Aggregator

CVE-2026-28498 | Authlib up to 1.6.8 Header Parameter integrity check

VulDB Recent Entries
1 week ago
A vulnerability, which was classified as problematic, was found in Authlib up to 1.6.8. This affects an unknown function of the component Header Parameter Handler. Executing a manipulation can lead to improper validation of integrity check value. The identification of this vulnerability is CVE-2026-28498. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.
vuldb.com

CVE-2026-29521 | Shenzhen Hereta Hereta ETH-IMC408M up to 1.0.15 Setting setup.cgi cross-site request forgery

VulDB Recent Entries
1 week ago
A vulnerability classified as problematic has been found in Shenzhen Hereta Hereta ETH-IMC408M up to 1.0.15. Impacted is an unknown function of the file setup.cgi of the component Setting Handler. This manipulation causes cross-site request forgery. This vulnerability is handled as CVE-2026-29521. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2026-29513 | Shenzhen Hereta Hereta ETH-IMC408M up to 1.0.15 System Status Interface Device Location cross site scripting

VulDB Recent Entries
1 week ago
A vulnerability labeled as problematic has been found in Shenzhen Hereta Hereta ETH-IMC408M up to 1.0.15. This affects an unknown part of the component System Status Interface. Executing a manipulation of the argument Device Location can lead to cross site scripting. This vulnerability appears as CVE-2026-29513. The attack may be performed from remote. There is no available exploit.
vuldb.com

CVE-2026-29510 | Shenzhen Hereta Hereta ETH-IMC408M up to 1.0.15 System Status Interface Device Name cross site scripting

VulDB Recent Entries
1 week ago
A vulnerability identified as problematic has been detected in Shenzhen Hereta Hereta ETH-IMC408M up to 1.0.15. Affected by this issue is some unknown functionality of the component System Status Interface. Performing a manipulation of the argument Device Name results in cross site scripting. This vulnerability is reported as CVE-2026-29510. The attack is possible to be carried out remotely. No exploit exists.
vuldb.com

CVE-2025-65734 | GUnet Open eClass up to 3.10/3.12 Work Assignments unrestricted upload

VulDB Recent Entries
1 week ago
A vulnerability categorized as critical has been discovered in GUnet Open eClass up to 3.10/3.12. Affected by this vulnerability is an unknown functionality of the component Work Assignments Module. Such manipulation leads to unrestricted upload. This vulnerability is documented as CVE-2025-65734. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-23489 | pluginsGLPI fields up to 1.23.2 Custom Fields input validation

VulDB Recent Entries
1 week ago
A vulnerability was found in pluginsGLPI fields up to 1.23.2. It has been declared as problematic. This impacts an unknown function of the component Custom Fields Handler. The manipulation results in improper input validation. This vulnerability is cataloged as CVE-2026-23489. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

UK Agency Exposed Corporate Executive Data

Ransomware DataBreachToday.com
1 week ago
Directory Traversal Flaw Found in Companies House
The British government's company register service temporarily deactivated its online filing service after someone found a serious vulnerability that allowed people to access directors' sensitive personal data and potentially even amend companies' records or file bogus accounts on their behalf.

Poland Suspects Iranian Actors are Behind Attack on Its Nuclear Power Center

Security Boulevard
1 week ago

Poland officials say the cyberattack late last week appears to have been launched by an Iranian threat group, though they noted that bad actors not associated with any country in the war could have been behind it and used tactics associated with Iranian threat groups to cover their own tracks.

The post Poland Suspects Iranian Actors are Behind Attack on Its Nuclear Power Center appeared first on Security Boulevard.

Jeffrey Burt

Managed ad