Copilot 'SearchLeak' Attack Allows 1-Click Data Theft
The critical, three-stage attack is now patched, but it's part of a new group of AI prompt-injection issues that use hidden URLs and other variables.
Aggregator
The Gentleman
1 month 1 week ago
You must login to view this content
cohenido
CVE-2026-49294 | Valhalla up to 3.6.3 cross site scripting (GHSA-85xx-39j8-r56x)
1 month 1 week ago
A vulnerability described as problematic has been identified in Valhalla up to 3.6.3. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to cross site scripting.
This vulnerability is tracked as CVE-2026-49294. The attack can be launched remotely. No exploit exists.
vuldb.com
CVE-2026-8358 | LibreOffice up to 26.2.3 type confusion
1 month 1 week ago
A vulnerability marked as critical has been reported in LibreOffice up to 26.2.3. Affected is an unknown function. Performing a manipulation results in type confusion.
This vulnerability is identified as CVE-2026-8358. The attack can be initiated remotely. There is not any exploit available.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2026-8357 | LibreOffice up to 26.2.3 out-of-bounds write
1 month 1 week ago
A vulnerability labeled as critical has been found in LibreOffice up to 26.2.3. This impacts an unknown function. Such manipulation leads to out-of-bounds write.
This vulnerability is referenced as CVE-2026-8357. It is possible to launch the attack remotely. No exploit is available.
The affected component should be upgraded.
vuldb.com
CVE-2026-8356 | LibreOffice up to 26.2.3 out-of-bounds write
1 month 1 week ago
A vulnerability identified as critical has been detected in LibreOffice up to 26.2.3. This affects an unknown function. This manipulation causes out-of-bounds write.
The identification of this vulnerability is CVE-2026-8356. It is possible to initiate the attack remotely. There is no exploit available.
You should upgrade the affected component.
vuldb.com
CVE-2026-6047 | LibreOffice up to 25.8.6/26.2.2 out-of-bounds write
1 month 1 week ago
A vulnerability categorized as critical has been discovered in LibreOffice up to 25.8.6/26.2.2. The impacted element is an unknown function. The manipulation results in out-of-bounds write.
This vulnerability was named CVE-2026-6047. The attack may be performed from remote. There is no available exploit.
It is advisable to upgrade the affected component.
vuldb.com
CVE-2026-6045 | LibreOffice up to 25.8.6/26.2.2 out-of-bounds write
1 month 1 week ago
A vulnerability was found in LibreOffice up to 25.8.6/26.2.2. It has been rated as critical. The affected element is an unknown function. The manipulation leads to out-of-bounds write.
This vulnerability is uniquely identified as CVE-2026-6045. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is advised.
vuldb.com
CVE-2026-6040 | LibreOffice up to 25.8.6/26.2.2 use after free
1 month 1 week ago
A vulnerability was found in LibreOffice up to 25.8.6/26.2.2. It has been declared as critical. Impacted is an unknown function. Executing a manipulation can lead to use after free.
This vulnerability is handled as CVE-2026-6040. The attack can be executed remotely. There is not any exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2026-6039 | LibreOffice up to 25.8.6/26.2.2 out-of-bounds write
1 month 1 week ago
A vulnerability was found in LibreOffice up to 25.8.6/26.2.2. It has been classified as critical. This issue affects some unknown processing. Performing a manipulation results in out-of-bounds write.
This vulnerability is known as CVE-2026-6039. Remote exploitation of the attack is possible. No exploit is available.
Upgrading the affected component is recommended.
vuldb.com
CVE-2026-47777 | Mastodon up to 4.6.0-beta.0 Setting data authenticity (GHSA-vg36-gxjg-2v46)
1 month 1 week ago
A vulnerability was found in Mastodon up to 4.6.0-beta.0 and classified as problematic. This vulnerability affects unknown code of the component Setting Handler. Such manipulation leads to insufficient verification of data authenticity.
This vulnerability is traded as CVE-2026-47777. The attack may be launched remotely. There is no exploit available.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2026-20262 | Cisco Catalyst SD-WAN Manager up to 26.1.1_LI_Images API Endpoint path traversal (cisco-sa-sdwan-arbfw-c2rZvQ)
1 month 1 week ago
A vulnerability has been found in Cisco Catalyst SD-WAN Manager and classified as critical. This affects an unknown part of the component API Endpoint. This manipulation causes path traversal.
This vulnerability appears as CVE-2026-20262. The attack may be initiated remotely. There is no available exploit.
The affected component should be upgraded.
vuldb.com
Safepay
1 month 1 week ago
You must login to view this content
cohenido
Safepay
1 month 1 week ago
You must login to view this content
cohenido
Safepay
1 month 1 week ago
You must login to view this content
cohenido
Safepay
1 month 1 week ago
You must login to view this content
cohenido
Safepay
1 month 1 week ago
You must login to view this content
cohenido
Australian Sugar Producer Mackay Sugar Reports Cyber Incident
1 month 1 week ago
Mackay Sugar, Australia’s second-largest sugar producer, disclosed a cyberattack on June 10, potentially affecting key processing operations. Mackay Sugar is one of Australia’s largest sugar producers and the country’s second-largest sugar manufacturer. The company is based in the Mackay region of tropical North Queensland and has more than 140 years of history in sugar cane […]
Pierluigi Paganini
Chinese hackers breached North American research institutions via REDCap servers
1 month 1 week ago
A China-linked cyber espionage operation targeted North American medical research institutions through compromised REDCap servers, using custom malware to gain persistent access and collect sensitive information, Google’s Threat Intelligence Group (GTIG) researchers found. UNC6508 exploits vulnerable REDCap servers GTIG attributed the campaign to UNC6508, a threat actor linked to the People’s Republic of China that remained undetected in victim environments for more than a year. According to the researchers, the activity began in September 2023 … More →
The post Chinese hackers breached North American research institutions via REDCap servers appeared first on Help Net Security.
Sinisa Markovic
Выжали максимум из света. Китай увеличил пропускную способность оптоволокна в 5 раз
1 month 1 week ago
В Китае успешно испытали оптоволокно с четырьмя сердцевинами на действующем участке сети связи.