Aggregator

Submit #912235 / VDB-403111

Submit #912234 / VDB-403110

A critical zero-day vulnerability in Oracle PeopleSoft exposed the Council of Europe and scores of other organizations to data theft and extortion in May and early June 2026. The ShinyHunters hacking group exploited the flaw across about 100 organizations and 300 instances worldwide, according to reports cited by The Register.  The attackers targeted the management and configuration layers of enterprise resource-planning systems, stealing sensitive records.  […]

The post Beyond the Perimeter: Building Resilience Against Cloud and SaaS Supply-Chain Attacks appeared first on Cyber Security News.

Over the past year, we watched a new class of alert appear in enterprise security operations centers and grow faster than anything else in the stream: alerts that were triggered by AI tools and agents. Not attacks against AI, but the ordinary, everyday footprint of an organization using it, from developers running coding agents and non-technical staff signing consumer AI tools into corporate

Поддельная зависимость Requests превратила установку Deep-Live-Cam в ловушку для владельцев криптовалюты.

A vulnerability was found in Fedora libxml2. It has been declared as critical. This affects an unknown part of the component Catalog. Executing a manipulation can lead to null pointer dereference. This vulnerability appears as CVE-2026-76781. The attack may be performed from remote. There is no available exploit.

打通审计/Fuzz/崩溃分析/补丁研究，实现标准化漏洞研究闭环

看雪论坛作者ID：mb_peeqldfc

A vulnerability was found in Microchip AN1044, AN953 and SW300052 up to A/A/2.6. It has been classified as problematic. Affected by this issue is some unknown functionality. Performing a manipulation results in session fixiation. This vulnerability is reported as CVE-2026-89172. The attack requires a local approach. No exploit exists.

A vulnerability was found in Microsoft Edge and classified as critical. Affected by this vulnerability is an unknown functionality. Such manipulation leads to improper privilege management. This vulnerability is documented as CVE-2026-85892. The attack can be executed remotely. There is not any exploit available.

В секретных сводках конца 1990-х уже обсуждались атаки внутри США и сценарии с использованием гражданской авиации.

A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. Affected is an unknown function of the file /blms/banker/add-locker-form.php. This manipulation of the argument addressproof causes unrestricted upload. This vulnerability is registered as CVE-2026-90519. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability, which was classified as critical, was found in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation of the argument UserType results in improper access controls. This vulnerability is cataloged as CVE-2026-90518. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown function of the file /blms/view-assign-locker.php. The manipulation of the argument ltid leads to authorization bypass. This vulnerability is listed as CVE-2026-90517. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability classified as critical was found in SourceCodester School Registration and Fee System 1.0. The impacted element is an unknown function of the file /bilal/normal/delete_stud.php. Executing a manipulation of the argument selector[] can lead to sql injection. This vulnerability is tracked as CVE-2026-90515. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability classified as critical has been found in SourceCodester School Registration and Fee System 1.0. The affected element is an unknown function of the file /bilal/normal/pay_report.php. Performing a manipulation of the argument period results in sql injection. This vulnerability is identified as CVE-2026-90516. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability described as critical has been identified in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/save_stud.php. Such manipulation of the argument Status leads to sql injection. This vulnerability is referenced as CVE-2026-90514. It is possible to launch the attack remotely. Furthermore, an exploit is available.

Submit #912224 / VDB-403106

Submit #912177 / VDB-300693

Submit #912176 / VDB-403105