Aggregator

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

A vulnerability was found in SHLOMIF XML::LibXML up to 2.0210 on Perl. It has been classified as problematic. The affected element is an unknown function. Performing a manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2026-8177. The attack is possible to be carried out remotely. No exploit exists. It is suggested to install a patch to address this issue.

A vulnerability was found in STIGTSP Net::CIDR::Lite up to 0.23 on Perl and classified as problematic. Impacted is an unknown function. Such manipulation leads to improper validation of unsafe equivalence in input. This vulnerability is documented as CVE-2026-45191. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in STIGTSP Net::CIDR::Lite up to 0.23 on Perl and classified as problematic. This issue affects the function find/bin_find. This manipulation causes improper validation of unsafe equivalence in input. This vulnerability is registered as CVE-2026-45190. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in RRWO Catalyst::Plugin::Statsd up to 0.10.0 on Perl. This vulnerability affects unknown code of the component statsd. The manipulation results in cleartext transmission of sensitive information. This vulnerability is cataloged as CVE-2026-45180. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in RRWO Plack::Middleware::Statsd up to 0.8.x on Perl. This affects an unknown part of the component statsd. The manipulation leads to cleartext transmission of sensitive information. This vulnerability is listed as CVE-2026-45179. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

Currently trending CVE - Hype Score: 8 - Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 suffers from Command Injection issues in /bin/goahead. Specifically, these issues can be triggered through /goform/tracerouteDiagnosis, /goform/pingDiagnosis, and /goform/fromSysToolPingCmd Each of these issues allows an ...

Currently trending CVE - Hype Score: 1 - Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify ...

Matthew Knoot and Erick Prince have been jailed for 18 months each for helping North Korean hackers infiltrate US firms through remote laptop farms.

Ученые создали систему, которая необратимо выключает жизненно важные гены и не дает генетически модифицированным клеткам выжить вне лаборатории.

Attackers are abusing Google Ads and legitimate Claude.ai shared chats in an active malvertising campaign. Users searching for "Claude mac download" may come across sponsored search results that list claude.ai as the target website, but lead to instructions that install malware on their Mac. [...]

肥胖成为日益严重的公共卫生问题，预计到 2035 年全球肥胖人口比例将逾 30%。寻找能改善减肥效果的新策略是公共卫生领域的当务之急。根据发表在《International Journal of Environmental Research and Public Health》期刊上的一项研究，对比实验组和对照组，研究人员发现每天走约 8500 步有助于减肥者长期维持体重。研究人员认为应鼓励减肥者在减肥阶段增加每日步数，目标是每天约 8500 步，在维持阶段保持这些步数。

DigiCert revokes 60 code signing certificates after hackers used a malicious support chat attachment to sign the Zhong Stealer malware.

Критическая ошибка в цепочке доверия заставила сервис срочно отключить выдачу и откатиться к корню Generation X.

A vulnerability classified as problematic was found in bettercap up to 2.41.5. Affected by this issue is some unknown functionality of the file modules/mysql_server/mysql_server.go of the component MySQL Server. Executing a manipulation can lead to integer coercion error. This vulnerability is tracked as CVE-2026-8276. The attack can be launched remotely. Moreover, an exploit is present. It is advisable to implement a patch to correct this issue.

A vulnerability classified as problematic has been found in bettercap up to 2.41.5. Affected by this vulnerability is the function ippReadChunkedBody of the file modules/zerogod/zerogod_ipp_primitives.go of the component zerogod IPP Service. Performing a manipulation results in integer coercion error. This vulnerability is identified as CVE-2026-8275. The attack can be initiated remotely. Additionally, an exploit exists. To fix this issue, it is recommended to deploy a patch.

German law enforcement has dismantled the relaunched version of the criminal online marketplace "Crimenetwork" and arrested its alleged operator on the Spanish island of Mallorca, the Federal Criminal Police Office (BKA) and the Frankfurt Public Prosecutor's Office's cybercrime unit (ZIT) announced on May 8, 2026.

Submit #811163 / VDB-362573

Submit #811145 / VDB-362572