Aggregator

Currently trending CVE - Hype Score: 1

Currently trending CVE - Hype Score: 1

A vulnerability labeled as problematic has been found in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the component CDXML File Handler. Such manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2026-3408. The attack can be launched remotely. Moreover, an exploit is present. It is best practice to apply a patch to resolve this issue.

Submit #763756 / VDB-348303

A vulnerability identified as problematic has been detected in YosysHQ yosys up to 0.62. This affects the function Yosys::RTLIL::Const::set of the file kernel/rtlil.h of the component BLIF File Parser. This manipulation causes heap-based buffer overflow. This vulnerability is handled as CVE-2026-3407. It is possible to launch the attack on the local host. Additionally, an exploit exists. Applying a patch is the recommended action to fix this issue. It appears that the issue is not reproducible all the time.

59 миллионов показов мошеннических объявлений остановили одним паролем — 123.

A vulnerability categorized as critical has been discovered in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of the file /admin/registration.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. This vulnerability is known as CVE-2026-3406. It is possible to launch the attack remotely. Furthermore, an exploit is available.

Submit #763755 / VDB-348302

A vulnerability was found in thinkgem JeeSite up to 5.15.1. It has been rated as problematic. The affected element is an unknown function of the component Connection Handler. The manipulation leads to path traversal. This vulnerability is traded as CVE-2026-3405. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in thinkgem JeeSite up to 5.15.1. It has been declared as problematic. Impacted is an unknown function of the file /com/jeesite/common/shiro/cas/CasOutHandler.java of the component Endpoint. Executing a manipulation can lead to xml external entity reference. This vulnerability appears as CVE-2026-3404. The attack may be performed from remote. In addition, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

好的，我现在需要帮用户总结这篇文章的内容。用户的要求是用中文，控制在100字以内，不需要特定的开头，直接描述文章内容。 首先，我仔细阅读了文章。主要讲的是特朗普禁止使用Anthropic的AI工具，但美军仍在使用这些工具进行空袭伊朗。关键点包括禁令发布后美军继续使用AI，涉及情报评估、目标识别和模拟战斗场景，以及政府与公司之间的争执和五角大楼的风险评估。 接下来，我需要将这些信息浓缩到100字以内。要确保涵盖特朗普的禁令、美军的实际使用情况、AI的具体用途以及背后的争执和风险因素。 然后，我会组织语言，确保逻辑清晰，信息完整。可能的结构是：特朗普下达禁令后，美军仍用其AI进行空袭，并详细说明用途和争执情况。 最后，检查字数是否在限制内，并确保没有遗漏重要信息。 特朗普禁止政府使用Anthropic AI工具后，美军仍利用其进行情报评估、目标识别和模拟战斗场景。尽管美国政府与该公司就五角大楼的AI使用存在争执，并将该公司列为供应链风险，但这些AI工具在军事行动中已深深扎根。

Submit #763740 / VDB-348301

Submit #765097 / VDB-348300

Submit #763732 / VDB-348299

A vulnerability was found in PHPGurukul Student Record Management System 1.0. It has been classified as problematic. This issue affects some unknown processing of the file /edit-subject.php. Performing a manipulation of the argument Subject 1 results in cross site scripting. This vulnerability is reported as CVE-2026-3403. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability was found in PHPGurukul Student Record Management System up to 1.0 and classified as problematic. This vulnerability affects unknown code of the file /edit-course.php. Such manipulation of the argument Course Short Name leads to cross site scripting. This vulnerability is documented as CVE-2026-3402. The attack can be executed remotely. Additionally, an exploit exists.

Submit #763324 / VDB-348298

Submit #763323 / VDB-348297

A vulnerability has been found in SourceCodester Web-based Pharmacy Product Management System 1.0 and classified as problematic. This affects an unknown part. This manipulation causes session expiration. This vulnerability is registered as CVE-2026-3401. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Submit #762795 / VDB-348296