Aggregator

Среди раскрытых данных оказались банковские выписки и история транзакций, включая активность, связанную с криптовалютами и пожертвованиями.

A vulnerability, which was classified as critical, was found in WP Travel Plugin up to 12.0.3 on WordPress. This affects an unknown part. The manipulation results in improper authentication. This vulnerability is identified as CVE-2026-81796. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in Bosch Sensortec BME690 SensorAPI up to 1.0.3. It has been rated as critical. This affects the function read_all_field_data of the file bme69x.c of the component Field Data Parsing. Performing a manipulation of the argument gas_index results in out-of-bounds read. This vulnerability was named CVE-2026-42806. The attack may be initiated remotely. There is no available exploit.

A vulnerability described as problematic has been identified in Builderall Plugin up to 3.0.2 on WordPress. This impacts the function Disable of the component AJAX Handler. Executing a manipulation of the argument post_id can lead to improper privilege management. This vulnerability appears as CVE-2026-15823. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in Apache ActiveMQ Artemis and classified as problematic. This impacts an unknown function of the component Message selector. The manipulation results in denial of service. This vulnerability is identified as CVE-2026-75880. The attack can be executed remotely. There is not any exploit available.

A vulnerability labeled as problematic has been found in Concrete CMS up to 9.5.2. The affected element is an unknown function of the file concrete/controllers/dialog/event/edit.php of the component Calendar Event Edit Dialog. Such manipulation leads to authorization bypass. This vulnerability is listed as CVE-2026-68527. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in schreibfaul1 ESP32-audioI2S up to 4.0.0. It has been rated as critical. Affected by this vulnerability is the function read_ID3_Header of the component ID3 Synchronized-Lyrics Processing. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2026-87961. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in Ankaref Innovation and Technology LIBRID and LIBREF up to 10092026 and classified as critical. The affected element is an unknown function. Such manipulation leads to weak password recovery. This vulnerability is documented as CVE-2026-6285. The attack can be executed remotely. There is not any exploit available.

Submit #913786 / VDB-403169

Submit #913779 / VDB-403168

New releaseSep 13, 2026Automated WAF assessment tool that detects firewall vendors, tests 19 attack

OpenAI公司首席执行官萨姆·奥尔特曼在接受采访时表示，这家人工智能公司今年不会上市，目前将重点解决围绕这项技术的安全问题。奥尔特曼在周六公布的采访视频中表示，今年并不是一个适合进行首次公开募股（I

Скрытые участки древней суши изменили представление о распределении материков 500 млн лет назад.

Submit #913598 / VDB-403167

The security firewall for agents.Claw Patrol sits between your agents and prod, parses their traff

墨西哥贩毒集团涉足了加密货币挖矿业务。墨西哥警方在 Puebla 州的 Sierra Norte 地区发现了一个用电量远超周边村庄的矿场，查获了 300 个 GPU、80 个中压终端设备以及 8 个卫星天线。虽然就国际商业规模而言，该矿场的规模相当有限，但这已是自去年年初以来该地区发现的第四个加密货币矿场。根据区块链分析公司 Chainalysis 对流向非法钱包地址的交易量进行的分析，全球范围内非法加密货币交易在 2025 年增长一倍以上，与犯罪活动相关的地址接收的资金总额达到 1540 亿美元，而前一年仅为 590 亿美元。拉美的贩毒集团也愈来愈频繁利用加密货币转账和挖矿洗钱。电力是加密货币挖矿的最主要成本，挖一枚比特币的成本接近 4.5 万美元。按当前约 7.8 万美元的市场价出售，矿场仍能有可观的利润。如果矿场还能偷电，那么利润会更高。

AI is becoming an operational force for cybercrime, surveillance, propaganda, fraud and weapons development, lowering the cost and scale of attacks. Artificial intelligence (AI) is becoming more than a tool for people who want to do something malicious. It is increasingly becoming part of the operational machinery itself. That is the main message emerging from […]

Submit #913328 / VDB-403166

Submit #913327 / VDB-403165