CVE ID :CVE-2026-55975 Published : June 26, 2026, 10:58 p.m. | 20 hours, 54 minutes ago Description :A vulnerability exists in H.View IP cameras that could allow an authenticated user to supply unsanitized XML fields to the device’s certificate generation interface, which…
The FBI and CISA have updated their March warning about Russian intelligence phishing Signal accounts, and the operators have added a step: they now coax targets into handing over their Signal Backup Recovery Key. Hand it over once, and the attacker can…
A newly discovered cyber attack campaign has been observed delivering a previously undocumented malware family called SharkLoader that acts as a loader for deploying Cobalt Strike Beacon on compromised hosts. Kaspersky, which is tracking the activity under the moniker StrikeShark,…
CVE ID :CVE-2026-33646 Published : June 26, 2026, 4:51 p.m. | 2 hours, 53 minutes ago Description :mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files through the Tera template engine during parsing, with…
CVE ID :CVE-2026-55441 Published : June 26, 2026, 4:48 p.m. | 2 hours, 56 minutes ago Description :mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise’s trust feature gates config files (mise.toml, .tool-versions) through trust_check, but task-include…
CVE ID :CVE-2026-56876 Published : June 26, 2026, 4:44 p.m. | 3 hours ago Description :extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like ‘../../../../etc/passwd’, extract-zip…
CVE ID :CVE-2026-56786 Published : June 25, 2026, 6:11 p.m. | 1 hour, 28 minutes ago Description :RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode_type1033 function that fails to clamp length counters to destination buffer size, allowing up to 191-byte…
CVE ID :CVE-2026-56771 Published : June 25, 2026, 6:07 p.m. | 1 hour, 32 minutes ago Description :NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the add_url endpoint that allows authenticated users to make arbitrary server requests to internal…
CVE ID :CVE-2026-56770 Published : June 25, 2026, 6:06 p.m. | 1 hour, 33 minutes ago Description :libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vector index when processing AIS sentences with empty or out-of-range sequential message IDs. Remote…
CVE ID :CVE-2026-56769 Published : June 25, 2026, 6:05 p.m. | 1 hour, 34 minutes ago Description :Huly Platform before commit 68cbf8a contains an authenticated server-side request forgery vulnerability in the /import endpoint of front pod that allows workspace users to make…