Aggregator

SCTF落幕，恭喜dda_com战队！

Врачи понимали серьёзность ситуации, но компьютер строго запретил им вмешиваться.

A vulnerability, which was classified as problematic, has been found in CodePeople Form Builder CP Plugin up to 1.2.46 on WordPress. Affected is an unknown function of the component Configuration Handler. Performing a manipulation results in cross site scripting. This vulnerability is known as CVE-2026-9278. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in WP Go Maps Plugin up to 10.0.9 on WordPress. This impacts an unknown function of the component REST Endpoint. Such manipulation of the argument address/description leads to information disclosure. This vulnerability is traded as CVE-2026-8386. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in flippercode WP MAPS PRO Plugin up to 6.1.0 on WordPress. This affects an unknown function of the component AJAX Action Handler. This manipulation causes improper privilege management. This vulnerability appears as CVE-2026-8935. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in WP Go Maps Plugin up to 10.0.9 on WordPress. The impacted element is an unknown function. The manipulation of the argument title/category/address/description results in information disclosure. This vulnerability is reported as CVE-2026-8385. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

绝大多数企业都遭遇过云安全事件，而这类事故的共性并非源于黑客的高超技术，而是简单的配置失误。

Government departments find hundreds of vulnerabilities after testing frontier models

特朗普政府发布针对国家安全系统的网络安全国家政策

近30万华裔用户或有希望获赔

Arch Linux官方建议用户仅信任更新频繁且有活跃社区维护的项目，并查阅受影响软件包列表及入侵指标。

速修复