🚨 EUVD-2026-42865

📊 Score: 3.9/10 (CVSS v3.1)
📅 Updated: 2026-07-10

📝 A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during the parsing of a PAX extended header containing a malformed SUN.holesdata sparse-file attribute. Successful exploitation c...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42865

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42864

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: KiviCare – Clinic & Patient Management System (EHR)
🏢 Vendor: iqonicdesign
📅 Updated: 2026-07-10

📝 The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.0. This is due to the plugin not properly verifying ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42864

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42863

📊 Score: 6.4/10 (CVSS v3.1)
📦 Product: Logo Slider WP – Responsive Logo Carousel, Logo Gallery & Logo Showcase
🏢 Vendor: LogicHunt
📅 Updated: 2026-07-10

📝 The Logo Slider – Logo Carousel, Client Logo Slider & Brand Showcase for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lgx_tooltip_position' parameter in...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42863

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42862

📊 Score: 4.9/10 (CVSS v3.1)
📦 Product: Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails
🏢 Vendor: getwpfunnels
📅 Updated: 2026-07-10

📝 The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to generic SQL Injection via the 'recipients' parameter in all v...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42862

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42861

📊 Score: 6.4/10 (CVSS v3.1)
📦 Product: Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
🏢 Vendor: jegtheme
📅 Updated: 2026-07-10

📝 The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Box...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42861

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42860

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: JoomSport – for Sports: Team & League, Football, Hockey & more
🏢 Vendor: beardev
📅 Updated: 2026-07-10

📝 The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via 'event' Shortcode Attribute in all versions up to, and including, 5.7...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42860

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42859

📊 Score: 4.3/10 (CVSS v3.1)
📦 Product: Invoice123
🏢 Vendor: saskaita123
📅 Updated: 2026-07-10

📝 The Invoice123 plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenti...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42859

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42858

📊 Score: 9.3/10 (CVSS v3.1)
📅 Updated: 2026-07-10

📝 A flaw was found in the `guardrails-detectors` component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery (SSRF) by submitting a specially crafted XML Schema Definition (XSD) string. This can lead to unauthorized access to sensitive information, includ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42858

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42857

📊 Score: 8.2/10 (CVSS v3.1)
📦 Product: DMS
🏢 Vendor: R-SOFT SERWIS
📅 Updated: 2026-07-10

📝 R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password hash to decode superadmin credentials. Critically, this password cannot be changed except by modifying the configuration file.

This is...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42857

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42856

📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: DMS, DMS
🏢 Vendor: R-SOFT SERWIS
📅 Updated: 2026-07-10

📝 R-SOFT DMS is vulnerable to Insecure Direct Object Reference (IDOR) attack in multiple file download endpoints. The application fetches files from the database by ID and serves them to whoever requests them, relying only on session authentication, mea...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42856

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42855

📊 Score: 9.0/10 (CVSS v3.1)
📦 Product: DMS, DMS
🏢 Vendor: R-SOFT SERWIS
📅 Updated: 2026-07-10

📝 R-SOFT DMS is vulnerable to OS Command Injection in the Optical Character Recognition (OCR) module. Multiple command execution functions accept user-controllable file paths without proper sanitization before passing them to the system shell via SSH. I...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42855

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42854

📊 Score: 5.1/10 (CVSS v3.1)
📦 Product: DMS, DMS
🏢 Vendor: R-SOFT SERWIS
📅 Updated: 2026-07-10

📝 R-SOFT DMS is vulnerable to Stored XSS in file upload functionality. Authenticated attacker can inject arbitrary HTML and JS into the name of the file being uploaded, which will be executed when visiting file list or upload status by other users.

Thi...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42854

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-42853

📊 Score: 8.7/10 (CVSS v3.1)
📦 Product: DMS, DMS
🏢 Vendor: R-SOFT SERWIS
📅 Updated: 2026-07-10

📝 R-SOFT DMS is vulnerable to OS Command Injection in konwertujAction() function. The document converter executes shell commands using unsanitized file paths and format parameters. This allows an authenticated attacker to execute arbitrary system comman...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42853

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxp[:]//0283659[.]com/index[.]html
🧬 Analysis at: https://urldna.io/scan/6a5076183b77500006de7dee
#cybersecurity #phishing #infosec #urldna #scam #infosec

Microsoft Patches RoguePlanet Zero-Day in Defender Engine

Microsoft fixed a zero-day vulnerability in the Malware Protection Engine known as RoguePlanet that allowed local attackers to gain SYSTEM privileges.

**Check that your Microsoft Malware Protection Engine version is 1.1.26060.3008 or higher (look in Windows Security settings). Most devices update automatically, but exploit code is already public, so verify now. If you run isolated or offline networks, manually apply the latest engine update, since those systems won't get it automatically and remain vulnerable even if the antivirus is disabled.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/microsoft-patches-rogueplanet-zero-day-in-defender-engine-k-w-n-5-1/gD2P6Ple2L

Ill Bloom: 431 Wallets Drained for $3.1M via Insecure PRNG https://deafnews.it/en/article/ill-bloom-431-wallets-drained-for-31m-via-insecure-prng #Cybersecurity

Still screenshotting your videos? Google Photos could make life easier for you

A useful Google Photos feature could soon become easier to find.

https://www.androidauthority.com/google-photos-save-video-frame-photo-apk-teardown-3686254/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Online dating: the multi-billion dollar swipe #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/online-dating-the-multi-billion-dollar-swipe/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

🟠 CVE-2026-57023 - High (7.5)

An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial of Service...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57023/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-57023

🟠 CVE-2026-57026 - High (7.5)

An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).If the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57026/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-57026

🟠 CVE-2026-55604 - High (8.6)

DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior to version 1.7.0, the process-global `SessionStore` accepts caller-supplied `session_id` values without binding them to any authenticated principal or transp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55604/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-55604

Why so many scams go unreported #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/why-so-many-scams-go-unreported/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

🚨 EUVD-2026-42788

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: CowAgent, CowAgent
🏢 Vendor: zhayujie
📅 Updated: 2026-07-10

📝 A vulnerability was determined in zhayujie CowAgent up to 2.1.1. Impacted is the function _build_image_content/_download_to_data_url of the file agent/tools/vision/vision.py of the component Vision Tool. Executing a manipulation of the argument i...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42788

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//bit[.]ly/480Y0ze
🧬 Analysis at: https://urldna.io/scan/6a4fe9803b77500009038d56
#cybersecurity #phishing #infosec #urldna #scam #infosec

💭 Méditation du Firewall

𝘜𝘯 𝘤𝘢𝘳𝘢𝘤𝘵è𝘳𝘦 𝘥𝘦 𝘥𝘪𝘧𝘧é𝘳𝘦𝘯𝘤𝘦 𝘥𝘢𝘯𝘴 𝘶𝘯𝘦 𝘜𝘙𝘓, 𝘦𝘵 𝘤'𝘦𝘴𝘵 𝘷𝘰𝘵𝘳𝘦 𝘯𝘶𝘮é𝘳𝘰 𝘥𝘦 𝘤𝘢𝘳𝘵𝘦 𝘲𝘶𝘪 𝘱𝘳𝘦𝘯𝘥 𝘥𝘦𝘴 𝘷𝘢𝘤𝘢𝘯𝘤𝘦𝘴 — 𝘴𝘢𝘯𝘴 𝘷𝘰𝘶𝘴.

#infosec #cybersecurity #aphorisme

Google NotebookLM zapisuje Twoje notatki do formatu wideo. Google NotebookLM (LM = Language Model) to internetowe narzędzie do badań i robienia notatek opracowane przez Google Labs, które wykorzystuje sztuczną inteligencję... https://linuxiarze.pl/google-notebooklm-zapisuje-twoje-notatki-do-formatu-wideo/ #cybersecurity #sztucznainteligencja #notatki

Galaxy Z Fold 8, Fold 8 Ultra prices leak for US, and there might be bad news

It looks like a price hike is on the cards once again.

https://www.androidauthority.com/samsung-galaxy-z-fold-8-us-price-leak-3686093/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Sysdig documented JADEPUFFER, the first agentic ransomware run end-to-end by an AI agent. It breached Langflow via CVE-2025-3248 and extorted a database.

#JADEPUFFER #AgenticRansomware #AI #Ransomware #Langflow #Sysdig #CyberSecurity #InfoSec

https://securityonline.info/jadepuffer-agentic-ransomware/?utm_source=mastodon&utm_medium=jetpack_social

Professor suspected AI-powered cheating on take-home midterms, makes finals in-person — only two students…

A Brown University professor suspected that almost his entire class cheated on take-home mid-term exams using AI tools after they scored unusually high. In-person final exams showed that only two students scored within …

https://www.tomshardware.com/tech-industry/artificial-intelligence/professor-suspected-ai-powered-cheating-on-take-home-midterms-makes-finals-in-person-only-two-students-scored-within-10-percent-of-their-midterm-score

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

This dumb password rule is from Rediff.

A maximum password length of 12. The hidden requirements are:
- at least 1 uppercase letter
- at least 1 lowercase letter
- at least 1 numeric character
- at least 1 special symbol (which can not be ^, %)

https://dumbpasswordrules.com/sites/rediff/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

Possible Phishing 🎣
on: ⚠️hxxps[:]//mekucoinlogiin[.]gitbook[.]io
🧬 Analysis at: https://urldna.io/scan/6a5036123b77500006de7717
#cybersecurity #phishing #infosec #urldna #scam #infosec

Nvidia shows off GeForce Trading Cards Series 1 — collectible cards show off games, GPUs, and tech demos, and will be available for free at upcoming events

Nvidia is creating a set of collectible trading cards that will be given away for free during live events and giveaways this summer.

https://www.tomshardware.com/pc-components/gpus/nvidia-shows-off-geforce-trading-cards-series-1-collectible-cards-show-off-games-gpus-and-tech-demos-and-will-be-available-for-free-at-upcoming-events

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Intel preps 28-core Nova Lake-S CPUs for Dunlow workstation platform — Entry-level Xeon chip features LGA1954 socket

Intel readies Xeon 'Dunlow' platform with 28 cores in LGA1954 packaging for entry-level servers and workstations.

https://www.tomshardware.com/pc-components/cpus/intel-preps-28-core-nova-lake-s-cpus-for-dunlow-workstation-platform-entry-level-xeon-chip-features-lga1954-socket

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Possible Phishing 🎣
on: ⚠️hxxps[:]//creditiperhabbogratissicuro100[.]blogspot[.]it
🧬 Analysis at: https://urldna.io/scan/6a50605a3b77500006de7c00
#cybersecurity #phishing #infosec #urldna #scam #infosec

Revive Adserver: 25 CVEs, 8 high-severity, avg CVSS 6.17. 100% unpatched. Trust Score: C. Open-source ad server, but 100% unpatched is risky. #ReviveAdserver #infosec #cybersecurity

https://www.valtersit.com/vendors/revive-adserver/

AMD revives aging Zen 2 processor for budget PCs — Ryzen 7 4700LE resurfaces in a new $800 RTX 3050 prebuilt

AMD's quiet revival of older Ryzen processors continues, with the Ryzen 7 4700LE now appearing in a prebuilt gaming desktop priced at $799.99.

https://www.tomshardware.com/pc-components/cpus/amd-revives-aging-zen-2-processor-for-budget-pcs-ryzen-7-4700le-resurfaces-in-a-new-usd800-rtx-3050-prebuilt

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Everyone uses Wi-Fi. Very few understand what actually happens after clicking "Connect."

I spent weeks putting together a deep technical guide to 802.11 that goes beyond the usual "run this command" tutorials.

Inside you'll learn:
• How Wi-Fi really works at the protocol level
• WEP → WPA → WPA2 → WPA3 evolution
• Monitor mode & packet capture
• 802.11 frame anatomy explained
• Wireshark filters that actually matter
• PMKID, WPS, Evil Twin, and handshake concepts
• Aircrack-ng workflow
• Defensive mitigations and why some "best practices" fail

If you're preparing for OSCP, Hack The Box, TryHackMe, wireless pentesting, or just want to truly understand Wi-Fi, this guide is for you.

Read it here 👇
https://thecybersecguru.com/networking/wifi-802-11-hacking-guide-pentesters/?utm_source=mastodon&utm_medium=social

#CyberSecurity #EthicalHacking #WiFi #Networking #OSCP #PenetrationTesting #Aircrack #Wireshark #Linux #Infosec

Organized cybercrime: the Crime-as-a-Service model #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/organized-cybercrime-the-crime-as-a-service-model/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

OpenAI's GPT-5.6 and ChatGPT Work aim to beat Anthropic on price, speed, and productivity

OpenAI's latest announcement looks like a lot more than a model upgrade.

https://www.zdnet.com/article/openais-gpt-5-6-chatgpt-work-beat-anthropic-on-price-speed-and-productivity/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

🚨 EUVD-2026-42765

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: PicoClaw, PicoClaw, PicoClaw (+7 more)
🏢 Vendor: Sipeed
📅 Updated: 2026-07-10

📝 A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Affected by this issue is some unknown functionality of the file pkg/channels/mqtt/mqtt.go of the component MQTT Channel Handler. This manipulation of the argument c...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42765

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxp[:]//netflix555-login[.]com
🧬 Analysis at: https://urldna.io/scan/6a4f95233b775000027d008a
#cybersecurity #phishing #infosec #urldna #scam #infosec

🟠 CVE-2026-59832 - High (7.7)

SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /snippets/*filepath route handler serveSnippets in kernel/server/serve.go joins a single-decoded request path with the snippets directory without subpath containmen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59832/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-59832

🟠 CVE-2026-59834 - High (7.5)

SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the block search endpoint POST /api/search/fullTextSearchBlock concatenates attacker-controlled paths values into SQL predicates used by non-SQL search modes, allowing ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59834/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-59834