Aggregator

CVE-2026-3766 | SourceCodester Web-based Pharmacy Product Management System 1.0 edit-profile.php fullname cross site scripting (EUVD-2026-10269)

Vuldb Updates
3 months 3 weeks ago
A vulnerability identified as problematic has been detected in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. This vulnerability was named CVE-2026-3766. The attack may be initiated remotely. In addition, an exploit is available.
vuldb.com

CVE-2026-3771 | SourceCodester/janobe Resort Reservation System 1.0 /accomodation.php q sql injection (EUVD-2026-10274)

Vuldb Updates
3 months 3 weeks ago
A vulnerability classified as critical was found in SourceCodester/janobe Resort Reservation System 1.0. This vulnerability affects unknown code of the file /accomodation.php. Such manipulation of the argument q leads to sql injection. This vulnerability is listed as CVE-2026-3771. The attack may be performed from remote. In addition, an exploit is available.
vuldb.com

Why proactive AI agents redefine enterprise security

Security Boulevard
3 months 3 weeks ago

Are Organizations Fully Equipped to Manage Non-Human Identities? The increasing integration of technology across various sectors brings to light the significant role of Non-Human Identities (NHIs) in enterprise security. Unfortunately, the traditional security frameworks that mainly focus on human identities often overlook these non-human elements, which can lead to vulnerabilities. So, how can organizations ensure […]

The post Why proactive AI agents redefine enterprise security appeared first on Entro.

The post Why proactive AI agents redefine enterprise security appeared first on Security Boulevard.

Alison Mack

How are NHIs driving innovation in cybersecurity

Security Boulevard
3 months 3 weeks ago

What Are Non-Human Identities in Cybersecurity? Have you ever considered the significance of a “passport” in digital identities? In cybersecurity, Non-Human Identities (NHIs) play a similar role. They are akin to machine passports, ensuring secure interactions in digital environments. But what exactly are NHIs? They are machine identities used to manage identities and secrets within […]

The post How are NHIs driving innovation in cybersecurity appeared first on Entro.

The post How are NHIs driving innovation in cybersecurity appeared first on Security Boulevard.

Alison Mack

How does AI ethics influence trust in Autonomous Systems

Security Boulevard
3 months 3 weeks ago

What Role Does AI Ethics Play in Building Trust in Autonomous Systems? How can AI ethics shape the trust we place in autonomous systems? This question lies at the heart of a rapidly evolving dialogue within data management and cybersecurity. When organizations integrate machine identities and secrets security management into their cybersecurity frameworks, the ethical […]

The post How does AI ethics influence trust in Autonomous Systems appeared first on Entro.

The post How does AI ethics influence trust in Autonomous Systems appeared first on Security Boulevard.

Alison Mack

CVE-2024-53681 | Linux Kernel up to 6.12.8 nvmet nvmet_root_discovery_nqn_store allocation of resources (EUVD-2024-52026 / Nessus ID 233479)

Vuldb Updates
3 months 3 weeks ago
A vulnerability classified as critical was found in Linux Kernel up to 6.12.8. This affects the function nvmet_root_discovery_nqn_store of the component nvmet. The manipulation results in allocation of resources. This vulnerability is reported as CVE-2024-53681. The attacker must have access to the local network to execute the attack. No exploit exists. Upgrading the affected component is advised.
vuldb.com

CVE-2024-54031 | Linux Kernel up to 6.12.8 nft_set_hash data authenticity (EUVD-2024-52246 / Nessus ID 216985)

Vuldb Updates
3 months 3 weeks ago
A vulnerability categorized as problematic has been discovered in Linux Kernel up to 6.12.8. Affected is an unknown function of the component nft_set_hash. Such manipulation leads to insufficient verification of data authenticity. This vulnerability is referenced as CVE-2024-54031. The attack needs to be initiated within the local network. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2024-36476 | Linux Kernel up to 5.10.232/5.15.175/6.1.123/6.6.69/6.12.8 rtrs null pointer dereference (Nessus ID 216985 / WID-SEC-2025-0105)

Vuldb Updates
3 months 3 weeks ago
A vulnerability classified as problematic has been found in Linux Kernel up to 5.10.232/5.15.175/6.1.123/6.6.69/6.12.8. Affected by this issue is some unknown functionality of the component rtrs. The manipulation leads to null pointer dereference. This vulnerability is documented as CVE-2024-36476. The attack requires being on the local network. There is not any exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-39282 | Linux Kernel up to 6.1.123/6.6.69/6.12.8 mtk_t7xx fsm_main_thread.c fsm_main_thread reference count (Nessus ID 216985 / WID-SEC-2025-0105)

Vuldb Updates
3 months 3 weeks ago
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.123/6.6.69/6.12.8. This issue affects the function fsm_main_thread of the file fsm_main_thread.c of the component mtk_t7xx. Such manipulation leads to improper update of reference count. This vulnerability is traded as CVE-2024-39282. Access to the local network is required for this attack to succeed. There is no exploit available. You should upgrade the affected component.
vuldb.com

CVE-2026-27749 | Gen Digital Avira Internet Security up to 1.1.109.1990 System Speedup Avira.SystemSpeedup.RealTimeOptimizer.exe deserialization (WID-SEC-2026-0618)

Vuldb Updates
3 months 3 weeks ago
A vulnerability was found in Gen Digital Avira Internet Security up to 1.1.109.1990. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the file Avira.SystemSpeedup.RealTimeOptimizer.exe of the component System Speedup Component. This manipulation causes deserialization. This vulnerability is registered as CVE-2026-27749. The attack needs to be launched locally. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-28725 | Acronis Cyber Protect 17 prior 41186 Configuration permission assignment (WID-SEC-2026-0620)

Vuldb Updates
3 months 3 weeks ago
A vulnerability was found in Acronis Cyber Protect 17. It has been classified as problematic. The affected element is an unknown function of the component Configuration Handler. This manipulation causes incorrect permission assignment. This vulnerability appears as CVE-2026-28725. The attack requires local access. There is no available exploit. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-28719 | Acronis Cyber Protect 17 prior 41186 authorization (WID-SEC-2026-0620)

Vuldb Updates
3 months 3 weeks ago
A vulnerability marked as problematic has been reported in Acronis Cyber Protect 17. Affected by this issue is some unknown functionality. This manipulation causes incorrect authorization. The identification of this vulnerability is CVE-2026-28719. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-28713 | Acronis Cyber Protect Cloud Agent/Cyber Protect 17 default credentials (WID-SEC-2026-0620)

Vuldb Updates
3 months 3 weeks ago
A vulnerability was found in Acronis Cyber Protect Cloud Agent and Cyber Protect 17. It has been declared as critical. This issue affects some unknown processing. The manipulation results in use of default credentials. This vulnerability is known as CVE-2026-28713. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-28714 | Acronis Cyber Protect 17 prior 41186 insufficiently protected credentials (WID-SEC-2026-0620 / CNNVD-202603-1069)

Vuldb Updates
3 months 3 weeks ago
A vulnerability, which was classified as problematic, has been found in Acronis Cyber Protect 17. Impacted is an unknown function. The manipulation leads to insufficiently protected credentials. This vulnerability is listed as CVE-2026-28714. The attack must be carried out from within the local network. There is no available exploit. It is advisable to upgrade the affected component.
vuldb.com

Play

Dark Feed IO
3 months 3 weeks ago

You must login to view this content

cohenido

Play

Dark Feed IO
3 months 3 weeks ago

You must login to view this content

cohenido

Managed ad