Aggregator

CVE-2026-46489 | SolidInvoice up to 2.3.16 Company Logo Upload Feature cross site scripting (GHSA-mqwm-r4g8-wf4w / EUVD-2026-36303)

Vuldb Updates
1 week 1 day ago
A vulnerability classified as problematic has been found in SolidInvoice up to 2.3.16. This vulnerability affects unknown code of the component Company Logo Upload Feature. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2026-46489. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-11845 | IEI Integration Corp iVEC TANK-XM811 up to 1.0.3 os command injection (EUVD-2026-36405)

Vuldb Updates
1 week 1 day ago
A vulnerability described as critical has been identified in IEI Integration Corp iVEC TANK-XM811 up to 1.0.3. The impacted element is an unknown function. Executing a manipulation can lead to os command injection. The identification of this vulnerability is CVE-2026-11845. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-11846 | IEI Integration Corp iVEC TANK-XM811 up to 1.0.3 path traversal (EUVD-2026-36406)

Vuldb Updates
1 week 1 day ago
A vulnerability classified as critical has been found in IEI Integration Corp iVEC TANK-XM811 up to 1.0.3. This affects an unknown function. The manipulation leads to path traversal. This vulnerability is referenced as CVE-2026-11846. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealers

Cyber Security News
1 week 1 day ago

A massive supply chain attack targeting the Arch User Repository (AUR) has compromised more than 400 community-maintained packages, with attackers injecting malicious build scripts designed to deploy credential-stealing malware and rootkit-style payloads on affected Linux systems. The campaign, dubbed “Atomic Arch” by researchers, was identified around June 11, 2026, and represents one of the most […]

The post 400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealers appeared first on Cyber Security News.

Guru Baran

Managed ad