Aggregator

Qilin

Dark Feed IO
2 days 20 hours ago

You must login to view this content

cohenido

Hackers Breached Klue Integration to Steal Salesforce CRM Data via OAuth Tokens

Cyber Security News
2 days 20 hours ago

Threat actors exploited a trusted third-party SaaS integration to silently harvest enterprise CRM data, marking the latest chapter in an escalating wave of OAuth-abuse attacks targeting Salesforce ecosystems. Researchers at ReliaQuest observed attackers leveraging a compromised Klue Battlecards integration, a competitive-intelligence platform that synchronizes battlecard and win/loss data with Salesforce, to exfiltrate large volumes of […]

The post Hackers Breached Klue Integration to Steal Salesforce CRM Data via OAuth Tokens appeared first on Cyber Security News.

Guru Baran

Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network

The Hackers News
2 days 20 hours ago
If an autonomous AI agent interacts with your company's core intellectual property today, can your security team instantly name the person who authorized it? For most enterprises, the answer is a simple no. The rush to adopt internal AI tools has left a massive trail of administrative debt: orphaned agents (AI tools left running after their creator leaves the company) and standing privileges (
The Hacker News

CVE-2026-12539 | Docker Sandboxes up to 0.32.x communication channel to intended endpoints (EUVD-2026-37893)

VulDB Recent Entries
2 days 21 hours ago
A vulnerability was found in Docker Sandboxes up to 0.32.x and classified as problematic. This issue affects some unknown processing. The manipulation results in improper restriction of communication channel to intended endpoints. This vulnerability is reported as CVE-2026-12539. The attack requires a local approach. No exploit exists. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-56012 | David Lingren Media LIbrary Assistant Plugin up to 3.35 on WordPress sql injection (EUVD-2026-37895)

VulDB Recent Entries
2 days 21 hours ago
A vulnerability has been found in David Lingren Media LIbrary Assistant Plugin up to 3.35 on WordPress and classified as critical. This vulnerability affects unknown code. The manipulation leads to sql injection. This vulnerability is documented as CVE-2026-56012. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2026-42488 | Xen

VulDB Recent Entries
2 days 21 hours ago
A vulnerability, which was classified as problematic, was found in Xen. This affects an unknown part. Executing a manipulation can lead to an unknown weakness. This vulnerability is registered as CVE-2026-42488. The attack requires access to the local network. No exploit is available.
vuldb.com

CVE-2026-12527 | Shenzhen Liandian Communication V380 IP Camera/AppFHE1 AppFHE1_V1.0.6.020230803 missing authentication (EUVD-2026-37894)

VulDB Recent Entries
2 days 21 hours ago
A vulnerability, which was classified as critical, has been found in Shenzhen Liandian Communication V380 IP Camera and AppFHE1 AppFHE1_V1.0.6.020230803. Affected by this issue is some unknown functionality. Performing a manipulation results in missing authentication. This vulnerability is cataloged as CVE-2026-12527. The attack must originate from the local network. There is no exploit available.
vuldb.com

CVE-2026-50141 | woodpecker-ci woodpecker up to 3.14.0 authentication spoofing (ID 21 / EUVD-2026-37897)

VulDB Recent Entries
2 days 21 hours ago
A vulnerability classified as critical was found in woodpecker-ci woodpecker up to 3.14.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to authentication bypass by spoofing. This vulnerability is listed as CVE-2026-50141. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.
vuldb.com

CVE-2026-12039 | Docker Sandboxes up to 0.32.x DNS Resolution communication channel to intended endpoints

VulDB Recent Entries
2 days 21 hours ago
A vulnerability classified as problematic has been found in Docker Sandboxes up to 0.32.x. Affected is an unknown function of the component DNS Resolution Handler. This manipulation causes improper restriction of communication channel to intended endpoints. This vulnerability is tracked as CVE-2026-12039. The attack is restricted to local execution. No exploit exists. It is recommended to upgrade the affected component.
vuldb.com

Managed ad