Aggregator

A vulnerability described as critical has been identified in PostgreSQL. Affected by this vulnerability is an unknown functionality of the component Execute Permission Handler. The manipulation results in sql injection. This vulnerability was named CVE-2019-10208. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in KeePass up to 2.53. This affects an unknown function of the component XML Configuration File Handler. This manipulation causes missing encryption of sensitive data. The identification of this vulnerability is CVE-2023-24055. The attack needs to be done within the local network. There is no exploit available. There are still doubts about whether this vulnerability truly exists. It is suggested to upgrade the affected component.

A vulnerability categorized as problematic has been discovered in GIMP. This affects an unknown part of the component TIM Loader. Executing a manipulation can lead to integer overflow. This vulnerability is registered as CVE-2026-59089. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

Алекс Карп заявил, что бизнес переплачивает за токены, теряет контроль над данными и всё чаще выбирает открытые модели.

A vulnerability, which was classified as critical, has been found in meMove Brook Plugin up to 2.9.0 on WordPress. This affects the function include of the component Include/Require Statement. Performing a manipulation of the argument filename results in file inclusion. This vulnerability was named CVE-2026-57791. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as critical was found in meMove Billey Plugin up to 2.1.8 on WordPress. Affected by this issue is the function include/require of the component Include/Require Statement. Such manipulation of the argument filename leads to file inclusion. This vulnerability is uniquely identified as CVE-2026-57790. The attack can be launched remotely. No exploit exists.

A vulnerability classified as critical has been found in jwsthemes Aqua Plugin up to 5.1.2 on WordPress. Affected by this vulnerability is an unknown functionality of the component Include/Require Statement. This manipulation of the argument filename causes file inclusion. This vulnerability is handled as CVE-2026-57789. The attack can be initiated remotely. There is not any exploit available.

A vulnerability described as critical has been identified in Edge-mes Aalto Plugin up to 1.8 on WordPress. Affected is an unknown function of the component Include/Require Statement. The manipulation of the argument filename results in file inclusion. This vulnerability is known as CVE-2026-57788. It is possible to launch the attack remotely. No exploit is available.

A vulnerability marked as critical has been reported in stmcan RT-Theme 18 Plugin up to 2.5 on WordPress. This impacts the function include of the component Include/Require. The manipulation of the argument filename leads to file inclusion. This vulnerability is traded as CVE-2026-57743. It is possible to initiate the attack remotely. There is no exploit available.

Dr.Web details Siggen Windows backdoor that uses Steam for C2, steals credentials and crypto data and infects Visual Studio projects to spread among developers.

Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-coded PowerShell script for Active Directory (AD) enumeration. "The script looked for the Domain Controller (DC) and mapped users, computers, and domains, before creating a directory and exporting out a number of files, and finally creating AD_Report.html to measure the success of the

Два "нулевых дня" в iCagenda и Balbooa Forms уже используются в реальных атаках.

A vulnerability classified as problematic was found in TianoCore EDK2 up to edk2-stable202408. This vulnerability affects the function HashPeImageByType. The manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2024-38797. The attacker must have access to the local network to execute the attack. No exploit exists. Upgrading the affected component is advised.

A vulnerability marked as problematic has been reported in OpenVPN up to 2.6.19/2.7.1. Affected by this vulnerability is an unknown functionality of the component TLS Session Promotion. Performing a manipulation results in out-of-bounds read. This vulnerability was named CVE-2026-40215. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability was found in OpenVPN up to 2.6.19/2.7.1. It has been classified as problematic. Impacted is an unknown function of the component Packet Length Handler. Performing a manipulation results in reachable assertion. This vulnerability is reported as CVE-2026-35058. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

关键词黑客攻击你收到的会议邀请函可能是真的，但附件里藏了间谍软件。

关键词漏洞如果你的网站用了 iCagenda 或 Balbooa Forms，现在就该检查了。

关键词SpaceX你以为关注的是 SpaceX，结果看到的是"空气币"广告。

The Debian Project has released Debian 13.6, the sixth point update for its stable Debian 13 “trixie” distribution. This update, released on July 11, 2026, includes a collection of security fixes, critical bug corrections, and updated installation images. It does not introduce a new version of Debian; existing systems can be upgraded to the latest […]

The post Debian 13.6 Released With Security Updates for Linux, Apache, Curl, QEMU, and More appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Armored Likho, a previously undocumented threat group also tracked as Eagle Werewolf based on circumstantial evidence, is targeting government institutions and electric-power organizations across Russia, Brazil, and Kazakhstan with a new Python-based infostealer named BusySnake. The group’s activity reflects an unusual overlap between cyber-espionage and financially motivated operations. Armored Likho targets organizations for intelligence collection […]

The post BusySnake Stealer Uses Reverse SSH Tunnels and AI-Generated Loaders to Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.