Aggregator

A vulnerability classified as problematic was found in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/composeEmailAction.do. Executing a manipulation can lead to improper authorization. This vulnerability is handled as CVE-2026-15472. The attack can be executed remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as problematic has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/pci_dss_status.jsp. Performing a manipulation results in improper authorization. This vulnerability is known as CVE-2026-15471. Remote exploitation of the attack is possible. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability described as problematic has been identified in Eleveo Call Recording Software 9.7.0. Affected by this issue is some unknown functionality of the file /callrec/group.jsp. Such manipulation leads to improper authorization. This vulnerability is traded as CVE-2026-15470. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #797469 / VDB-377779

Submit #797466 / VDB-377778

Submit #797465 / VDB-377777

Submit #797464 / VDB-377776

Submit #797463 / VDB-377775

Обычная «галлюцинация» оказалась слишком удобной для чужого замысла.

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit,' slipped past AI code reviewers CodeRabbit and Bugbot, which never open image files at all, then convinced a coding agent to read a repo's .env and write every secret into the code as a list of numbers. [...]

A vulnerability marked as critical has been reported in Genolve Plugin up to 5.0.5 on WordPress. Affected by this vulnerability is the function genolve_setOpt of the component Capability Check. This manipulation causes improper authorization. This vulnerability appears as CVE-2026-1359. The attack may be initiated remotely. There is no available exploit.

Home在线应用 在线应用

在你的安卓掌机上运行类 SteamOS 系统Armada OS是一款专为高通骁龙高性能安卓掌机打造的开源、类 SteamOS 的 Linux 发行版。该系统底层基于 Fedora Bootc 以及 B

Модель Anthropic уже обнаружила множество уязвимостей в системах федеральных ведомств США.

日本芯片制造商Rapidus首席执行官小池敦义本周宣布，公司将尝试从台积电手中抢夺客户，不仅提供不同的服务，还将以更低的价格提供制造服务。目前，Rapidus计划采用其2nm工艺加工每片晶圆的定价在3

一个可解释性工具，一套意识叙事。

A vulnerability labeled as problematic has been found in robin-w bbp Style Pack Plugin up to 6.4.5 on WordPress. Affected is the function bsp_topic_fields_form_save/bsp_topic_content_append_topic_fields of the component Topic Form Additional Fields Feature. The manipulation of the argument bsp_topic_fields_label{n} results in cross site scripting. This vulnerability is reported as CVE-2026-15010. The attack can be launched remotely. No exploit exists.

… и не только запустил, но и вернул себе первую ступень.