CVE ID :CVE-2026-58050 Published : June 28, 2026, 1:32 a.m. | 18 hours, 27 minutes ago Description :libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_attrs * sizeof(libssh2_publickey_attribute) without bounds checking,…
CVE ID :CVE-2026-58049 Published : June 28, 2026, 1:32 a.m. | 18 hours, 27 minutes ago Description :FFmpeg’s RASC video decoder (decode_dlta in libavcodec) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA…
The Security Service of Ukraine (SSU) said it, together with the U.S. Federal Bureau of Investigation (FBI), uncovered a long-running campaign orchestrated by Russian intelligence services to break into the messaging accounts of government officials, military personnel, politicians, and activists…
OpenAI on Friday released three versions of GPT-5.6, called Sol, Terra, and Luna, as a limited preview to a small number of companies as part of an ongoing engagement with the U.S. government. While Sol is the latest flagship model…
CVE ID :CVE-2026-12415 Published : June 27, 2026, 4:30 a.m. | 15 hours, 22 minutes ago Description :The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the pravel_invoice_edit_account() AJAX action in versions up…
CVE ID :CVE-2026-56414 Published : June 26, 2026, 11 p.m. | 20 hours, 52 minutes ago Description :A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arbitrary file content to fixed, persistent filesystem locations without validating…
CVE ID :CVE-2026-55975 Published : June 26, 2026, 10:58 p.m. | 20 hours, 54 minutes ago Description :A vulnerability exists in H.View IP cameras that could allow an authenticated user to supply unsanitized XML fields to the device’s certificate generation interface, which…
The FBI and CISA have updated their March warning about Russian intelligence phishing Signal accounts, and the operators have added a step: they now coax targets into handing over their Signal Backup Recovery Key. Hand it over once, and the attacker can…
A newly discovered cyber attack campaign has been observed delivering a previously undocumented malware family called SharkLoader that acts as a loader for deploying Cobalt Strike Beacon on compromised hosts. Kaspersky, which is tracking the activity under the moniker StrikeShark,…
CVE ID :CVE-2026-33646 Published : June 26, 2026, 4:51 p.m. | 2 hours, 53 minutes ago Description :mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files through the Tera template engine during parsing, with…