Aggregator

微软将在安全更新流程中更多地应用AIWindows 11 更新可能很快会一次性包含更多安全问题的修复。微软在本周四的一篇博客文章中表示，其现在正在使用AI更早地识别潜在问题，这意味着客户将在每次安全发

A vulnerability, which was classified as problematic, has been found in videousermanuals White Label CMS Plugin up to 2.7.12 on WordPress. Affected by this issue is some unknown functionality of the component Admin Settings. Performing a manipulation results in cross site scripting. This vulnerability was named CVE-2026-11898. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as problematic was found in wclovers WCFM Marketplace Plugin up to 3.7.3 on WordPress. Affected by this vulnerability is the function innerHTML of the file /wp-json/wp/v2/media of the component Media. Such manipulation of the argument post_title leads to cross site scripting. This vulnerability is uniquely identified as CVE-2026-12126. The attack can be launched remotely. No exploit exists.

A vulnerability classified as problematic has been found in subratamal Wallet for WooCommerce Plugin up to 1.6.4 on WordPress. Affected is an unknown function of the component AJAX Handler. This manipulation of the argument Search causes authorization bypass. This vulnerability is handled as CVE-2026-12103. The attack can be initiated remotely. There is not any exploit available.

Более 80% протестированных мобильных VPN продавали данные пользователей.

A vulnerability described as problematic has been identified in trustindex Widgets for Google Reviews Plugin up to 13.3 on WordPress. This impacts an unknown function of the component Admin Settings. The manipulation results in cross site scripting. This vulnerability is known as CVE-2026-11591. It is possible to launch the attack remotely. No exploit is available.

A vulnerability marked as critical has been reported in saadiqbal WP Easy Pay Plugin up to 4.5.0 on WordPress. This affects an unknown function of the component Authorization. The manipulation of the argument Status leads to authorization bypass. This vulnerability is traded as CVE-2026-12738. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability labeled as problematic has been found in catalyst2020 Catalyst Connect Zoho CRM Client Portal Plugin up to 2.2.0 on WordPress. The impacted element is an unknown function of the component SQL Query Handler. Executing a manipulation of the argument uid can lead to sql injection. This vulnerability appears as CVE-2025-5017. The attack may be performed from remote. There is no available exploit.

A vulnerability identified as problematic has been detected in stylemix Cost Calculator Builder Plugin up to 4.0.11 on WordPress. The affected element is an unknown function of the file template body of the component Global Settings. Performing a manipulation of the argument client_secret/secret key results in missing encryption of sensitive data. This vulnerability is reported as CVE-2026-10865. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability categorized as critical has been discovered in wclovers WCFM Plugin up to 6.7.27 on WordPress. Impacted is an unknown function of the component Product Archive. Such manipulation leads to improper control of resource identifiers. This vulnerability is documented as CVE-2026-10041. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in thimpress WP Hotel Booking Plugin up to 2.3.1 on WordPress. It has been rated as critical. This issue affects the function web_hook_process_paypal_standard of the component IPN Handler. This manipulation of the argument test_ipn causes authentication bypass by capture-replay. This vulnerability is registered as CVE-2026-11901. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in tigroumeow Code Engine Plugin up to 0.3.5 on WordPress. It has been declared as critical. This vulnerability affects the function code-engine of the component Shortcode Handler. The manipulation results in injection. This vulnerability is cataloged as CVE-2025-6784. The attack may be launched remotely. There is no exploit available.

美国佛罗里达州男子安吉洛·马蒂诺因在担任美国一家网络安全公司的勒索软件谈判代表期间，与黑客合谋部署勒索软件，被判处五年以上监禁。美国司法部于周四确认了该判决，并指出政府查获了价值超过1000万美元的加

Vulnerability / Email SecurityZimbra is urging customers to apply updates to address a critical se

Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code execution. The vulnerability has been described as a case of stored cross-site scripting (XSS) that could allow specially crafted emails to execute malicious scripts in a user's session. It has yet to be assigned a CVE identifier. "The

日本可重复使用火箭实验机体首次试飞成功日本宇宙航空研究开发机构也就是JAXA在7月11日当天公开发布博文，官宣已经顺利完成可重复使用火箭RV-X实验机体的发射与完整回收流程，全程各项状态指标都符合预设

Покупателей серверов и виртуальных машин могут обязать подтверждать личность через «Госуслуги»

中国大陆摩托车品牌张雪机车创始人张雪受访时称，公司最迟明年在台湾开设门店。张雪在媒体专访中说，他非常想在台湾开店，现在正在对接中，最晚不超过明年，“开幕时我一定要亲自到场”。对于赴台开店，张雪表示，“

A vulnerability was found in wpvibes Form Vibes Plugin up to 1.5.2 on WordPress. It has been classified as problematic. This affects an unknown part of the component Contact Form 7. The manipulation leads to cross site scripting. This vulnerability is listed as CVE-2026-13378. The attack may be initiated remotely. There is no available exploit.