Aggregator

LummaStealer activity spikes post-law enforcement disruption

Security Affairs
20 hours 49 minutes ago
Bitdefender reports a surge in LummaStealer activity, showing the MaaS infostealer rebounded after 2025 law enforcement disruption. Bitdefender observed renewed LummaStealer activity, proving the MaaS infostealer recovered after 2025 takedowns. Active since 2022, it relies on affiliates, social engineering, fake cracked software, and fake CAPTCHA “ClickFix” lures. CastleLoader plays a key role in spreading it. […]
Pierluigi Paganini

CVE-2026-1893 | Orbisius Random Name Generator Plugin up to 1.0.2 on WordPress Shortcode btn_label cross site scripting (CNNVD-202602-2050)

Vuldb Updates
20 hours 58 minutes ago
A vulnerability labeled as problematic has been found in Orbisius Random Name Generator Plugin up to 1.0.2 on WordPress. The impacted element is an unknown function of the component Shortcode Handler. Executing a manipulation of the argument btn_label can lead to cross site scripting. This vulnerability appears as CVE-2026-1893. The attack may be performed from remote. There is no available exploit.
vuldb.com

CVE-2025-15400 | Pix Para Woocommerce Plugin up to 2.13.3 on WordPress Payment Gateway Configuration authorization (CNNVD-202602-2039)

Vuldb Updates
20 hours 58 minutes ago
A vulnerability categorized as problematic has been discovered in Pix Para Woocommerce Plugin up to 2.13.3 on WordPress. Affected by this vulnerability is an unknown functionality of the component Payment Gateway Configuration Handler. The manipulation results in missing authorization. This vulnerability is cataloged as CVE-2025-15400. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2026-26079 | Roundcube Webmail up to 1.5.12/1.6.12 Cascading Style Sheet inclusion of functionality from untrusted control sphere (CNNVD-202602-2040)

Vuldb Updates
20 hours 58 minutes ago
A vulnerability identified as problematic has been detected in Roundcube Webmail up to 1.5.12/1.6.12. Affected by this issue is some unknown functionality of the component Cascading Style Sheet Handler. This manipulation causes inclusion of functionality from untrusted control sphere. This vulnerability is registered as CVE-2026-26079. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.
vuldb.com

CVE-2026-1231 | Beaver Builder Page Builder Plugin up to 2.10.0.5 on WordPress save_global_settings cross site scripting (CNNVD-202602-2051)

Vuldb Updates
20 hours 58 minutes ago
A vulnerability was found in Beaver Builder Page Builder Plugin up to 2.10.0.5 on WordPress. It has been rated as problematic. Affected by this vulnerability is the function save_global_settings. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2026-1231. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

Wapens, munitie, materieel en F-16-simulatoren voor Oekraïne

Defensie.nl - Nieuwsberichten
20 hours 59 minutes ago
Oekraïne heeft dringend behoefte aan extra slagkracht. Nederland, het Verenigd Koninkrijk, Noorwegen en Zweden schieten daarom te hulp met een nieuwe levering van Amerikaanse wapens, materieel en munitie. Het gaat om militaire steun via het Prioritised Ukraine Requirements List (PURL) initiatief. Ook levert Nederland F-16-simulatoren.

Windows Notepad Markdown feature opens door to RCE (CVE-2026-20841)

Help Net Security
20 hours 59 minutes ago

Among the many security fixes released by Microsoft on February 2026 Patch Tuesday is one for CVE-2026-20841, a command injection vulnerability in Notepad that could be exploited by attackers to achieve remote code execution on targets’ Windows system. About CVE-2026-20841 For many, many years, Windows Notepad was a simple text editor and a staple tool for everyone who wanted a no-frills way to work with plain text, but in early 2022, Microsoft started redesigning it … More →

The post Windows Notepad Markdown feature opens door to RCE (CVE-2026-20841) appeared first on Help Net Security.

Zeljka Zorz

CVE-2025-15524 | Gallery by FooGallery Plugin up to 3.1.9 on WordPress ajax_get_gallery_info authorization (CNNVD-202602-2052)

Vuldb Updates
21 hours 4 minutes ago
A vulnerability was found in Gallery by FooGallery Plugin up to 3.1.9 on WordPress. It has been classified as problematic. This impacts the function ajax_get_gallery_info. Performing a manipulation results in missing authorization. This vulnerability is cataloged as CVE-2025-15524. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-14541 | Lucky Wheel Giveaway Plugin up to 1.0.22 on WordPress conditional_tags code injection (CNNVD-202602-2053)

Vuldb Updates
21 hours 4 minutes ago
A vulnerability was found in Lucky Wheel Giveaway Plugin up to 1.0.22 on WordPress and classified as critical. This affects an unknown function. Such manipulation of the argument conditional_tags leads to code injection. This vulnerability is listed as CVE-2025-14541. The attack may be performed from remote. There is no available exploit.
vuldb.com

Black Duck expands Polaris platform with unified, automated security across all major SCMs

Help Net Security
21 hours 10 minutes ago

Black Duck has announced the availability of a set of enhanced Black Duck Polaris Platform integrations across all major source code management (SCM) platforms, including GitHub, GitLab, Azure DevOps, and Bitbucket. The Polaris Platform is an integrated, software-as-a-service application security platform powered by the static application security testing, software composition analysis, and dynamic application security testing engines. With development teams managing an explosion of human and AI-generated code and increasingly distributed development environments, manual onboarding … More →

The post Black Duck expands Polaris platform with unified, automated security across all major SCMs appeared first on Help Net Security.

Industry News

INC

Dark Feed IO
21 hours 36 minutes ago

You must login to view this content

cohenido

Managed ad