*** GMail and Validation-Mails *** There seems to be an issue that Gmail is not accepting mails from my server. The reason is that I am currently rebuilding my server infrastructure and the MX-entries are not correctly set. I have activated the accounts using a Gmail-address manually. If you do not receive the validation mail, drop me a note to k.e.klingner@gmail.com.
A vulnerability, which was classified as critical, has been found in gabehf Koito up to 0.3.2. This vulnerability affects unknown code of the file /apis/web/v1/album/{id}/image of the component Image Endpoint. Performin…
vuldb
A vulnerability classified as problematic was found in lobehub lobe-chat up to 2.2.13. This affects an unknown part of the component Avatar Upload Handler. Such manipulation leads to cross site scripting. This vulnerabi…
vuldb
A vulnerability classified as problematic has been found in Fastschema up to 0.15.1. Affected by this issue is the function pkg/rclonefs/base.go.PutMultipart of the file pkg/rclonefs/base.go of the component File Upload…
vuldb
A vulnerability described as problematic has been identified in phoenixframework phoenix_live_view up to 1.2.8. Affected by this vulnerability is the function validate_local_url of the file lib/phoenix_live_view.ex of t…
vuldb
A vulnerability marked as problematic has been reported in fastschema up to 0.15.1. Affected is the function sendOTPEmail of the file pkg/auth/local.go. The manipulation leads to null pointer dereference. This vulnerabi…
vuldb
A vulnerability labeled as problematic has been found in GIMP. This impacts an unknown function of the component file-fli. Executing a manipulation can lead to integer overflow. This vulnerability appears as CVE-2026-59…
vuldb
A vulnerability identified as critical has been detected in alseambusher crontab-ui up to 0.4.2. This affects an unknown function. Performing a manipulation of the argument env_vars results in os command injection. This…
vuldb
A vulnerability categorized as critical has been discovered in alseambusher crontab-ui up to 0.4.2. The impacted element is the function makeCommand of the file crontab.js. Such manipulation of the argument hook leads t…
vuldb
A vulnerability was found in Bluewave Labs Checkmate up to 2.1.0. It has been rated as problematic. The affected element is an unknown function of the file /api/v1/auth/recovery/request. This manipulation causes informa…
vuldb
A vulnerability was found in CoreBunch Instatic up to 0.0.14. It has been declared as problematic. Impacted is an unknown function of the file /_instatic/hole of the component Render Cache. The manipulation of the argum…
vuldb
A vulnerability was found in frangoteam FUXA up to 1.3.3. It has been classified as problematic. This issue affects the function isSocketAdminAuthorized of the file server/runtime/index.js of the component DAQ_QUERY Han…
vuldb
A vulnerability was found in Grafana Labs Grafana up to 13.2.0 and classified as problematic. This vulnerability affects unknown code of the file pkg/services/ngalert/provisioning/contactpoints.go of the component Delet…
vuldb
The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once again in attacks targeting Russian companies spanning instrumentation, electronics, transport, energy, …
The Hacker News
A vulnerability has been found in fastschema up to 0.15.1 and classified as critical. This affects the function verifyOTPSession of the file pkg/auth/local.go of the component OTP Verification. Performing a manipulation…
vuldb
Interlock ransomware is taking a familiar Windows security tool and using it for credential theft. The group has turned memory analysis software into a way to pull password hashes and account data from compromised compu…
CyberSecurityNews
A vulnerability, which was classified as critical, was found in dulldusk phpfm up to 1.8.0. Affected by this issue is some unknown functionality. Such manipulation of the argument upload_ext_filter leads to unrestricted…
vuldb
A vulnerability, which was classified as critical, has been found in dulldusk phpfm up to 1.8.0. Affected by this vulnerability is an unknown functionality of the file index.php. This manipulation of the argument auth_p…
vuldb
A vulnerability classified as problematic was found in cube-root directory-serve up to 1.3.7. Affected is an unknown function of the file lib/helper/html.js of the component Filename Handler. The manipulation results in…
vuldb
A vulnerability classified as problematic has been found in mustafaakin cast-localvideo. This impacts the function res.sendFile of the file app.js. The manipulation of the argument dir leads to path traversal. This vuln…
vuldb
A vulnerability described as critical has been identified in duhow xiaoai-patch. This affects an unknown function of the file api/main.py of the component Auth Endpoint. Executing a manipulation of the argument url can …
vuldb
A vulnerability marked as very critical has been reported in NASA Fprime-gds up to 3.4.3. The impacted element is an unknown function of the file src/fprime_gds/flask/app.py of the component Flask Application. Performin…
vuldb
A vulnerability labeled as problematic has been found in automatisch. The affected element is an unknown function of the file packages/backend/src/apps/http-request/actions/custom-request/index.js of the component Custo…
vuldb
Repairable hardware is little comfort when personal details escape
The Register
A vulnerability identified as critical has been detected in Daptin up to 0.12.34. Impacted is the function CanRead/CanPeek/CanCreate/CanUpdate/CanDelete/CanRefer of the file server/permission/permission.go of the compon…
vuldb
A vulnerability categorized as critical has been discovered in 4xmen pm2panel. This issue affects the function exec of the file pm2panel.js of the component Handler. The manipulation of the argument ID results in os com…
vuldb
A vulnerability was found in o1lab xmysql. It has been rated as problematic. This vulnerability affects the function path.join of the file lib/xapi.js of the component xapi. The manipulation of the argument Name leads t…
vuldb
A vulnerability was found in Redis up to 8.8.1. It has been declared as critical. This affects the function getPingExtLength of the component Cluster Bus Message Parser. Executing a manipulation can lead to out-of-bound…
vuldb
A vulnerability was found in duhow xiaoai-patch. It has been classified as critical. Affected by this issue is the function os.system of the file api/main.py of the component Endpoint Handler. Performing a manipulation …
vuldb
A vulnerability was found in NASA HyperCP and classified as critical. Affected by this vulnerability is an unknown functionality of the file Source/OBPGSession.py of the component Handler. Such manipulation leads to os …
vuldb
A vulnerability has been found in cube-root directory-serve up to 1.3.7 and classified as critical. Affected is an unknown function of the file lib/middleware/file-remove.js. This manipulation of the argument File cause…
vuldb
A vulnerability, which was classified as critical, was found in Tencent APIJSON up to 8.1.8. This impacts an unknown function of the file AbstractSQLConfig.java of the component Per-role Allow-list Check. The manipulati…
vuldb
A vulnerability, which was classified as critical, has been found in fosrl Pangolin up to 1.20.0. This affects the function verifyResourceAccessToken of the file server/routers/resource/authWithAccessToken.ts of the com…
vuldb
A vulnerability classified as critical was found in Red Hat GIMP. The impacted element is an unknown function of the component Seattle Filmworks File Loader. Executing a manipulation can lead to heap-based buffer overfl…
vuldb
A vulnerability classified as very critical has been found in AsyncFuncAI deepwiki-open. The affected element is an unknown function of the file api/api.py. Performing a manipulation of the argument owner/repo/repo_type…
vuldb
A vulnerability described as problematic has been identified in FreePBX 17.0. Impacted is an unknown function of the file amp_conf/htdocs/admin/libraries/BMO/Ajax.class.php of the component Ajax. Such manipulation leads…
vuldb
A vulnerability marked as problematic has been reported in Bludit 4.0.0-beta. This issue affects the function Filesystem::mv of the file bl-kernel/ajax/logo-upload.php of the component Upload Endpoint. This manipulation…
vuldb
A vulnerability labeled as critical has been found in picocms Pico up to 2.1.4. This vulnerability affects the function Pico::getBaseUrl of the file lib/Pico.php of the component Base URL. The manipulation results in in…
vuldb
The security defect allows unauthenticated, remote attackers to gain administrative access to Metabase instances. The post Metabase Patches Vulnerability Exploited as Zero-Day appeared first on SecurityWeek.
SecurityWeek
This is good: Post-quantum cryptography is now one pip-install away for the entire Python ecosystem. With funding from the Sovereign Tech Agency, we implemented support for ML-KEM, the NIST-standard key-establishment pr…
Bruce Schneier
Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um vertrauliche Informationen offenzulegen, Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder seine Rechte zu erweitern.
BSI CERT Security Advisory
Ransomware campaigns are increasingly starting with people who hold the keys to everyday business decisions. Attackers are compromising managers whose accounts can open doors to contracts, payments, customer records, an…
CyberSecurityNews
Ein Angreifer kann mehrere Schwachstellen in WordPress ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu um…
BSI CERT Security Advisory
Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.
BSI CERT Security Advisory
Ein Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand herbeizuf…
BSI CERT Security Advisory
A vulnerability identified as problematic has been detected in WP Health Umbrella Plugin up to 2.26.2 on WordPress. This affects an unknown part. The manipulation leads to cross-site request forgery. This vulnerability …
vuldb
A vulnerability categorized as critical has been discovered in GNU Emacs up to 30.2. Affected by this issue is the function sfnt_vary_simple_glyph/sfnt_vary_compound_glyph of the file src/sfnt.c of the component Gvar Ta…
vuldb
A vulnerability was found in GNU Emacs up to 30.2. It has been rated as critical. Affected by this vulnerability is the function sfnt_read_table_directory of the file src/sfnt.c of the component Font Parser. Performing …
vuldb
A vulnerability was found in GNU Emacs. It has been declared as critical. Affected is the function sfnt_read_name_table of the file src/sfnt.c of the component Font Handler. Such manipulation leads to integer overflow. …
vuldb
A vulnerability was found in GNU Emacs up to 30.2. It has been classified as critical. This impacts the function sfnt_read_cmap_format_12 of the file src/sfnt.c of the component TrueType Font Processing. This manipulati…
vuldb
A vulnerability was found in GNU Cpio up to 2.15 and classified as critical. This affects an unknown function of the component Archive Member Listing. The manipulation results in injection. This vulnerability is catalog…
vuldb
A vulnerability has been found in GNU Cpio up to 2.15 and classified as problematic. The impacted element is the function link_to_name of the component Tar Archive Extraction. The manipulation leads to path traversal. T…
vuldb
A vulnerability, which was classified as problematic, was found in GNU cpio up to 2.15. The affected element is the function make_path of the file src/makepath.c. Executing a manipulation can lead to stack-based buffer …
vuldb
Phishers are finding OnlyFans subscription upsells profitable enough to fuel massive bot campaigns.
Cybernews
Walk away and hope the classifier catches anything irreversible or destructive
The Register
Der Open-Source-Entwickler Daniel Stenberg sucht Helfer für das Curl-Security-Team. Die derzeitigen sieben Mitglieder haben alle eine Windows-Aversion. (Open Source, KI)
GOLEM
In einer Software-Dokumentation des chinesischen Herstellers MG taucht die Malware Teardroid auf. Das könnte jedoch ein Scan-Fehler sein. (Open Source, Malware)
GOLEM
A vulnerability, which was classified as critical, has been found in Fabrikar Fabrik Extension 1.0.0-4.6.6. Impacted is an unknown function. Performing a manipulation results in code injection. This vulnerability is ide…
vuldb
A vulnerability classified as critical was found in Red Hat Directory Server. This issue affects some unknown processing of the component CleanAllRUV. Such manipulation leads to improper authorization. This vulnerabilit…
vuldb
Kimsuky has been observed blending polished AI-made documents with familiar phishing tactics to push AsyncRAT, a remote-access trojan. The campaign shows how old delivery methods can gain new credibility when the bait l…
CyberSecurityNews
*Additional conditions may apply.
Cybernews