Aggregator

CVE-2026-20911 | LibRaw 0b56545/d20315b File HuffTable::initval buffer size (TALOS-2026-2330)

VulDB Recent Entries
1 day 21 hours ago
A vulnerability labeled as critical has been found in LibRaw 0b56545/d20315b. Affected is the function HuffTable::initval of the component File Handler. Executing a manipulation can lead to incorrect calculation of buffer size. This vulnerability is registered as CVE-2026-20911. It is possible to launch the attack remotely. No exploit is available. It is best practice to apply a patch to resolve this issue.
vuldb.com

CVE-2026-20884 | LibRaw File deflate_dng_load_raw integer overflow (TALOS-2026-2364)

VulDB Recent Entries
1 day 21 hours ago
A vulnerability identified as problematic has been detected in LibRaw. This impacts the function deflate_dng_load_raw of the component File Handler. Performing a manipulation results in integer overflow. This vulnerability is cataloged as CVE-2026-20884. It is possible to initiate the attack remotely. There is no exploit available. Applying a patch is the recommended action to fix this issue.
vuldb.com

CVE-2024-49645 | Ilias Gomatos Affiliate Platform Plugin up to 1.4.8 on WordPress cross site scripting

Vuldb Updates
1 day 21 hours ago
A vulnerability, which was classified as problematic, has been found in Ilias Gomatos Affiliate Platform Plugin up to 1.4.8 on WordPress. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in cross site scripting. This vulnerability is identified as CVE-2024-49645. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2024-49640 | AmaderCode Lab ACL Floating Cart for WooCommerce Plugin up to 0.9 on WordPress cross site scripting

Vuldb Updates
1 day 21 hours ago
A vulnerability described as problematic has been identified in AmaderCode Lab ACL Floating Cart for WooCommerce Plugin up to 0.9 on WordPress. This vulnerability affects unknown code. Executing a manipulation can lead to cross site scripting. This vulnerability is handled as CVE-2024-49640. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2024-49632 | Coral Web Design CWD 3D Image Gallery Plugin up to 1.0 on WordPress cross site scripting

Vuldb Updates
1 day 21 hours ago
A vulnerability has been found in Coral Web Design CWD 3D Image Gallery Plugin up to 1.0 on WordPress and classified as problematic. This affects an unknown function. Performing a manipulation results in cross site scripting. This vulnerability is identified as CVE-2024-49632. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2024-50459 | HM Plugin Stripe Donation and Payment Plugin up to 3.2.3 on WordPress authorization

Vuldb Updates
1 day 21 hours ago
A vulnerability classified as problematic was found in HM Plugin Stripe Donation and Payment Plugin up to 3.2.3 on WordPress. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to missing authorization. This vulnerability is handled as CVE-2024-50459. The attack can be executed remotely. There is not any exploit available.
vuldb.com

SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks

Threat intelligence | Microsoft Security Blog
1 day 21 hours ago

Executive summary Forest Blizzard, a threat actor linked to the Russian military, has been compromising insecure home and small-office internet equipment like routers, then modifying their settings in ways that turn them into part of the actor’s malicious infrastructure.

The post SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks appeared first on Microsoft Security Blog.

Microsoft Threat Intelligence

SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks

Threat intelligence | Microsoft Security Blog
1 day 21 hours ago

Executive summary Forest Blizzard, a threat actor linked to the Russian military, has been compromising insecure home and small-office internet equipment like routers, then modifying their settings in ways that turn them into part of the actor’s malicious infrastructure.

The post SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks appeared first on Microsoft Security Blog.

Microsoft Threat Intelligence

Managed ad