Qilin
You must login to view this content
Aggregator
Qilin
1 month 2 weeks ago
You must login to view this content
cohenido
Qilin
1 month 2 weeks ago
You must login to view this content
cohenido
Anthropic rolls out embedded security scanning for Claude
1 month 2 weeks ago
The feature, currently limited to a small group of testers, will provide an easy-to-use feature that scans AI-generated code and offers up patching solutions.
The post Anthropic rolls out embedded security scanning for Claude appeared first on CyberScoop.
djohnson
CVE-2025-13176
1 month 2 weeks ago
Currently trending CVE - Hype Score: 1 - Planting a custom configuration file
in
ESET Inspect Connector allow load a malicious DLL.
Attackers Use New Tool to Scan for React2Shell Exposure
1 month 2 weeks ago
Researchers say threat actors wielded the sophisticated — and unfortunately named — toolkit to target high-value networks for React2Shell exploitation.
Nate Nelson
Roundcube security advisory (AV25-309) - Update 1
1 month 2 weeks ago
On June 1, 2025, Roundcube published security advisories to address vulnerabilities.
Canadian Centre for Cyber Security
CVE-2025-62326 | HCL Digital Experience 9.5 Administrative User Interface cross site scripting (KB0128824)
1 month 2 weeks ago
A vulnerability categorized as problematic has been discovered in HCL Digital Experience 9.5. The impacted element is an unknown function of the component Administrative User Interface. Such manipulation leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2025-62326. The attack can be launched remotely. No exploit exists.
vuldb.com
CVE-2026-2913 | libvips up to 8.19.0 libvips/iofuncs/source.c vips_source_read_to_memory heap-based overflow (Issue 4857)
1 month 2 weeks ago
A vulnerability was found in libvips up to 8.19.0. It has been rated as problematic. The affected element is the function vips_source_read_to_memory of the file libvips/iofuncs/source.c. This manipulation causes heap-based buffer overflow.
This vulnerability is handled as CVE-2026-2913. It is possible to launch the attack on the local host. Additionally, an exploit exists.
Applying a patch is the recommended action to fix this issue.
The confirmation of the bugfix mentions: "[T]he impact of this is negligible, since this only affects custom seekable sources larger than 4 GiB (and the crash occurs in user code rather than libvips itself)."
vuldb.com
CVE-2026-2912 | code-projects Online Reviewer System 1.0 studentresult-view.php test_id sql injection
1 month 2 weeks ago
A vulnerability was found in code-projects Online Reviewer System 1.0. It has been declared as critical. Impacted is an unknown function of the file /system/system/students/assessments/results/studentresult-view.php. The manipulation of the argument test_id results in sql injection.
This vulnerability is known as CVE-2026-2912. It is possible to launch the attack remotely. Furthermore, an exploit is available.
vuldb.com
CVE-2026-2911 | Tenda FH451 up to 1.0.0.9 /goform/GstDhcpSetSer buffer overflow
1 month 2 weeks ago
A vulnerability was found in Tenda FH451 up to 1.0.0.9. It has been classified as critical. This issue affects some unknown processing of the file /goform/GstDhcpSetSer. The manipulation leads to buffer overflow.
This vulnerability is traded as CVE-2026-2911. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com
Submit #755224: libvips (libvips project) libvips 8.19.0 Integer Overflow to Buffer Overflow [Accepted]
1 month 2 weeks ago
Submit #755224 / VDB-347222
Niebelungen
CVE-2026-2910 | Tenda HG9 300001138 /boaform/formPing6 pingAddr stack-based overflow
1 month 2 weeks ago
A vulnerability was found in Tenda HG9 300001138 and classified as critical. This vulnerability affects unknown code of the file /boaform/formPing6. Executing a manipulation of the argument pingAddr can lead to stack-based buffer overflow.
This vulnerability appears as CVE-2026-2910. The attack may be performed from remote. In addition, an exploit is available.
vuldb.com
CVE-2026-2909 | Tenda HG9 300001138 Diagnostic Ping Endpoint /boaform/formPing pingAddr stack-based overflow
1 month 2 weeks ago
A vulnerability has been found in Tenda HG9 300001138 and classified as critical. This affects an unknown part of the file /boaform/formPing of the component Diagnostic Ping Endpoint. Performing a manipulation of the argument pingAddr results in stack-based buffer overflow.
This vulnerability is reported as CVE-2026-2909. The attack is possible to be carried out remotely. Moreover, an exploit is present.
vuldb.com
CVE-2026-2908 | Tenda HG9 300001138 Loopback Detection Configuration Endpoint /boaform/formLoopBack Ethtype stack-based overflow
1 month 2 weeks ago
A vulnerability, which was classified as critical, was found in Tenda HG9 300001138. Affected by this issue is some unknown functionality of the file /boaform/formLoopBack of the component Loopback Detection Configuration Endpoint. Such manipulation of the argument Ethtype leads to stack-based buffer overflow.
This vulnerability is documented as CVE-2026-2908. The attack can be executed remotely. Additionally, an exploit exists.
vuldb.com
CVE-2026-2907 | Tenda HG9 300001138 GPON Configuration Endpoint /boaform/formgponConf fmgpon_loid/fmgpon_loid_password stack-based overflow
1 month 2 weeks ago
A vulnerability, which was classified as critical, has been found in Tenda HG9 300001138. Affected by this vulnerability is an unknown functionality of the file /boaform/formgponConf of the component GPON Configuration Endpoint. This manipulation of the argument fmgpon_loid/fmgpon_loid_password causes stack-based buffer overflow.
This vulnerability is registered as CVE-2026-2907. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
vuldb.com
CVE-2026-2906 | Tenda HG9 300001138 Samba Configuration Endpoint /boaform/formSamba sambaCap stack-based overflow
1 month 2 weeks ago
A vulnerability classified as critical was found in Tenda HG9 300001138. Affected is an unknown function of the file /boaform/formSamba of the component Samba Configuration Endpoint. The manipulation of the argument sambaCap results in stack-based buffer overflow.
This vulnerability is cataloged as CVE-2026-2906. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2026-2905 | Tenda HG9 300001138 Wireless Configuration Endpoint /boaform/formWlanSetup ssid stack-based overflow
1 month 2 weeks ago
A vulnerability classified as critical has been found in Tenda HG9 300001138. This impacts an unknown function of the file /boaform/formWlanSetup of the component Wireless Configuration Endpoint. The manipulation of the argument ssid leads to stack-based buffer overflow.
This vulnerability is listed as CVE-2026-2905. The attack may be initiated remotely. In addition, an exploit is available.
vuldb.com
Lasso Security Adds Ability to Track AI Agent Behavior
1 month 2 weeks ago
Lasso Security this week added an ability to analyze the behavior of an artificial intelligence (AI) agent to better understand what guardrails and controls need to be applied. Ophir Dror, chief product officer for Lasso Security, said Intent Deputy adds a behavioral intent framework to the company’s platform for securing AI applications and agents. The..
The post Lasso Security Adds Ability to Track AI Agent Behavior appeared first on Security Boulevard.
Michael Vizard
Submit #755219: code-projects Online Reviewer System V1 SQL Injection [Accepted]
1 month 2 weeks ago
Submit #755219 / VDB-347221
SHU for security