Aggregator

Модернизация космической установки открывает путь к более точным часам, навигационным приборам и датчикам гравитации.

Further analysis revealed that this issues is a false-positive. Please take a look at the sources mentioned and consider not using this entry at all.

A vulnerability, which was classified as critical, has been found in Nokia MantaRay NM 25R2-NM. The affected element is an unknown function. This manipulation causes improper privilege management. The identification of this vulnerability is CVE-2025-7406. The attack can only be executed locally. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Nokia MantaRay NM. This affects an unknown part. Such manipulation leads to unrestricted upload. This vulnerability is documented as CVE-2025-24815. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in Nokia MantaRay NM. This vulnerability affects unknown code. Performing a manipulation results in improper access controls. This vulnerability is reported as CVE-2025-24816. The attacker must have access to the local network to execute the attack. No exploit exists. You should upgrade the affected component.

A vulnerability, which was classified as critical, was found in Wikimedia Mediawiki up to 1.43.8/1.44.5/1.45.3. This vulnerability affects unknown code. Executing a manipulation can lead to authentication bypass using alternate channel. The identification of this vulnerability is CVE-2026-58517. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in WatchGuard Fireware OS up to 11.12.4+541730/12.5.18/12.12/2026.2. This impacts an unknown function of the component CLI Handler. Such manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2026-13053. The attack can be launched remotely. No exploit exists.

A vulnerability marked as critical has been reported in WatchGuard Fireware OS up to 11.12.4+541730/12.5.18/12.12/2026.2. Affected is an unknown function. Performing a manipulation results in path traversal. This vulnerability was named CVE-2026-13054. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in Canonical ruby webrick up to 1.9.2. It has been declared as problematic. This affects an unknown function. The manipulation results in http request smuggling. This vulnerability is reported as CVE-2026-38969. The attack can be launched remotely. No exploit exists. Applying a patch is advised to resolve this issue.

A vulnerability, which was classified as critical, was found in OpenBSD up to 7.9. Affected is the function sys_semget of the file sys/kern/sysv_sem.c. Such manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2026-57589. Local access is required to approach this attack. No exploit exists. Applying a patch is advised to resolve this issue.

Логика в мозге живёт отдельно от языка — и это переворачивает старую теорию.

A vulnerability labeled as critical has been found in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This vulnerability affects the function RPCService.query of the file /customizemt/xkq/rpc.jsp of the component PHPRPC Remote Call Interface. Executing a manipulation of the argument phprpc_args can lead to sql injection. This vulnerability is tracked as CVE-2026-15514. The attack can be launched remotely. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #848598 / VDB-377843

A vulnerability identified as critical has been detected in Wavlink WL-NU516U1 260515. This affects the function wlink_uci_set_value of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument lan_ip results in os command injection. This vulnerability is identified as CVE-2026-15513. The attack can be initiated remotely. Additionally, an exploit exists. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Романтика, шантаж и фиктивные инвестиции — три схемы, которыми мошенники выманивали деньги в 2026 году.

A vulnerability categorized as critical has been discovered in pig-mesh Pig up to 3.9.2. Affected by this issue is some unknown functionality of the file \pig-master\pig-visual\pig-codegen\src\main\java\com\pig4cloud\pig\codegen\service\impl\GeneratorServiceImpl.java of the component pig-codegen. Such manipulation leads to code injection. This vulnerability is referenced as CVE-2026-15512. It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #847517 / VDB-377842

Submit #847500 / VDB-377841

Submit #847481 / VDB-377807