An Iranian hacking group affiliated with Iran’s Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular command-and-control (C2) framework dubbed Cavern (aka Cav3rn) targeting Israeli organizations. The activity, which has primarily singled out IT providers and…
CVE ID :CVE-2026-48614 Published : July 6, 2026, 6:16 p.m. | 43 minutes ago Description :An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inject arbitrary configuration directives, resulting in arbitrary file write as root and…
A use-after-free bug in Linux’s KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it. Dubbed ‘Januscape’ and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code…
CVE ID :CVE-2026-48316 Published : July 6, 2026, 5:16 p.m. | 1 hour, 44 minutes ago Description :ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of…
CVE ID :CVE-2026-40141 Published : July 6, 2026, 5:16 p.m. | 1 hour, 44 minutes ago Description :A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient…
CVE ID :CVE-2026-9085 Published : July 5, 2026, 3:16 p.m. | 3 hours, 34 minutes ago Description :Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-Parental-Control allows DNS Spoofing. This issue affects Pardus-Parental-Control:…
CVE ID :CVE-2026-59509 Published : July 5, 2026, 1:16 p.m. | 5 hours, 34 minutes ago Description :An unauthenticated improper input validation vulnerability in the POST /fetch_cve_data endpoint in cve-search. A remote attacker can manipulate request parameters controlling the MongoDB collection, projected…
CVE ID :CVE-2026-14721 Published : July 5, 2026, 8:16 a.m. | 10 hours, 34 minutes ago Description :A vulnerability has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects an unknown function of the file /goform/ConfigWirelessBase_5g of the component Web…
CVE ID :CVE-2026-14637 Published : July 4, 2026, 6:16 p.m. | 1 day ago Description :A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0fc3eb973a1f5e6a7. The affected element is the function getCartItems in the library application The manipulation of…
CVE ID :CVE-2026-14535 Published : July 4, 2026, 2:16 p.m. | 4 hours, 26 minutes ago Description :In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardless…