Aggregator

CVE-2026-30877 | baserproject basercms up to 5.2.2 User Account update os command injection (GHSA-m9g7-rgfc-jcm7 / CNNVD-202603-6291)

Vuldb Updates
1 week ago
A vulnerability was found in baserproject basercms up to 5.2.2 and classified as critical. The affected element is the function update of the component User Account Handler. Executing a manipulation can lead to os command injection. This vulnerability is handled as CVE-2026-30877. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2025-32957 | baserproject basercms up to 5.2.2 require_once unrestricted upload (GHSA-hv78-cwp4-8r7r / CNNVD-202603-6293)

Vuldb Updates
1 week ago
A vulnerability was found in baserproject basercms up to 5.2.2 and classified as critical. This vulnerability affects the function require_once. Such manipulation leads to unrestricted upload. This vulnerability is uniquely identified as CVE-2025-32957. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-21861 | baserproject basercms up to 5.2.2 exec os command injection (GHSA-qxmc-6f24-g86g / CNNVD-202603-6295)

Vuldb Updates
1 week ago
A vulnerability was found in baserproject basercms up to 5.2.2. It has been declared as critical. This affects the function exec. The manipulation results in os command injection. This vulnerability was named CVE-2026-21861. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-27697 | baserproject basercms up to 5.2.2 Blog Post sql injection (GHSA-vh89-rjph-2g7p / CNNVD-202603-6292)

Vuldb Updates
1 week ago
A vulnerability labeled as critical has been found in baserproject basercms up to 5.2.2. Affected by this issue is some unknown functionality of the component Blog Post Handler. Executing a manipulation can lead to sql injection. This vulnerability is tracked as CVE-2026-27697. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.
vuldb.com

48 Hours: The Window Between Infostealer Infection and Dark Web Sale

Security Boulevard
1 week ago

New research maps the full infostealer lifecycle. Your credentials go from an employee’s device to an underground marketplace in less time than it takes your security team to notice anything is wrong. On March 24, 2026, researchers at Whiteintel’s Intelligence Division published a detailed map of the full infostealer lifecycle, tracing the exact sequence from […]

The post 48 Hours: The Window Between Infostealer Infection and Dark Web Sale appeared first on Security Boulevard.

Christine Castro

瑞典回归传统的基于纸质的课堂教育模式

Solidot
1 week ago
数字化教育和社交媒体给儿童和青少年带来的问题最近几年日益受到关注和争论。瑞典和其它国家一样，过去几十年逐渐放弃纸质书籍，切换到平板电脑和数字资源，试图让学生为网络世界做好准备。但数字化教育的争议最终促使瑞典在 2023 年宣布回归传统的基于纸质的课堂教育模式，纸质书籍重新回到课堂，学生开始学习用铅笔或钢笔在纸上手写，以最传统的方式进行学习。瑞典政府还计划在全国范围内推行学校禁止使用手机政策。这标志着瑞典教育模式的重大转变。瑞典官员强调，学校不会完全摒弃数字技术。数字辅助工具主要用于帮助高年级年龄段学生进行学习。

CVE-2026-34999 | Volcengine OpenViking up to 0.2.13 /bot/v1/chat missing authentication (EUVD-2026-17905)

VulDB Recent Entries
1 week ago
A vulnerability described as critical has been identified in Volcengine OpenViking up to 0.2.13. Affected by this issue is some unknown functionality of the file /bot/v1/chat. Such manipulation leads to missing authentication. This vulnerability is traded as CVE-2026-34999. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

Managed ad