Aggregator

Bluekit Phishing Kit Automates Domains, 2FA Lures, and Session Hijacking in One Panel

Cyber Security News
1 month 2 weeks ago

A newly identified phishing kit called Bluekit is changing how cybercriminals carry out phishing attacks by packing multiple attack capabilities into a single, easy-to-use operator panel. Rather than relying on separate tools stitched together from different sources, Bluekit gives attackers one centralized platform to manage everything from fake website creation to session hijacking. For years, […]

The post Bluekit Phishing Kit Automates Domains, 2FA Lures, and Session Hijacking in One Panel appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2026-7785 | A-G-U-P-T-A wireshark-mcp pyshark_mcp.py quick_capture os command injection

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability categorized as critical has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89. This affects the function quick_capture of the file pyshark_mcp.py. The manipulation results in os command injection. This vulnerability is cataloged as CVE-2026-7785. The attack may be launched remotely. Furthermore, there is an exploit available. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
vuldb.com

CVE-2026-36365 | Lymphatus caesium-image-compressor up to 02da2c6 PostCompressionActions.cpp shutdownMachine/putMachineToSleep Local Privilege Escalation (EUVD-2026-26976)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability was found in Lymphatus caesium-image-compressor up to 02da2c6. It has been declared as problematic. The affected element is the function shutdownMachine/putMachineToSleep of the file PostCompressionActions.cpp. Executing a manipulation can lead to Local Privilege Escalation. This vulnerability is tracked as CVE-2026-36365. The attack is restricted to local execution. No exploit exists.
vuldb.com

CVE-2026-37458 | FRRouting FRR up to 10.6 MP_REACH_NLRI denial of service (EUVD-2026-26977)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability was found in FRRouting FRR up to 10.6. It has been classified as problematic. Impacted is an unknown function of the component MP_REACH_NLRI Component. Performing a manipulation results in denial of service. This vulnerability is identified as CVE-2026-37458. The attack can only be performed from the local network. There is not any exploit available.
vuldb.com

CVE-2026-7784 | RTGS2017 NagaAgent up to 5.1.0 Skills Endpoint extensions.py Name path traversal (Issue 311)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability was found in RTGS2017 NagaAgent up to 5.1.0 and classified as critical. This issue affects some unknown processing of the file apiserver/routes/extensions.py of the component Skills Endpoint. Such manipulation of the argument Name leads to path traversal. This vulnerability is referenced as CVE-2026-7784. It is possible to launch the attack remotely. Furthermore, an exploit is available. The project was informed of the problem early through an issue report but has not responded yet.
vuldb.com

CVE-2026-7783 | CodeCanyon Perfex CRM up to 3.4.1 Admin Kanban Endpoint AbstractKanban.php applySortQuery this sql injection

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability has been found in CodeCanyon Perfex CRM up to 3.4.1 and classified as critical. This vulnerability affects the function AbstractKanban::applySortQuery of the file application/services/AbstractKanban.php of the component Admin Kanban Endpoint. This manipulation of the argument this causes sql injection. The identification of this vulnerability is CVE-2026-7783. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2026-7782 | CodeCanyon Perfex CRM up to 3.4.1 Tenant Clients.php Clients::project ID authorization

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability, which was classified as critical, was found in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the file application/controllers/Clients.php of the component Tenant Handler. The manipulation of the argument ID results in authorization bypass. This vulnerability was named CVE-2026-7782. The attack may be performed from remote. In addition, an exploit is available.
vuldb.com

CVE-2026-7781 | Open5GS up to 2.7.7 amf-3gpp-access Endpoint /src/udm/nudm-handler.c udm_nudm_uecm_handle_amf_registration_update denial of service (Issue 4420)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability, which was classified as problematic, has been found in Open5GS up to 2.7.7. Affected by this issue is the function udm_nudm_uecm_handle_amf_registration_update of the file /src/udm/nudm-handler.c of the component amf-3gpp-access Endpoint. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2026-7781. The attack is possible to be carried out remotely. Moreover, an exploit is present. The project was informed of the problem early through an issue report but has not responded yet.
vuldb.com

NetHack 释出 5.0 版本

Solidot
1 month 2 weeks ago
有 39 年历史的 Roguelike 游戏 NetHack 释出 5.0 版本。NetHack 在 1987 年发布了最早的版本，名字中的 Net 指的是通过网络合作开发，Hack 则指的是角色扮演中的 hack 和 slash。玩家可以在游戏中扮演骑士、野蛮人、巫师、游侠、女武神、僧侣和武士等不同职业，目标是在地下城的最底层获取 Yendor 的项链并将其供奉给自己的神灵。NetHack 5.0 除了支持 Windows，还支持 MS-DOS 和 Amiga，此外它是完全开源的，可以编译在 Linux 等类 Unix 系统运行。NetHack 5.0 现在可以通过支持 C99 标准的编译器进行编译，使用 Lua 生成地下城，在游戏初期阶段新增了一个可选教程，等等。

Managed ad