Aggregator

CVE-2021-47933 | MStore API 2.0.6 REST API Endpoint config_file missing authentication (Exploit 50379 / EDB-50379)

VulDB Recent Entries
2 months 1 week ago
A vulnerability, which was classified as critical, has been found in MStore API 2.0.6. The affected element is the function config_file of the component REST API Endpoint. The manipulation leads to missing authentication. This vulnerability is traded as CVE-2021-47933. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak

The Hackers News
2 months 1 week ago
Cybersecurity researchers have disclosed a critical security vulnerability in Ollama that, if successfully exploited, could allow a remote, unauthenticated attacker to leak its entire process memory. The out-of-bounds read flaw, which likely impacts over 300,000 servers globally, is tracked as CVE-2026-7482 (CVSS score: 9.1). It has been codenamed Bleeding Llama by Cyera. Ollama is a
The Hacker News

Official JDownloader site served malware to Windows and Linux users between May 6 and May 7

Security Affairs
2 months 1 week ago
JDownloader website was hacked to distribute malicious Windows and Linux installers carrying a Python RAT between May 6–7, 2026. JDownloader official website was compromised in a supply chain attack that replaced legitimate Windows and Linux installers with malicious files between May 6 and May 7, 2026. JDownloader is a free, open-source download management application designed […]
Pierluigi Paganini

Audit

Dark Feed IO
2 months 1 week ago

You must login to view this content

cohenido

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 96

Security Affairs
2 months 1 week ago
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter CloudZ RAT potentially steals OTP messages using Pheno plugin   Backdoored PyTorch Lightning package drops credential stealer A rigged game: ScarCruft compromises gaming platform in a supply-chain attack Muddying the Tracks: The State-Sponsored Shadow Behind […]
Pierluigi Paganini

CVE-2026-8226 | Open5GS up to 2.7.7 /lib/proto/types.c ogs_pcc_rule_install_flow_from_media denial of service (Issue 4441 / EUVD-2026-28974)

Vuldb Updates
2 months 1 week ago
A vulnerability labeled as problematic has been found in Open5GS up to 2.7.7. This vulnerability affects the function ogs_pcc_rule_install_flow_from_media in the library /lib/proto/types.c. The manipulation results in denial of service. This vulnerability is reported as CVE-2026-8226. The attack can be launched remotely. Moreover, an exploit is present. The project was informed of the problem early through an issue report but has not responded yet.
vuldb.com

Managed ad