Aggregator

CVE-2025-31200

CVE Trends
2 months 2 weeks ago
Currently trending CVE - Hype Score: 12 - A memory corruption issue was addressed with improved bounds checking. This issue is fixed in tvOS 18.4.1, visionOS 2.4.1, iOS iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple ...

Play

Dark Feed IO
2 months 2 weeks ago

You must login to view this content

cohenido

Play

Dark Feed IO
2 months 2 weeks ago

You must login to view this content

cohenido

News alert: Reflectiz study finds most third-party web apps access sensitive data without justification

Security Boulevard
2 months 2 weeks ago

BOSTON, Jan. 21, 2026, CyberNewswire — Reflectiz today announced the release of its 2026 State of Web Exposure Research, revealing a sharp escalation in client?side risk across global websites, driven primarily by third?party applications, marketing tools, and unmanaged digital … (more…)

The post News alert: Reflectiz study finds most third-party web apps access sensitive data without justification first appeared on The Last Watchdog.

The post News alert: Reflectiz study finds most third-party web apps access sensitive data without justification appeared first on Security Boulevard.

cybernewswire

Fully patched FortiGate firewalls are getting compromised via CVE-2025-59718?

Help Net Security
2 months 2 weeks ago

CVE-2025-59718, a critical authentication bypass flaw that attackers exploited in December 2025 to compromise FortiGate appliances, appears to persist in newer, purportedly fixed releases of the underlying FortiOS. According to Fortinet, CVE-2025-59718 had been fixed in FortiOS versions 7.6.4 or above, 7.4.9 or above, 7.2.12 or above, and 7.0.18 or above. But on Tuesday, a Fortinet administrator posted on Reddit asking whether other enterprise admins had observed attackers logging in and creating new accounts on … More →

The post Fully patched FortiGate firewalls are getting compromised via CVE-2025-59718? appeared first on Help Net Security.

Zeljka Zorz

CVE-2026-0920 | LA-Studio Element Kit for Elementor Plugin up to 1.5.6.3 on WordPress User Creation ajax_register_handle lakit_bkrole Remote Code Execution

VulDB Recent Entries
2 months 2 weeks ago
A vulnerability categorized as critical has been discovered in LA-Studio Element Kit for Elementor Plugin up to 1.5.6.3 on WordPress. This vulnerability affects the function ajax_register_handle of the component User Creation Handler. Such manipulation of the argument lakit_bkrole leads to Remote Code Execution. This vulnerability is traded as CVE-2026-0920. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2025-68135 | EVerest everest-core prior 2025.10.0 improper check or handling of exceptional conditions

VulDB Recent Entries
2 months 2 weeks ago
A vulnerability has been found in EVerest everest-core and classified as problematic. This impacts an unknown function. Performing a manipulation results in improper check or handling of exceptional conditions. This vulnerability is cataloged as CVE-2025-68135. The attack must originate from the local network. There is no exploit available. The affected component should be upgraded.
vuldb.com

Managed ad