Aggregator

CVE-2026-30558 | SourceCodester Sales and Inventory System 1.0 Parameter add_customer.php msg cross site scripting

VulDB Recent Entries
2 weeks 3 days ago
A vulnerability was found in SourceCodester Sales and Inventory System 1.0. It has been rated as problematic. The impacted element is an unknown function of the file add_customer.php of the component Parameter Handler. Performing a manipulation of the argument msg results in cross site scripting. This vulnerability is reported as CVE-2026-30558. The attack is possible to be carried out remotely. No exploit exists.
vuldb.com

CVE-2026-30562 | SourceCodester Sales and Inventory System 1.0 Parameter add_stock.php msg cross site scripting

VulDB Recent Entries
2 weeks 3 days ago
A vulnerability was found in SourceCodester Sales and Inventory System 1.0. It has been declared as problematic. The affected element is an unknown function of the file add_stock.php of the component Parameter Handler. Such manipulation of the argument msg leads to cross site scripting. This vulnerability is documented as CVE-2026-30562. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2026-30560 | SourceCodester Sales and Inventory System 1.0 Parameter add_supplier.php msg cross site scripting

VulDB Recent Entries
2 weeks 3 days ago
A vulnerability was found in SourceCodester Sales and Inventory System 1.0. It has been classified as problematic. Impacted is an unknown function of the file add_supplier.php of the component Parameter Handler. This manipulation of the argument msg causes cross site scripting. This vulnerability is registered as CVE-2026-30560. Remote exploitation of the attack is possible. No exploit is available.
vuldb.com

CVE-2026-29954 | KubePlus 4.1.4 webhook/kubeconfiggenerator ResourceComposition chartURL injection

VulDB Recent Entries
2 weeks 3 days ago
A vulnerability was found in KubePlus 4.1.4 and classified as problematic. This issue affects the function ResourceComposition of the component webhook/kubeconfiggenerator. The manipulation of the argument chartURL results in injection. This vulnerability is cataloged as CVE-2026-29954. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2026-30556 | SourceCodester Sales and Inventory System 1.0 Parameter index.php msg cross site scripting

VulDB Recent Entries
2 weeks 3 days ago
A vulnerability, which was classified as problematic, was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file index.php of the component Parameter Handler. Executing a manipulation of the argument msg can lead to cross site scripting. This vulnerability is tracked as CVE-2026-30556. The attack can be launched remotely. No exploit exists.
vuldb.com

CVE-2026-30557 | SourceCodester Sales and Inventory System 1.0 Parameter add_category.php msg cross site scripting

VulDB Recent Entries
2 weeks 3 days ago
A vulnerability, which was classified as problematic, has been found in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file add_category.php of the component Parameter Handler. Performing a manipulation of the argument msg results in cross site scripting. This vulnerability is identified as CVE-2026-30557. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

Exposed Server Reveals TheGentlemen Ransomware Toolkit, Victim Credentials, and Ngrok Tokens

Cyber Security News
2 weeks 3 days ago

A misconfigured server hosted on a Russian bulletproof hosting provider has exposed the complete operational toolkit of a TheGentlemen ransomware affiliate, including harvested victim credentials and plaintext authentication tokens used to establish hidden remote access tunnels. TheGentlemen ransomware group operates as a Ransomware-as-a-Service, or RaaS, operation where affiliates carry out attacks using shared tools and […]

The post Exposed Server Reveals TheGentlemen Ransomware Toolkit, Victim Credentials, and Ngrok Tokens appeared first on Cyber Security News.

Tushar Subhra Dutta

North Korean IT Worker Allegedly Used Stolen Identity and AI Resume in Job Application Scam

Cyber Security News
2 weeks 3 days ago

A suspected North Korean operative tried to sneak into a remote job at a cybersecurity firm by using a stolen identity, a fake AI-generated resume, and a VoIP phone number. The case, uncovered in June 2025, shows how North Korea’s state-sponsored IT worker scheme has grown more sophisticated and harder to spot without proper screening. […]

The post North Korean IT Worker Allegedly Used Stolen Identity and AI Resume in Job Application Scam appeared first on Cyber Security News.

Tushar Subhra Dutta

RSAC 2026 is back, and the certificate automation gap is impossible to ignore

Help Net Security
2 weeks 3 days ago

RSAC 2026 Conference marked a return to form, more vibrant and better attended than any show I can recall over the past decade. The audience was distinctly international, with strong representation from North America, Europe and Latin America, and it was refreshing to see the energy and overall vibe of the show return to what I remember from RSA at its peak. As expected, hot topics centered on how AI is transforming cybersecurity, alongside growing … More →

The post RSAC 2026 is back, and the certificate automation gap is impossible to ignore appeared first on Help Net Security.

Help Net Security

CrySome RAT Emerges as Advanced .NET Malware With AV Killer and HVNC Capabilities

Cyber Security News
2 weeks 3 days ago

A new and dangerous piece of malware has surfaced in the threat landscape, and it is built to stay hidden, stay running, and stay in control of any system it infects. CrySome RAT is written in C# and targets the .NET ecosystem, giving attackers complete remote control over compromised Windows machines. From stealing passwords and […]

The post CrySome RAT Emerges as Advanced .NET Malware With AV Killer and HVNC Capabilities appeared first on Cyber Security News.

Tushar Subhra Dutta

儿童青少年屏幕使用时间过去三十年显著增加

Solidot
2 weeks 3 days ago
芬兰研究人员报告，过去三十年（1991-2022 年间）儿童和青少年的屏幕使用时间显著增加，新冠疫情后更为明显。以前的屏幕主要是传统电视，但随着时间的迁移屏幕逐渐向 PC、手机和游戏等更个性化的数字设备转变，电视的观看时间则在逐渐下降。研究发现，新冠疫情期间采取了社交封锁政策，儿童青少年依赖电子屏幕进行学习、社交和娱乐，导致屏幕使用时间急剧增加。研究表明，男孩和女孩的屏幕使用时间均有所增加，但男孩往往花更多时间玩游戏。年龄较小的儿童通常比年龄较大的儿童屏幕使用时间更少，来自高收入家庭的儿童屏幕使用时间通常也较少。

What the FBI Director Breach Reveals About Executive Digital Exposure

Security Boulevard
2 weeks 3 days ago

Iranian state-linked hackers published emails stolen from FBI Director Kash Patel’s personal account. The lesson for every security leader: no title protects you from an exposed digital footprint. On March 27, 2026, the Handala Hack Team, a group U.S. prosecutors have formally tied to Iran’s Ministry of Intelligence and Security, announced it had breached FBI […]

The post What the FBI Director Breach Reveals About Executive Digital Exposure appeared first on Security Boulevard.

Christine Castro

Managed ad