Aggregator

Не задаёт вопросов, лезет в закрытые сети, выносит токены и секреты.

A vulnerability marked as critical has been reported in Z-BlogPHP 1.7.4.3430. This affects the function CheckComment of the file zb_system/function/c_system_event.php of the component Commend Approval Handler. This manipulation causes improper authorization. This vulnerability appears as CVE-2026-8747. The attack may be initiated remotely. In addition, an exploit is available.

Submit #810027 / VDB-364334

Submit #809933 / VDB-358309

A vulnerability labeled as problematic has been found in Open5GS up to 2.7.7. Affected by this issue is the function discover_handler in the library /lib/sbi/nghttp2-server.c of the component NRF. The manipulation results in use after free. This vulnerability is reported as CVE-2026-8746. The attack can be launched remotely. Moreover, an exploit is present. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability identified as problematic has been detected in Open5GS up to 2.7.7. Affected by this vulnerability is the function ogs_timer_add in the library /src/ausf/nausf-handler.c of the component AUSF. The manipulation leads to denial of service. This vulnerability is documented as CVE-2026-8745. The attack can be initiated remotely. Additionally, an exploit exists. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability categorized as problematic has been discovered in Open5GS up to 2.7.7. Affected is the function ogs_sbi_subscription_data_add/ogs_sbi_nf_service_add in the library /lib/sbi/context.c of the component NRF. Executing a manipulation can lead to denial of service. This vulnerability is registered as CVE-2026-8744. It is possible to launch the attack remotely. Furthermore, an exploit is available. A patch should be applied to remediate this issue.

A vulnerability was found in Open5GS up to 2.7.6. It has been rated as critical. This impacts the function ran_ue_find_by_amf_ue_ngap_id of the file src/amf/context.c of the component AMF/MME. Performing a manipulation results in improper authorization. This vulnerability is cataloged as CVE-2026-8743. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is suggested to install a patch to address this issue.

Submit #817032 / VDB-364333

Submit #817031 / VDB-364332

Submit #817030 / VDB-364331

Submit #817029 / VDB-364331

Submit #814559 / VDB-364330

Касперский нашел признаки использования LLM в атаках Leek Likho.