vulnerability discovered by Farid Narimanov in WordPress Plugin MultiVendorX versions 5.0.0-5.0.15...

agent-opfor

Emulación de adversario de código abierto para agentes de IA, aplicaciones LLM y servidores MCP. Prueba tu IA como lo haría un atacante real — desde tu CLI, tu IDE o una extensión de navegador que cualquiera en tu equipo puede usar. Sitio web · Documentación · GitHub · Extensión de navegador ·...

external_expat_AOSP10_r33_CVE-2022-23852

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

androidqf

androidqf androidqf Android Quick Forensics es una herramienta portátil para simplificar la adquisición de datos forenses relevantes de dispositivos Android. androidqf está diseñado para proporcionar una utilidad multiplataforma simple y portátil que permita adquirir rápidamente datos de...

awesome-canbus

Awesome CAN Bus 🚜 Awesome Tools, Hardware And Resources For CAN Bus This curated list helps a reverse engineering CAN bus devices with lightly specializing in automotive embedded controller software and communication understanding. Note Items marked as "🔝" are highly recommended. Permanent URL to...