Aggregator

CVE-2025-15519 | TP-Link Archer NX200 v1.0 CLI os command injection

VulDB Recent Entries
1 month ago
A vulnerability marked as critical has been reported in TP-Link Archer NX600 v3.0, Archer NX600 v2.0, Archer NX600 v1.0, Archer NX500 v2.0, Archer NX500 v1.0, Archer NX210 v3.0, Archer NX210 v2.0 v2.20, Archer NX200 v3.0, Archer NX200 v2.20, Archer NX200 v2.0 and Archer NX200 v1.0. This impacts an unknown function of the component CLI. The manipulation leads to os command injection. This vulnerability is traded as CVE-2025-15519. Access to the local network is required for this attack to succeed. There is no exploit available.
vuldb.com

CVE-2025-15517 | TP-Link Archer NX200 v1.0 CGI Endpoint missing authentication

VulDB Recent Entries
1 month ago
A vulnerability labeled as critical has been found in TP-Link Archer NX600 v3.0, Archer NX600 v2.0, Archer NX600 v1.0, Archer NX500 v2.0, Archer NX500 v1.0, Archer NX210 v3.0, Archer NX210 v2.0 v2.20, Archer NX200 v3.0, Archer NX200 v2.20, Archer NX200 v2.0 and Archer NX200 v1.0. This affects an unknown function of the component CGI Endpoint. Executing a manipulation can lead to missing authentication. This vulnerability appears as CVE-2025-15517. The attacker needs to be present on the local network. There is no available exploit.
vuldb.com

CVE-2026-33648 | WWBN AVideo up to 26.0 Restreamer Endpoint exec liveTransmitionHistory_id os command injection

VulDB Recent Entries
1 month ago
A vulnerability identified as critical has been detected in WWBN AVideo up to 26.0. The impacted element is the function exec of the component Restreamer Endpoint. Performing a manipulation of the argument liveTransmitionHistory_id results in os command injection. This vulnerability is reported as CVE-2026-33648. The attack is possible to be carried out remotely. No exploit exists. Applying a patch is the recommended action to fix this issue.
vuldb.com

CVE-2026-33650 | WWBN AVideo up to 26.0 videoAddNew.json.php canModerateVideos authorization

VulDB Recent Entries
1 month ago
A vulnerability categorized as critical has been discovered in WWBN AVideo up to 26.0. The affected element is the function Permissions::canModerateVideos of the file videoAddNew.json.php. Such manipulation leads to incorrect authorization. This vulnerability is documented as CVE-2026-33650. The attack can be executed remotely. There is not any exploit available. It is advisable to implement a patch to correct this issue.
vuldb.com

CVE-2026-33512 | WWBN AVideo up to 26.0 view/url2Embed.json.php improper authentication

VulDB Recent Entries
1 month ago
A vulnerability was found in WWBN AVideo up to 26.0. It has been rated as critical. Impacted is an unknown function of the file view/url2Embed.json.php. This manipulation causes improper authentication. This vulnerability is registered as CVE-2026-33512. Remote exploitation of the attack is possible. No exploit is available. To fix this issue, it is recommended to deploy a patch.
vuldb.com

CVE-2026-33649 | WWBN AVideo up to 26.0 Endpoint setPermission.json.php cross-site request forgery

VulDB Recent Entries
1 month ago
A vulnerability was found in WWBN AVideo up to 26.0. It has been declared as problematic. This issue affects some unknown processing of the file plugin/Permissions/setPermission.json.php of the component Endpoint. The manipulation results in cross-site request forgery. This vulnerability is cataloged as CVE-2026-33649. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2026-33647 | WWBN AVideo up to 26.0 Filename Extension ImageGallery::saveFile unrestricted upload

VulDB Recent Entries
1 month ago
A vulnerability was found in WWBN AVideo up to 26.0 and classified as critical. This affects the function ImageGallery::saveFile of the component Filename Extension Handler. Executing a manipulation can lead to unrestricted upload. This vulnerability is tracked as CVE-2026-33647. The attack can be launched remotely. No exploit exists. Applying a patch is advised to resolve this issue.
vuldb.com

Tax-Themed Google Ads Lead to BYOVD EDR Killer in Huntress-Traced Malvertising Campaign

Cyber Security News
1 month ago

Every April, millions of Americans rush to file taxes before the deadline — and attackers count on it. A large-scale malvertising campaign, active since at least January 2026, has been exploiting that urgency by placing fake tax form pages through Google Ads, ultimately deploying a kernel-mode EDR killer on victim machines. The campaign targeted U.S. […]

The post Tax-Themed Google Ads Lead to BYOVD EDR Killer in Huntress-Traced Malvertising Campaign appeared first on Cyber Security News.

Tushar Subhra Dutta

ZeroTier Launches Quantum-Secure Networking Platform at RSAC 2026

Security Boulevard
1 month ago

ZeroTier used RSAC 2026 to introduce ZeroTier Quantum, a new software-defined networking platform positioned for organizations planning for post-quantum cryptography requirements. In a Business Wire release, the company said its quantum cryptographic design targets CNSA 2.0 requirements and is meant to deliver “on-wire, data center level speed” while protecting globally distributed networks from emerging quantum..

The post ZeroTier Launches Quantum-Secure Networking Platform at RSAC 2026 appeared first on Security Boulevard.

Techstrong Editorial

Protos Labs Opens Up Protos AI for Free, Targeting CTI Teams at RSAC 2026

Security Boulevard
1 month ago

Protos Labs used RSA Conference 2026 to launch a freemium edition of Protos AI, opening up the Singapore-based company’s agentic cyber threat intelligence platform to security teams that want to test the technology before committing to an enterprise contract. The free tier is available immediately and does not require data migration or infrastructure changes, the..

The post Protos Labs Opens Up Protos AI for Free, Targeting CTI Teams at RSAC 2026 appeared first on Security Boulevard.

Techstrong Editorial

SOCRadar Launches AI Agent Marketplace and Identity Intelligence at RSAC 2026

Security Boulevard
1 month ago

SOCRadar launched its AI Agent Marketplace at RSA Conference 2026, introducing a modular hub where organizations can browse, purchase, and deploy specialized autonomous AI agents within the SOCRadar Extended Threat Intelligence Platform. The release also adds Identity and Access Intelligence capabilities designed to address what the company describes as identity “blind spots” across third-party SaaS..

The post SOCRadar Launches AI Agent Marketplace and Identity Intelligence at RSAC 2026 appeared first on Security Boulevard.

Techstrong Editorial

North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware

The Hackers News
1 month ago
The North Korean threat actors behind the Contagious Interview campaign, also tracked as WaterPlum, have been attributed to a malware family tracked as StoatWaffle that's distributed via malicious Microsoft Visual Studio Code (VS Code) projects. The use of VS Code "tasks.json" to distribute malware is a relatively new tactic adopted by the threat actor since December 2025, with the attacks
The Hacker News

Securing the AI Frontier: Suzu Labs Sweeps 4 Global InfoSec Awards 2026

Security Boulevard
1 month ago

We are incredibly proud to announce a monumental achievement. At this year’s Global InfoSec Awards 2026, hosted by Cyber Defense Magazine, Suzu Labs was recognized with four prestigious awards, validating our position as a driving force in the future of AI-powered cybersecurity.

The post Securing the AI Frontier: Suzu Labs Sweeps 4 Global InfoSec Awards 2026 appeared first on Security Boulevard.

Hannah Perez

AccuKnox Launches AI-Security 2.0 to Extend Zero Trust Protection to AI Models and Agents

Security Boulevard
1 month ago

AccuKnox launched AI-Security 2.0 at RSA Conference 2026, positioning the platform as an identity-powered, Zero Trust framework built specifically for securing AI models, agents, and data. The release includes eight integrated modules, six of which are generally available and two in beta. The GA modules cover the core risk surface organizations encounter when running AI..

The post AccuKnox Launches AI-Security 2.0 to Extend Zero Trust Protection to AI Models and Agents appeared first on Security Boulevard.

Techstrong Editorial

Managed ad