Aggregator

A vulnerability marked as problematic has been reported in PEVANS Socket up to 2.40 on Perl. This affects the function pack_ip_mreq_source of the file Socket.xs. Performing a manipulation of the argument Source results in out-of-bounds read. This vulnerability was named CVE-2026-12087. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Red Hat Ansible Automation Platform 2/2.7. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to session expiration. This vulnerability is handled as CVE-2026-44188. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in mcmilk 7-Zip up to 26.0 and classified as problematic. The affected element is the function ParseLibSymbols of the component Unix Ar Archive Parser. The manipulation results in integer overflow. This vulnerability is identified as CVE-2026-48112. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

Threat actors using the aliases ChimeraZ and misere have posted what they describe as a partial database of Autosur (autosur.fr), a French professional vehicle inspection and technical-control (contrôle technique) service used by car owners and dealerships.

Threat actors are abusing Steam Workshop, Valve's community hub for downloading game-related content, to push various malware hidden in wallpaper packages. [...]

A vulnerability marked as critical has been reported in mcmilk 7-Zip up to 26.00. Affected is the function Open in the library 7z.dll of the component SquashFS Handler. The manipulation leads to uninitialized resource. This vulnerability is traded as CVE-2026-48104. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability classified as problematic has been found in mcmilk 7-Zip up to 26.0. Affected by this issue is the function IInArchive::Open of the file CPP/7zip/Archive/UefiHandler.cpp of the component UEFI Firmware Image Parser. This manipulation of the argument opcode causes out-of-bounds read. This vulnerability is handled as CVE-2026-48111. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in mcmilk 7-Zip up to 26.00. It has been rated as problematic. The affected element is the function Open of the file CPP/7zip/Archive/Udf/UdfIn.cpp of the component File Identifier Descriptor Parser. This manipulation causes out-of-bounds read. This vulnerability is registered as CVE-2026-48102. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

A vulnerability described as problematic has been identified in mcmilk 7-Zip up to 26.00. Affected by this vulnerability is the function SecurOffsets.Size of the file CPP/7zip/Archive/Wim/WimHandler.cpp. The manipulation results in out-of-bounds read. This vulnerability is known as CVE-2026-48103. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A threat actor using the alias ChimeraZ has posted what they describe as a partial database of Inter Mutuelles Habitat (referenced as ima.eu / imha.fr), a French organization specializing in home-insurance assistance and claims management for policyholders of partner mutual insurers.

A vulnerability identified as problematic has been detected in mcmilk 7-Zip up to 26.00. This affects the function OpenCapsule. Performing a manipulation results in uninitialized resource. This vulnerability is reported as CVE-2026-48101. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in 7-Zip up to 26.00. Affected is the function CInStream::GetCuSize of the file CPP/7zip/Archive/NtfsHandler.cpp of the component NTFS Archive Handler. Performing a manipulation results in out-of-bounds write. This vulnerability is cataloged as CVE-2026-48095. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is advisable to upgrade the affected component.

A vulnerability categorized as problematic has been discovered in mcmilk 7-Zip up to 26.00. This issue affects some unknown processing of the component SquashFS Fragment Handler. The manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2026-48092. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability has been found in Cisco Catalyst SD-WAN Manager and classified as critical. This affects an unknown part of the component API Endpoint. This manipulation causes path traversal. This vulnerability appears as CVE-2026-20262. The attack may be initiated remotely. In addition, an exploit is available. The affected component should be upgraded.

Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, per independent reports from Morphisec, BlueVoyant, and Huntress, respectively. Attacks involving BabaDeda Loader, observed in April 2026, have targeted education and financial organizations. "Earlier BabaDeda activity was known for

Гравитация держала человеческий мозг в узде миллионы лет. Невесомость снимает этот поводок.

The emerging malware, spread via fake TikTok and Chrome downloads, has evolved by combining banking fraud with extensive device surveillance and remote control.