Stolen Rockstar Games analytics data leaked by extortion gang
Rockstar Games has suffered a data breach linked to a recent security incident at Anodot, with the ShinyHunters extortion gang now leaking the stolen data on its data leak site. [...]
Aggregator
CVE-2026-34621: Adobe Acrobat Reader Prototype Pollution Zero-Day Enables Code Execution via Malicious PDFs
2 months ago
CVE-2026-34621: Adobe Acrobat Reader Prototype Pollution Zero-Day Enables Code Execution via Malicious PDFs
Dark Web Informer
CVE-2026-33657 | EspoCRM up to 9.3.3 post cross site scripting
2 months ago
A vulnerability, which was classified as problematic, was found in EspoCRM up to 9.3.3. This impacts an unknown function. Such manipulation of the argument post leads to basic cross site scripting.
This vulnerability is uniquely identified as CVE-2026-33657. The attack can be launched remotely. No exploit exists.
You should upgrade the affected component.
vuldb.com
CVE-2026-33534 | EspoCRM up to 9.3.3 fromImageUrl isNotInternalHost server-side request forgery
2 months ago
A vulnerability, which was classified as critical, has been found in EspoCRM up to 9.3.3. This affects the function HostCheck::isNotInternalHost of the file /api/v1/Attachment/fromImageUrl. This manipulation causes server-side request forgery.
This vulnerability is handled as CVE-2026-33534. The attack can be initiated remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
vuldb.com
2026软件系统安全赛traffic_hunt
2 months ago
溯源流量题目：traffic_hunt
Lynx
2 months ago
You must login to view this content
cohenido
Critical flaw in wolfSSL library enables forged certificate use
2 months ago
A critical vulnerability in the wolfSSL SSL/TLS library can weaken security via improper verification of the hash algorithm or its size when checking Elliptic Curve Digital Signature Algorithm (ECDSA) signatures. [...]
Bill Toulas
High-Value Brazilian E-commerce Source Code and Database Advertised
2 months ago
You must login to view this content
cohenido
Lamashtu
2 months ago
You must login to view this content
cohenido
Lamashtu
2 months ago
You must login to view this content
cohenido
Lamashtu
2 months ago
You must login to view this content
cohenido
Lamashtu
2 months ago
You must login to view this content
cohenido
Lamashtu
2 months ago
You must login to view this content
cohenido
Lamashtu
2 months ago
You must login to view this content
cohenido
Lamashtu
2 months ago
You must login to view this content
cohenido
Lamashtu New threat Actor
2 months ago
You must login to view this content
cohenido
Lamashtu
2 months ago
You must login to view this content
cohenido
Робот-баскетболист, который никогда не устает и не просит рекламных контрактов. Toyota показала CUE7 в деле
2 months ago
Новая машина метко бросает с дальней дистанции и заодно показывает, как Toyota развивает машинное зрение, управление и физический ИИ.
CVE-2026-40042 | Pachno 1.0.6 XML Parser simplexml_load_string file descriptor (ZSL-2026-5984)
2 months ago
A vulnerability classified as critical was found in Pachno 1.0.6. The impacted element is the function simplexml_load_string of the component XML Parser. The manipulation results in exposure of file descriptor to unintended control sphere ('file descriptor leak').
This vulnerability is known as CVE-2026-40042. It is possible to launch the attack remotely. No exploit is available.
vuldb.com
CVE-2026-40043 | Pachno 1.0.6 runSwitchUser authorization (ZSL-2026-5985)
2 months ago
A vulnerability classified as problematic has been found in Pachno 1.0.6. The affected element is the function runSwitchUser. The manipulation leads to authorization bypass.
This vulnerability is traded as CVE-2026-40043. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com