Aggregator

Tudou Guarantee Marketplace Halts Telegram Transactions After Processing Over $12 Billion

The Hackers News
3 months ago
A Telegram-based guarantee marketplace known for advertising a broad range of illicit services appears to be winding down its operations, according to new findings from Elliptic. The blockchain intelligence company said Tudou Guarantee has effectively ceased transactions through its public Telegram groups following a period of significant growth. The marketplace is estimated to have processed
The Hacker News

How to Configure KeyLocker for JarSigner using the DigiCert KSP Library?

Security Boulevard
3 months ago

Digitally signing Java applications improves authenticity, integrity, and trust. DigiCert KeyLocker allows you to sign .jar files securely using keys stored in DigiCert’s cloud-based Hardware Security Modules (HSMs) and the DigiCert KSP Library. This guide explains how to establish your environment and use JarSigner to sign Java applications from KeyLocker. What Is DigiCert KeyLocker? DigiCert… Read More How to Configure KeyLocker for JarSigner using the DigiCert KSP Library?

The post How to Configure KeyLocker for JarSigner using the DigiCert KSP Library? appeared first on SignMyCode - Resources.

The post How to Configure KeyLocker for JarSigner using the DigiCert KSP Library? appeared first on Security Boulevard.

Janki Mehta

WhisperPair Attack Allows Hijacking of Laptops, Earbuds Without User Consent – Millions Affected

Cyber Security News
3 months ago

A critical vulnerability in Google’s Fast Pair protocol that allows attackers to hijack Bluetooth audio accessories and track users without their knowledge or consent.​ Security researchers from KU Leuven have uncovered a vulnerability, tracked as CVE-2025-36911 and dubbed WhisperPair, that affects hundreds of millions of wireless earbuds, headphones, and speakers from major manufacturers. Including Sony, […]

The post WhisperPair Attack Allows Hijacking of Laptops, Earbuds Without User Consent – Millions Affected appeared first on Cyber Security News.

Abinaya

Threat Actors Leverage Google Ads to Weaponize PDF Editor with TamperedChef

Cyber Security News
3 months ago

A malvertising campaign identified in September 2025 has brought a significant threat to Windows users worldwide. Attackers created fake PDF editing applications and promoted them through Google Ads to distribute a dangerous information-stealing malware called TamperedChef. The malware targets users searching for appliance manuals and PDF editing tools online, exploiting common search behaviors to deliver […]

The post Threat Actors Leverage Google Ads to Weaponize PDF Editor with TamperedChef appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2026-0608 | Head Meta Data Plugin up to 20251118 on WordPress head-meta-data cross site scripting

VulDB Recent Entries
3 months ago
A vulnerability was found in Head Meta Data Plugin up to 20251118 on WordPress. It has been classified as problematic. This vulnerability affects unknown code. The manipulation of the argument head-meta-data leads to cross site scripting. This vulnerability is uniquely identified as CVE-2026-0608. The attack is possible to be carried out remotely. No exploit exists.
vuldb.com

CVE-2025-15380 | NotificationX Plugin up to 3.2.0 on WordPress nx-preview cross site scripting

VulDB Recent Entries
3 months ago
A vulnerability has been found in NotificationX Plugin up to 3.2.0 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. Performing a manipulation of the argument nx-preview results in cross site scripting. This vulnerability is known as CVE-2025-15380. Remote exploitation of the attack is possible. No exploit is available.
vuldb.com

CVE-2026-0554 | NotificationX Plugin up to 3.1.11 on WordPress REST API Endpoint authorization

VulDB Recent Entries
3 months ago
A vulnerability, which was classified as problematic, was found in NotificationX Plugin up to 3.1.11 on WordPress. Affected by this vulnerability is an unknown functionality of the component REST API Endpoint. Such manipulation leads to missing authorization. This vulnerability is traded as CVE-2026-0554. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2025-15347 | Creator LMS Plugin up to 1.1.12 on WordPress Options Update get_items_permissions_check authorization

VulDB Recent Entries
3 months ago
A vulnerability, which was classified as problematic, has been found in Creator LMS Plugin up to 1.1.12 on WordPress. Affected is the function get_items_permissions_check of the component Options Update Handler. This manipulation causes missing authorization. This vulnerability appears as CVE-2025-15347. The attack may be initiated remotely. There is no available exploit.
vuldb.com

CVE-2025-15043 | The Events Calendar Plugin up to 6.15.13 on WordPress Data Migration start_migration/cancel_migration/revert_migration authorization

VulDB Recent Entries
3 months ago
A vulnerability classified as critical was found in The Events Calendar Plugin up to 6.15.13 on WordPress. This impacts the function start_migration/cancel_migration/revert_migration of the component Data Migration Handler. The manipulation results in missing authorization. This vulnerability is reported as CVE-2025-15043. The attack can be launched remotely. No exploit exists.
vuldb.com

CVE-2026-0548 | Tutor LMS Plugin up to 3.9.4 on WordPress Attachment Deletion delete_existing_user_photo authorization

VulDB Recent Entries
3 months ago
A vulnerability classified as problematic has been found in Tutor LMS Plugin up to 3.9.4 on WordPress. This affects the function delete_existing_user_photo of the component Attachment Deletion Handler. The manipulation leads to missing authorization. This vulnerability is documented as CVE-2026-0548. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

雷神众测漏洞周报2026.1.12-2026.1.18

雷神众测
3 months ago
雷神众测拥有该文章的修改和解释权。如欲转载或传播此文章，必须保证此文章的副本，包括版权声明等全部内容。声明雷神众测允许，不得任意修改或增减此文章内容，不得以任何方式将其用于商业目的。

Managed ad