Aggregator

SLH

Dark Feed IO
2 months 1 week ago

You must login to view this content

cohenido

CVE-2026-1053 | Ivory Search Plugin up to 5.5.13 on WordPress Setting menu_gcse/nothing_found_text cross site scripting

VulDB Recent Entries
2 months 1 week ago
A vulnerability, which was classified as problematic, has been found in Ivory Search Plugin up to 5.5.13 on WordPress. This issue affects some unknown processing of the component Setting Handler. The manipulation of the argument menu_gcse/nothing_found_text leads to cross site scripting. This vulnerability is uniquely identified as CVE-2026-1053. The attack is possible to be carried out remotely. No exploit exists.
vuldb.com

CVE-2026-1381 | Order Minimum Maximum Amount Limits for WooCommerce Plugin Setting cross site scripting

VulDB Recent Entries
2 months 1 week ago
A vulnerability labeled as problematic has been found in Order Minimum Maximum Amount Limits for WooCommerce Plugin up to 4.6.8 on WordPress. Affected is an unknown function of the component Setting Handler. The manipulation results in cross site scripting. This vulnerability is reported as CVE-2026-1381. The attack can be launched remotely. No exploit exists.
vuldb.com

CVE-2026-1054 | RegistrationMagic Plugin up to 6.0.7.4 on WordPress Setting rm_set_otp authorization

VulDB Recent Entries
2 months 1 week ago
A vulnerability identified as problematic has been detected in RegistrationMagic Plugin up to 6.0.7.4 on WordPress. This impacts the function rm_set_otp of the component Setting Handler. The manipulation leads to missing authorization. This vulnerability is documented as CVE-2026-1054. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2026-1389 | Document Embedder Plugin up to 2.0.4 on WordPress ID resource injection

VulDB Recent Entries
2 months 1 week ago
A vulnerability categorized as problematic has been discovered in Document Embedder Plugin up to 2.0.4 on WordPress. This affects the function bplde_save_document_library/bplde_get_single/bplde_delete_document_library. Executing a manipulation of the argument ID can lead to improper control of resource identifiers. This vulnerability is registered as CVE-2026-1389. It is possible to launch the attack remotely. No exploit is available.
vuldb.com

CVE-2026-1400 | AI Engine Plugin up to 3.3.2 on WordPress rest_helpers_update_media_metadata filename unrestricted upload

VulDB Recent Entries
2 months 1 week ago
A vulnerability was found in AI Engine Plugin up to 3.3.2 on WordPress. It has been rated as critical. The impacted element is the function rest_helpers_update_media_metadata. Performing a manipulation of the argument filename results in unrestricted upload. This vulnerability is cataloged as CVE-2026-1400. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

When Hospitals Go Dark and Browsers Turn Rogue

Security Boulevard
2 months 1 week ago

At 6:32 a.m., a hospital in Belgium pulled the plug on its own servers. Something was already inside the network, and no one could say how far it had spread. By mid-morning, scheduled procedures were canceled. Critical patients were transferred out with help from the Red Cross. Staff went back to paper. Emergency services ran at reduced […]

The post When Hospitals Go Dark and Browsers Turn Rogue appeared first on ColorTokens.

The post When Hospitals Go Dark and Browsers Turn Rogue appeared first on Security Boulevard.

Tanuj Mitra

CVE-2026-1506 | D-Link DIR-615 4.10 MAC Filter Configuration /adv_mac_filter.php mac os command injection

VulDB Recent Entries
2 months 1 week ago
A vulnerability was found in D-Link DIR-615 4.10. It has been classified as critical. Impacted is an unknown function of the file /adv_mac_filter.php of the component MAC Filter Configuration. This manipulation of the argument mac causes os command injection. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is tracked as CVE-2026-1506. The attack is possible to be carried out remotely. Moreover, an exploit is present.
vuldb.com

CVE-2026-1505 | D-Link DIR-615 4.10 URL Filter /set_temp_nodes.php os command injection

VulDB Recent Entries
2 months 1 week ago
A vulnerability was found in D-Link DIR-615 4.10 and classified as critical. This issue affects some unknown processing of the file /set_temp_nodes.php of the component URL Filter. The manipulation results in os command injection. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is identified as CVE-2026-1505. The attack can be executed remotely. Additionally, an exploit exists.
vuldb.com

CVE-2025-12810 | Delinea Secret Server On-Prem 11.8.1/11.9.6/11.9.25 Password Rotation improper authentication

VulDB Recent Entries
2 months 1 week ago
A vulnerability has been found in Delinea Secret Server On-Prem 11.8.1/11.9.6/11.9.25 and classified as critical. This vulnerability affects unknown code of the component Password Rotation Module. The manipulation leads to improper authentication. This vulnerability is referenced as CVE-2025-12810. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.
vuldb.com

Managed ad