Aggregator

CVE-2026-51846 | Tenda AC7 15.03.06.44 /goform/AdvSetMacMtuWan wanSpeed stack-based overflow

Vuldb Updates
3 days 23 hours ago
A vulnerability marked as critical has been reported in Tenda AC7 15.03.06.44. The impacted element is an unknown function of the file /goform/AdvSetMacMtuWan. The manipulation of the argument wanSpeed leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2026-51846. The attack is possible to be carried out remotely. No exploit exists.
vuldb.com

CVE-2026-58031 | Wikimedia MediaWiki up to 1.45.x ApiSandboxLayout.Js cross site scripting (EUVD-2026-41012)

Vuldb Updates
3 days 23 hours ago
A vulnerability classified as problematic was found in Wikimedia MediaWiki up to 1.45.x. Affected is an unknown function of the file resources/src/mediawiki.Special.Apisandbox/ApiSandboxLayout.Js. Executing a manipulation can lead to cross site scripting. This vulnerability is registered as CVE-2026-58031. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-58035 | Wikimedia MediaWiki up to 1.45.x SpecialBlock.Vue cross site scripting

Vuldb Updates
3 days 23 hours ago
A vulnerability, which was classified as problematic, has been found in Wikimedia MediaWiki up to 1.45.x. Affected by this vulnerability is an unknown functionality of the file resources/src/MediaWiki.Special.Block/SpecialBlock.Vue. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2026-58035. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-58034 | Wikimedia CheckUser up to 1.45.x blockConnectedTempAccountsField cross site scripting (EUVD-2026-41011)

Vuldb Updates
3 days 23 hours ago
A vulnerability was found in Wikimedia CheckUser up to 1.45.x and classified as problematic. This vulnerability affects unknown code of the file /components/blockConnectedTempAccountsField. Such manipulation leads to cross site scripting. This vulnerability is traded as CVE-2026-58034. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-58024 | Wikimedia MediaWiki up to 1.45.x/1.45.3/1.44.5/1.43.8 ApiUserrights.Php information disclosure (Nessus ID 324019)

Vuldb Updates
3 days 23 hours ago
A vulnerability identified as problematic has been detected in Wikimedia MediaWiki up to 1.45.x/1.45.3/1.44.5/1.43.8. Affected by this vulnerability is an unknown functionality of the file includes/Api/ApiUserrights.Php. Performing a manipulation results in information disclosure. This vulnerability was named CVE-2026-58024. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.
vuldb.com

CVE-2026-58027 | Wikimedia AbuseFilter up to 1.45.x/1.45.3/1.44.5/1.43.8 QueryAbuseFilters.Php information disclosure (Nessus ID 324028)

Vuldb Updates
3 days 23 hours ago
A vulnerability described as problematic has been identified in Wikimedia AbuseFilter up to 1.45.x/1.45.3/1.44.5/1.43.8. This vulnerability affects unknown code of the file includes/Api/QueryAbuseFilters.Php. The manipulation results in information disclosure. This vulnerability is identified as CVE-2026-58027. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-58029 | Wikimedia MediaWiki up to 1.45.x/1.45.3/1.44.5/1.43.8 ApiChangeAuthenticationData.Php, improper authentication (Nessus ID 324027)

Vuldb Updates
3 days 23 hours ago
A vulnerability classified as critical has been found in Wikimedia MediaWiki up to 1.45.x/1.45.3/1.44.5/1.43.8. This issue affects some unknown processing of the file includes/Api/ApiChangeAuthenticationData.Php,. This manipulation causes improper authentication. This vulnerability is tracked as CVE-2026-58029. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-58028 | Wikimedia CentralAuth up to 1.45.x/1.45.3/1.44.5/1.43.8 ApiFormatBase.Php cross site scripting (Nessus ID 324029)

Vuldb Updates
3 days 23 hours ago
A vulnerability classified as problematic was found in Wikimedia CentralAuth up to 1.45.x/1.45.3/1.44.5/1.43.8. This affects an unknown function of the file includes/Api/ApiFormatBase.Php. Executing a manipulation can lead to cross site scripting. This vulnerability is tracked as CVE-2026-58028. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.
vuldb.com

CVE-2026-50555 | Angular up to 18.2.14/19.2.24/20.3.23/21.2.15 Unicode Character cross site scripting (GHSA-hqr9-c56f-3x7f / EUVD-2026-38289)

Vuldb Updates
3 days 23 hours ago
A vulnerability labeled as problematic has been found in Angular up to 18.2.14/19.2.24/20.3.23/21.2.15. This impacts an unknown function of the component Unicode Character Handler. Such manipulation leads to cross site scripting. This vulnerability is listed as CVE-2026-50555. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.
vuldb.com

FastNetMon eliminates third-party bgp lookups with Netomics

Help Net Security
3 days 23 hours ago

FastNetMon is introducing Netomics, a self-hosted BGP routing intelligence platform that combines live routing data, registry information, RPKI validation, routing history and AI-assisted querying into a single application. Built for internet service providers (ISPs), cloud providers, Internet Exchange Points (IXPs) and enterprises operating large IP networks, Netomics provides complete visibility into global internet routing without relying on third-party lookup services. Network engineers often need to consult multiple public tools to investigate routing incidents, validate prefix … More →

The post FastNetMon eliminates third-party bgp lookups with Netomics appeared first on Help Net Security.

Industry News

Dutch Nationals Suspected in Odido Hack That Exposed Six Million Customers

Security Affairs
3 days 23 hours ago
Dutch police suspect local hackers behind the Odido breach that exposed 6M customers after a phishing attack and seek public help identifying them. Dutch police have identified strong indications that Dutch nationals were involved in the February 2026 cyberattack on telecom provider Odido, which resulted in data from more than six million customers being stolen […]
Pierluigi Paganini

Claude Code users keep 50% higher limits until July 19

Help Net Security
4 days ago

Anthropic has extended a limited-time promotion that increases weekly usage limits in Claude Code by 50% through July 19, 2026, at 11:59 PM PT. When the promotion ends, weekly usage limits will return to their standard levels without any changes to users’ plans or billing. The promotion is available to Pro, Max, and Team plans, as well as legacy seat-based users on Enterprise plans. Free plans and consumption-based Enterprise seats are not eligible. What’s included … More →

The post Claude Code users keep 50% higher limits until July 19 appeared first on Help Net Security.

Anamarija Pogorelec

Managed ad