Aggregator

CVE-2026-45027 | LabRedesCefetRJ WeGIA up to 3.7.2 html/login.php hash hash without salt

VulDB Recent Entries
3 days 5 hours ago
A vulnerability categorized as problematic has been discovered in LabRedesCefetRJ WeGIA up to 3.7.2. This impacts the function hash of the file html/login.php. Executing a manipulation can lead to one-way hash without salt. This vulnerability is registered as CVE-2026-45027. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-8175 | IBM Aspera High-Speed Transfer Endpoint up to 4.4.7 FP1 Asperahttpd heap-based overflow

VulDB Recent Entries
3 days 5 hours ago
A vulnerability was found in IBM Aspera High-Speed Transfer Endpoint and Aspera High-Speed Transfer Server up to 4.4.7 FP1. It has been rated as critical. This affects an unknown function of the component Asperahttpd. Performing a manipulation results in heap-based buffer overflow. This vulnerability is cataloged as CVE-2026-8175. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-48925 | GitHub Integration Plugin up to 0.7.3 on Jenkins Pull Request cross-site request forgery

VulDB Recent Entries
3 days 5 hours ago
A vulnerability was found in GitHub Integration Plugin up to 0.7.3 on Jenkins and classified as problematic. Impacted is an unknown function of the component Pull Request Handler. The manipulation results in cross-site request forgery. This vulnerability is identified as CVE-2026-48925. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2025-68712 | SpSoft AppLock up to 7.9.40 on Android com.sp.protector.free information disclosure

VulDB Recent Entries
3 days 5 hours ago
A vulnerability, which was classified as problematic, has been found in SpSoft AppLock up to 7.9.40 on Android. This affects an unknown part of the component com.sp.protector.free. Performing a manipulation results in information disclosure. This vulnerability was named CVE-2025-68712. The attack needs to be approached locally. There is no available exploit.
vuldb.com

CVE-2026-31266 | Craft CMS up to 5.9.5 Migrate Endpoint /actions/app/migrate missing authentication

VulDB Recent Entries
3 days 5 hours ago
A vulnerability marked as critical has been reported in Craft CMS up to 5.9.5. This impacts an unknown function of the file /actions/app/migrate of the component Migrate Endpoint. The manipulation leads to missing authentication. This vulnerability is traded as CVE-2026-31266. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

How Top CISOs Increase Risk Visibility for Zero Critical Incidents 

Cyber Security News
3 days 5 hours ago

How many alerts in your SOC are truly business-critical, and how many only look urgent because the team lacks context? This is one of the hardest questions for CISOs today. Without clear visibility, teams can waste time on noise while real phishing and malware threats move deeper into the environment.  Top CISOs are solving this […]

The post How Top CISOs Increase Risk Visibility for Zero Critical Incidents  appeared first on Cyber Security News.

Balaji N

Managed ad