Aggregator

SLH

Dark Feed IO
4 months 1 week ago

You must login to view this content

cohenido

DigitStealer Gains Attention as macOS-Targeting Infostealer Exposes Key Infrastructure Weaknesses

Cyber Security News
4 months 1 week ago

DigitStealer, a sophisticated information-stealing malware targeting macOS systems, has recently surged in activity, drawing significant attention from the cybersecurity community. First emerging in late 2025, this malicious software specifically targets Apple M2 devices, distinguishing itself from generic threats. It operates primarily by harvesting sensitive user data, including information from 18 different cryptocurrency wallets, browser data, […]

The post DigitStealer Gains Attention as macOS-Targeting Infostealer Exposes Key Infrastructure Weaknesses appeared first on Cyber Security News.

Tushar Subhra Dutta

Weekly Report: JPCERT/CCが「Windowsのイベントログ分析トレーニング用コンテンツ」を公開

統合版 JPCERT/CC
4 months 1 week ago
JPCERT/CCは、「Windowsのイベントログ分析トレーニング用コンテンツ」を公開しました。標的型攻撃によってセキュリティインシデントが発生した際の調査手法に関するトレーニングコンテンツ資料です。実際のインシデントにおいて、外部に公開している機器の脆弱性や設定不備を突かれることによって内部ネットワークに侵入され、最終的にActive Directoryの管理者権限を侵害されるといった手法が増加しています。このことから、本コンテンツはActive Directoryに注目したトレーニングコンテンツとして作成しました。

CVE-2026-1998 | micropython up to 1.27.0 py/runtime.c mp_import_all memory corruption (Issue 18639 / Nessus ID 298197)

Vuldb Updates
4 months 1 week ago
A vulnerability was found in micropython up to 1.27.0. It has been classified as critical. This vulnerability affects the function mp_import_all of the file py/runtime.c. This manipulation causes memory corruption. This vulnerability is registered as CVE-2026-1998. The attack needs to be launched locally. Furthermore, an exploit is available. It is suggested to install a patch to address this issue.
vuldb.com

CVE-2026-2000 | DCN DCME-320 up to 20260121 Web Management Backend bridge_cfg.php apply_config ip_list command injection

Vuldb Updates
4 months 1 week ago
A vulnerability was found in DCN DCME-320 up to 20260121. It has been rated as critical. Impacted is the function apply_config of the file /function/system/basic/bridge_cfg.php of the component Web Management Backend. Performing a manipulation of the argument ip_list results in command injection. This vulnerability is reported as CVE-2026-2000. The attack is possible to be carried out remotely. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2026-2008 | abhiphile fermat-mcp up to 47f11def1cd37e45dd060f30cdce346cbdbd6f0a eqn_chart.py eqn_chart equations code injection

Vuldb Updates
4 months 1 week ago
A vulnerability was found in abhiphile fermat-mcp up to 47f11def1cd37e45dd060f30cdce346cbdbd6f0a. It has been rated as critical. This vulnerability affects the function eqn_chart of the file fmcp/mpl_mcp/core/eqn_chart.py. Performing a manipulation of the argument equations results in code injection. This vulnerability is cataloged as CVE-2026-2008. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
vuldb.com

CVE-2026-2010 | Sanluan PublicCMS up to 4.0.202506.d/5.202506.d/6.202506.d Trade Payment TradePaymentService.java paid paymentId improper authorization (Issue 108)

Vuldb Updates
4 months 1 week ago
A vulnerability identified as critical has been detected in Sanluan PublicCMS up to 4.0.202506.d/5.202506.d/6.202506.d. Impacted is the function Paid of the file publiccms-parent/publiccms-trade/src/main/java/com/publiccms/logic/service/trade/TradePaymentService.java of the component Trade Payment Handler. The manipulation of the argument paymentId leads to improper authorization. This vulnerability is documented as CVE-2026-2010. The attack can be initiated remotely. Additionally, an exploit exists. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2025-32393 | Significant-Gravitas AutoGPT up to 0.6.31 XML File Parser ReadRSSFeedBlock allocation of resources (GHSA-5cqw-g779-9f9x)

Vuldb Updates
4 months 1 week ago
A vulnerability was found in Significant-Gravitas AutoGPT up to 0.6.31. It has been declared as problematic. Impacted is the function ReadRSSFeedBlock of the component XML File Parser. Executing a manipulation can lead to allocation of resources. This vulnerability is tracked as CVE-2025-32393. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-64175 | Gogs up to 0.13.3 2FA Recovery Code Validation improper authentication (GHSA-p6x6-9mx6-26wj / WID-SEC-2026-0338)

Vuldb Updates
4 months 1 week ago
A vulnerability categorized as critical has been discovered in Gogs up to 0.13.3. This impacts an unknown function of the component 2FA Recovery Code Validation. Executing a manipulation can lead to improper authentication. This vulnerability is handled as CVE-2025-64175. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-2056 | D-Link DIR-605L/DIR-619L 2.06B01/2.13B01 DHCP Connection Status wan_connection_status.asp information disclosure

Vuldb Updates
4 months 1 week ago
A vulnerability was found in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. It has been classified as problematic. The impacted element is an unknown function of the file /wan_connection_status.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is referenced as CVE-2026-2056. Remote exploitation of the attack is possible. Furthermore, an exploit is available. It is recommended to apply restrictive firewalling.
vuldb.com

CVE-2026-2058 | mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Post Query Details Page /postquerypublic.php gnamex sql injection

Vuldb Updates
4 months 1 week ago
A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. It has been rated as critical. This impacts an unknown function of the file /postquerypublic.php of the component Post Query Details Page. This manipulation of the argument gnamex causes sql injection. This vulnerability is tracked as CVE-2026-2058. The attack is possible to be carried out remotely. Moreover, an exploit is present. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2026-2016 | happyfish100 libfastcommon up to 1.0.84 src/base64.c base64_decode stack-based overflow (Issue 55)

Vuldb Updates
4 months 1 week ago
A vulnerability, which was classified as critical, has been found in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is the function base64_decode of the file src/base64.c. The manipulation leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2026-2016. Local access is required to approach this attack. Moreover, an exploit is present. Applying a patch is the recommended action to fix this issue.
vuldb.com

Managed ad