🚨 EUVD-2026-32564

📊 Score: 8.2/10 (CVSS v3.1)
📦 Product: set-get, set-get, rvf (+1 more)
🏢 Vendor: @Rvf, airjp73
📅 Updated: 2026-05-27

📝 RVF (formerly Remix Validated Form) provides easy form validation and state management for React. From 6.0.0 to before 6.0.4 and 7.0.2, setPath in @Rvf/set-get (used by @Rvf/core to flatten incoming form data into a nested objec...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32564

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-32631

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: MapServer
🏢 Vendor: MapServer
📅 Updated: 2026-05-27

📝 MapServer is a system for developing web-based GIS applications. From 6.4.0 to before 8.6.3, msSLDParseUserStyle always calls _SLDApplyRuleValues(psRule, psLayer, 1); for any <Rule> carrying <ElseFilter/> — it assumes msSLDParseRule added one class. When...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32631

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-32630

📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: facturascripts
🏢 Vendor: neorazorx
📅 Updated: 2026-05-27

📝 FacturaScripts is an open source accounting and invoicing software. In 2025.92 and earlier, a stored Cross-Site Scripting (XSS) vulnerability exists in the product search modal of sales (Core/Lib/AjaxForms/SalesModalHTML.php) and purchases documents...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32630

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-32629

📊 Score: 5.5/10 (CVSS v3.1)
📦 Product: Wireshark, Wireshark
🏢 Vendor: Wireshark Foundation
📅 Updated: 2026-05-27

📝 ROHC protocol dissector crash in Wireshark 4.6.0 to 4.6.5 and 4.4.0 to 4.4.15 allows denial of service

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32629

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-32628

📊 Score: 8.7/10 (CVSS v3.1)
📦 Product: relate
🏢 Vendor: inducer
📅 Updated: 2026-05-27

📝 RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its Celery workers to accept and deserialize untrusted 'pickle' data. An attacker who can reach the message broker can execute arbitrary ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32628

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-32627

📊 Score: 8.7/10 (CVSS v3.1)
📦 Product: relate
🏢 Vendor: inducer
📅 Updated: 2026-05-27

📝 RELATE is a web-based courseware package. Versions prior to commit 555f0efb1c5bd7531c07cd73724d7e566a81f620 have a stored cross-site scripting vulnerability that allows any enrolled student to execute arbitrary JavaScript in an administrator's browser session...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32627

#cybersecurity #infosec #euvd #cve #vulnerability

Meta now lets you pay for the pleasure of using Facebook

Facebook, Instagram, and WhatsApp are getting new paid subscriptions.

https://www.androidauthority.com/meta-paid-facebook-instagram-whatsapp-plans-3671832/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

You can print, slice, and engrave using this desktop crafting machine

Upgrading to more power laser cutting tools expands the types of materials the M2 can engrave. | Image: xTool xTool has announced a new multi-purpose crafting machine that could potentially be one of the most affordable…

https://www.theverge.com/tech/938031/xtool-m2-craft-machine-cmyk-inkjet-printing-laser-diode-cutter

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

New BTMOB and Grandoreiro malware campaigns are targeting Android and Windows users with phishing, banking credential theft, and remote access capabilities.

Researchers say the operations are expanding across multiple regions and using increasingly stealthy delivery methods.

👉 https://digitalescapetools.com/2026/05/btmob-grandoreiro-malware-campaigns.html

#CyberSecurity #Android #Malware #InfoSec #BankingTrojan

Possible Phishing 🎣
on: ⚠️hxxps[:]//543434565545[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a1706f93b775000051b109c
#cybersecurity #phishing #infosec #urldna #scam #infosec

Valve raises Steam Deck prices by more than $200

Valve has significantly increased the price of the Steam Deck - but now, it's also in stock. The 512GB Steam Deck OLED now costs $789, up from $549, while the 1TB model costs $949, up from $649. As I write this, both mo…

https://www.theverge.com/games/938340/valve-steam-deck-price-increase

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

🚨New ransom group blog post!🚨

Group name: chaos
Post title: sterlingindustries.com
Info: https://cti.fyi/groups/chaos.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

#7Eleven #DataBreach exposes personal information of 185,000 people

https://www.bleepingcomputer.com/news/security/7-eleven-data-breach-exposes-personal-information-of-185-000-people/

#cybersecurity #privacy

This new chip could bring Gemini Intelligence to non-flagship Android phones

Don't expect big upgrades elsewhere, though.

https://www.androidauthority.com/mid-range-chip-gemini-intelligence-3671538/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

🚨 EUVD-2026-32212

📊 Score: 4.2/10 (CVSS v3.1)
📅 Updated: 2026-05-27

📝 A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redirect Uniform Resource Identifiers (URIs), a remote attacker can manipulate the authentication process by crafting a special web address. If a user cl...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32212

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//eateli[.]weebly[.]com/
🧬 Analysis at: https://urldna.io/scan/6a16ba613b77500009acfd61
#cybersecurity #phishing #infosec #urldna #scam #infosec

Everyone is navigating #AI security in real time — even #Google

https://techcrunch.com/2026/05/24/everyone-is-navigating-ai-security-in-real-time-even-google/

#cybersecurity

7-Eleven data breach affects over 185,000 people’s personal data

a data breach at convenience store chain 7-Eleven affects over 185,000 people, including their names, dates of birth, physical addresses, phone numbers and email addresses.

The data breach was reported in April.

#7eleven #databreach #security #cybersecurity #hackers #hacking #hacked

https://techcrunch.com/2026/05/26/7-eleven-data-breach-affects-over-185000-peoples-personal-data/

Roku TV just landed on a portable projector for the first time, and it’s surprisingly cheap

Aurzen's new EAZZE D1R air delivers built-in Roku TV and flexible power support at a budget-friendly price

https://www.androidauthority.com/aurzen-eazze-d1r-air-launch-3670460/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

A fundamental parsing issue in Starlette, dubbed BadHost (CVE-2026-48710), enables attackers to bypass authentication by manipulating the HTTP Host header. This vulnerability, with historical parallels, critically impacts AI systems built on FastAPI, vLLM, and LiteLLM, which rely on Starlette. The attack chain is surprisingly simple, making immediate patching (Starlette 1.0.1) and…

https://www.tpp.blog/2e83vb7

#cybersecurity #starlette #cve202648710

🤖 This post was AI-generated.

The new Razr Ultra isn’t your average phone — for better and worse

A fine-looking phone. I had one ask for friends, colleagues, the lady checking me in for a meeting at a large software company's headquarters, and everyone else who stopped to admire the phone I've been carrying around.…

https://www.theverge.com/tech/937763/motorola-razr-ultra-2026-review-battery-camera

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Possible Phishing 🎣
on: ⚠️hxxps[:]//grenoblealpflll[.]weebly[.]com/
🧬 Analysis at: https://urldna.io/scan/6a1649e63b77500008ba338f
#cybersecurity #phishing #infosec #urldna #scam #infosec

The #AI Era Is Creating a Bug Hunting Arms Race

https://www.wired.com/story/the-ai-era-is-creating-a-bug-hunting-arms-race/

#cybersecurity

The AI fight brewing inside The New York Times

Yellow taxis pass in front of The New York Times newspaper building. | Alexandra Schuler/dpa (Photo by Alexandra Schuler/picture alliance via Getty Images) How newsrooms should use AI - or if they should at all - has be…

https://www.theverge.com/ai-artificial-intelligence/937689/new-york-times-tech-guild-ai-monitoring-performance-union-contract

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

🚨 EUVD-2026-32107

📊 Score: 6.4/10 (CVSS v3.1)
📦 Product: WPBakery Page Builder Addons by Livemesh
🏢 Vendor: livemesh
📅 Updated: 2026-05-27

📝 The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `lvca_admin_ajax` AJAX action in all versions up to, and including, 3.9.4 due to missing authorization ch...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32107

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-32106

📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: Booking Calendar – Event Calendar
🏢 Vendor: omnivo
📅 Updated: 2026-05-27

📝 The HBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'hb_country_iso', 'hb_usa_state_iso', and 'hb_canada_province_iso' parameters in all versions up to, and including, 2.1.6 due to insufficient input s...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32106

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-32105

📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display
🏢 Vendor: cservit
📅 Updated: 2026-05-27

📝 The affiliate-toolkit plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 3.8.5. This is due to the plugin using the BladeOne templating engine's runSt...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32105

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-32104

📊 Score: 6.4/10 (CVSS v3.1)
📦 Product: WPBakery Page Builder Addons by Livemesh
🏢 Vendor: livemesh
📅 Updated: 2026-05-27

📝 The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `[lvca_carousel]` and `[lvca_posts_carousel]` shortcode attributes in all versions up to, and including, ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32104

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-32103

📊 Score: 4.9/10 (CVSS v3.1)
📦 Product: EnvíaloSimple: Email Marketing y Newsletters
🏢 Vendor: dattateccom
📅 Updated: 2026-05-27

📝 The EnvíaloSimple: Email Marketing y Newsletters plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.4.5 due to insufficient escapin...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32103

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-32102

📊 Score: 6.4/10 (CVSS v3.1)
📦 Product: Livemesh SiteOrigin Widgets
🏢 Vendor: livemesh
📅 Updated: 2026-05-27

📝 The Livemesh SiteOrigin Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `lsow_admin_ajax` AJAX action in all versions up to, and including, 3.9.2 due to missing authorization checks and insufficient inpu...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32102

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-32101

📊 Score: 6.4/10 (CVSS v3.1)
📦 Product: Livemesh Addons for Beaver Builder
🏢 Vendor: livemesh
📅 Updated: 2026-05-27

📝 The Livemesh Addons for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `labb_admin_ajax` AJAX action in all versions up to, and including, 3.9.2 due to missing authorization checks and ins...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32101

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-32100

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager
🏢 Vendor: smub
📅 Updated: 2026-05-27

📝 The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.3...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32100

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-32099

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Enable jQuery Migrate Helper
🏢 Vendor: clorith
📅 Updated: 2026-05-27

📝 The Enable jQuery Migrate Helper plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `downgrade_jquery_version()` function in all versions up to, and including, 1.4.1. This is ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32099

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-32098

📊 Score: 4.3/10 (CVSS v3.1)
📦 Product: BOSH Director
🏢 Vendor: Cloud Foundry Foundation
📅 Updated: 2026-05-27

📝 When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by AgentClient. inject_compile_log (line 332-339) reads response['value']['result']['compile_log_id'] and format_exception (line ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32098

#cybersecurity #infosec #euvd #cve #vulnerability

BadHost Vulnerability in Starlette Framework Threatens AI Infrastructure

Starlette patched a path-poisoning vulnerability (CVE-2026-48710) that allows attackers to bypass security middleware in AI agents and Python-based servers. The flaw enables unauthorized access to sensitive credentials and internal endpoints by manipulating the HTTP Host header.

**If you're running applications built on Starlette, FastAPI, or LLM tools like vLLM, LiteLLM, or MCP servers, update Starlette to version 1.0.1 ASAP. While updating, put a reverse proxy (Nginx or Cloudflare) in front of your application to block malformed Host headers, and test your endpoints with the free scanner at BadHost.org.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/badhost-vulnerability-in-starlette-framework-threatens-ai-infrastructure-o-g-u-6-8/gD2P6Ple2L

I wanted Gemini Daily Brief to be great, but it’s kind of a mess

I just want something that works.

https://www.androidauthority.com/gemini-daily-brief-hands-on-3671172/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Hilfe‼️

"Die neue „KI-Cloud“ soll nun „zur zentralen Schaltstelle für die öffentliche Verwaltung werden“, erklärt das Digitalministerium."

https://netzpolitik.org/2026/fuer-250-millionen-euro-bund-schafft-neue-abhaengigkeiten-von-it-konzernen/

und

"KI-Einführung verursacht kritische Cloud-Sicherheitslücken"

https://www.infopoint-security.de/check-point-cloud-security-report-zeigt-wachsende-sicherheitsluecken-bei-ki-implementierungen/a45306/

#ki #ai #cybersecurity #datenschutz #politics