Aggregator

CVE-2025-15400 | Pix Para Woocommerce Plugin up to 2.13.3 on WordPress Payment Gateway Configuration authorization (CNNVD-202602-2039)

Vuldb Updates
3 months ago
A vulnerability categorized as problematic has been discovered in Pix Para Woocommerce Plugin up to 2.13.3 on WordPress. Affected by this vulnerability is an unknown functionality of the component Payment Gateway Configuration Handler. The manipulation results in missing authorization. This vulnerability is cataloged as CVE-2025-15400. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2026-1231 | Beaver Builder Page Builder Plugin up to 2.10.0.5 on WordPress save_global_settings cross site scripting (CNNVD-202602-2051)

Vuldb Updates
3 months ago
A vulnerability was found in Beaver Builder Page Builder Plugin up to 2.10.0.5 on WordPress. It has been rated as problematic. Affected by this vulnerability is the function save_global_settings. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2026-1231. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

Windows Notepad Markdown feature opens door to RCE (CVE-2026-20841)

Help Net Security
3 months ago

Among the many security fixes released by Microsoft on February 2026 Patch Tuesday is one for CVE-2026-20841, a command injection vulnerability in Notepad that could be exploited by attackers to achieve remote code execution on targets’ Windows system. About CVE-2026-20841 For many, many years, Windows Notepad was a simple text editor and a staple tool for everyone who wanted a no-frills way to work with plain text, but in early 2022, Microsoft started redesigning it … More →

The post Windows Notepad Markdown feature opens door to RCE (CVE-2026-20841) appeared first on Help Net Security.

Zeljka Zorz

CVE-2025-15524 | Gallery by FooGallery Plugin up to 3.1.9 on WordPress ajax_get_gallery_info authorization (CNNVD-202602-2052)

Vuldb Updates
3 months ago
A vulnerability was found in Gallery by FooGallery Plugin up to 3.1.9 on WordPress. It has been classified as problematic. This impacts the function ajax_get_gallery_info. Performing a manipulation results in missing authorization. This vulnerability is cataloged as CVE-2025-15524. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-14541 | Lucky Wheel Giveaway Plugin up to 1.0.22 on WordPress conditional_tags code injection (CNNVD-202602-2053)

Vuldb Updates
3 months ago
A vulnerability was found in Lucky Wheel Giveaway Plugin up to 1.0.22 on WordPress and classified as critical. This affects an unknown function. Such manipulation of the argument conditional_tags leads to code injection. This vulnerability is listed as CVE-2025-14541. The attack may be performed from remote. There is no available exploit.
vuldb.com

Black Duck expands Polaris platform with unified, automated security across all major SCMs

Help Net Security
3 months ago

Black Duck has announced the availability of a set of enhanced Black Duck Polaris Platform integrations across all major source code management (SCM) platforms, including GitHub, GitLab, Azure DevOps, and Bitbucket. The Polaris Platform is an integrated, software-as-a-service application security platform powered by the static application security testing, software composition analysis, and dynamic application security testing engines. With development teams managing an explosion of human and AI-generated code and increasingly distributed development environments, manual onboarding … More →

The post Black Duck expands Polaris platform with unified, automated security across all major SCMs appeared first on Help Net Security.

Industry News

INC

Dark Feed IO
3 months ago

You must login to view this content

cohenido

Introducing Markdown for Agents

The Cloudflare Blog
3 months ago
The way content is discovered online is shifting, from traditional search engines to AI agents that need structured data from a Web built for humans. It’s time to consider not just human visitors, but start to treat agents as first-class citizens. Markdown for Agents automatically converts any HTML page requested from our network to markdown.
Celso Martinho

1Password open sources a benchmark to stop AI agents from leaking credentials

Help Net Security
3 months ago

Research has shown that some AI models can identify phishing websites with near-perfect accuracy when asked. When those same models are used as autonomous agents with access to tools like email, web browsers, and password vaults, they can still carry out the scam. That gap is the focus of a new open source benchmark from 1Password called the Security Comprehension and Awareness Measure, or SCAM. The benchmark tests whether AI agents behave safely during real … More →

The post 1Password open sources a benchmark to stop AI agents from leaking credentials appeared first on Help Net Security.

Sinisa Markovic

NowSecure AI-Navigator cuts mobile app testing time by automating authentication

Help Net Security
3 months ago

NowSecure announced the launch of AI-Navigator, new functionality that streamlines and improves mobile application security testing. By automating authentication workflows, NowSecure enables security teams to dynamically test mobile apps for vulnerabilities and privacy leaks up to 90% faster. “Mobile apps are the front door to enterprise and consumer data, but security teams have struggled to continuously test them because they are unable to log in,” said NowSecure CTO David Weinstein. “Unauthenticated testing overlooks up to … More →

The post NowSecure AI-Navigator cuts mobile app testing time by automating authentication appeared first on Help Net Security.

Industry News

Managed ad