Aggregator

CVE-2026-23885 | AlchemyCMS alchemy_cms up to 7.4.11/8.0.2 resources_helper.rb eval eval injection (GHSA-2762-657x-v979 / EUVD-2026-3281)

Vuldb Updates
3 months ago
A vulnerability was found in AlchemyCMS alchemy_cms up to 7.4.11/8.0.2. It has been classified as problematic. Affected is the function eval of the file app/helpers/alchemy/resources_helper.rb. This manipulation causes improper neutralization of directives in dynamically evaluated code. This vulnerability is tracked as CVE-2026-23885. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-23886 | swift-otel swift-w3c-trace-context up to 1.0.3 OpenTelemetry Protocol denial of service (GHSA-mvpq-2v8x-ww6g / EUVD-2026-3282)

Vuldb Updates
3 months ago
A vulnerability classified as problematic was found in swift-otel swift-w3c-trace-context up to 1.0.3. This affects an unknown function of the component OpenTelemetry Protocol. Executing a manipulation can lead to denial of service. This vulnerability is handled as CVE-2026-23886. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-23880 | HackUCF OnboardLite input validation (GHSA-93w8-83cg-h89g / EUVD-2026-3283)

Vuldb Updates
3 months ago
A vulnerability has been found in HackUCF OnboardLite and classified as problematic. Affected by this vulnerability is an unknown functionality. This manipulation causes improper input validation. The identification of this vulnerability is CVE-2026-23880. It is possible to initiate the attack remotely. There is no exploit available. Applying a patch is the recommended action to fix this issue.
vuldb.com

CVE-2026-23877 | swingmx swingmusic up to 2.1.3 /folder/dir-browser list_folders path traversal (GHSA-pj88-9xww-gxmh / EUVD-2026-3284)

Vuldb Updates
3 months ago
A vulnerability marked as problematic has been reported in swingmx swingmusic up to 2.1.3. This affects the function list_folders of the file /folder/dir-browser. Performing a manipulation results in path traversal: '/../filedir'. This vulnerability is reported as CVE-2026-23877. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.
vuldb.com

Ransomware 'Most Wanted': Cops Seek Head of Black Basta

DataBreachToday.com
3 months ago
Crackdown Targets Multiple Members of Cybercrime Group, Including 'Hash Crackers'
Police raided two suspected members of the notorious Black Basta ransomware group - tied to over 600 victims worldwide and many millions in ransom payments - in Ukraine and issued an international arrest warrant for the Russian national suspected of being the operation's founder and ringleader.

HHS Urges Health Sector to Harden Security of PHI, Devices

DataBreachToday.com
3 months ago
Feds Pushing HIPAA Regulated Entities to Bolster Security Risk Management
Federal regulators are advising regulated healthcare firms and their third-party vendors to harden systems, software and medical devices to better safeguard protected health information. Hardening is a necessary measure for protecting data privacy security - but also in protecting patient safety.

Aikido Gets $60M Series B to Scale, Automate AI Pen Testing

DataBreachToday.com
3 months ago
5x Revenue Growth, $1B Valuation Fuel Investment in Code Security Innovation
Backed by DST Global, Aikido Security's $60 million Series B will fund global expansion and boost its AI-powered security tools. CEO Willem Delbare said the firm's autonomous pen-testing and code remediation capability cuts cost, boosts software resilience and already outperforms humans.

Over-the-Air Software Updates Pose Risks to Vehicles

DataBreachToday.com
3 months ago
eSync Alliance Chair Shrikant Acharya on How Standardization Can Prevent Breaches
Over-the-air updates are an irreplaceable part of software-defined vehicles, giving manufacturers a convenient way of remotely fixing and upgrading vehicles. If not appropriately secured, over-the-air updates can become a gateway for data theft, malware injection, vehicle theft and even injury.

Managed ad