Aggregator

CVE-2026-36341 | Krayin CRM 2.1.5 /admin/activities/create Comment cross site scripting

VulDB Recent Entries
2 months 2 weeks ago
A vulnerability described as problematic has been identified in Krayin CRM 2.1.5. This impacts an unknown function of the file /admin/activities/create. Such manipulation of the argument Comment leads to cross site scripting. This vulnerability is listed as CVE-2026-36341. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-5788 | Ivanti Endpoint Manager Mobile 12.6.1.1/12.7.0.1/12.8.0.1 access control

VulDB Recent Entries
2 months 2 weeks ago
A vulnerability labeled as critical has been found in Ivanti Endpoint Manager Mobile 12.6.1.1/12.7.0.1/12.8.0.1. The impacted element is an unknown function. The manipulation results in improper access controls. This vulnerability is identified as CVE-2026-5788. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.
vuldb.com

CVE-2025-63704 | query-parser-string 1.0.0 Query Parameter prototype pollution

VulDB Recent Entries
2 months 2 weeks ago
A vulnerability identified as critical has been detected in query-parser-string 1.0.0. The affected element is an unknown function of the component Query Parameter Handler. The manipulation leads to improperly controlled modification of object prototype attributes. This vulnerability is referenced as CVE-2025-63704. Remote exploitation of the attack is possible. No exploit is available.
vuldb.com

CVE-2026-5787 | Ivanti Endpoint Manager Mobile prior 12.6.1.1/12.7.0.1/12.8.0.1 certificate validation

VulDB Recent Entries
2 months 2 weeks ago
A vulnerability categorized as critical has been discovered in Ivanti Endpoint Manager Mobile. Impacted is an unknown function. Executing a manipulation can lead to improper certificate validation. The identification of this vulnerability is CVE-2026-5787. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.
vuldb.com

New Ivanti EPMM 0-Day Vulnerability Actively Exploited in Attacks

Cyber Security News
2 months 2 weeks ago

Ivanti has issued a critical security advisory for its Endpoint Manager Mobile (EPMM) product, disclosing multiple actively exploited vulnerabilities, including CVE-2026-6973, and urging all on-premises EPMM customers to apply patches immediately. At the time of disclosure, Ivanti confirmed active exploitation of CVE-2026-6973, a vulnerability that requires admin authentication to succeed. The flaws exclusively affect the […]

The post New Ivanti EPMM 0-Day Vulnerability Actively Exploited in Attacks appeared first on Cyber Security News.

Guru Baran

CVE-2026-7821 | Ivanti Endpoint Manager Mobile 12.6.1.1/12.7.0.1/12.8.0.1 certificate validation

VulDB Recent Entries
2 months 2 weeks ago
A vulnerability was found in Ivanti Endpoint Manager Mobile 12.6.1.1/12.7.0.1/12.8.0.1. It has been rated as critical. This issue affects some unknown processing. Performing a manipulation results in improper certificate validation. This vulnerability was named CVE-2026-7821. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.
vuldb.com

CVE-2026-6973 | Ivanti Endpoint Manager Mobile 12.6.1.1/12.7.0.1/12.8.0.1 input validation

VulDB Recent Entries
2 months 2 weeks ago
A vulnerability was found in Ivanti Endpoint Manager Mobile 12.6.1.1/12.7.0.1/12.8.0.1. It has been declared as critical. This vulnerability affects unknown code. Such manipulation leads to improper input validation. This vulnerability is uniquely identified as CVE-2026-6973. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.
vuldb.com

主板销量暴跌

Solidot
2 months 2 weeks ago
AI 热导致了计算机主要零部件如内存价格暴涨，连带导致其它受 AI 影响不大的零部件如主板销量暴跌。消费者因过高的价格而推迟了计算机升级。四大主板厂商都下调了销售目标。华硕在 2025 年售出了 1500 万块主板，而 2026 年上半年将只出货逾 500 万块主板，全年销量可能低于一千万，销量同比下降 33%。技嘉和微星去年分别售出 1150 万块和 1100 万块主板。如今两家公司都将 2026 年的内部销量预测下调至 900 万块（技嘉）和 840 万块（微星），分别下降 22% 和 24%。华擎受到最大冲击，预计其出货量将下降 37%，从 2025 年的 430 万块降至今年的 270 万块。这些数据意味着整个主板市场（至少四大厂商）萎缩了 28%。

Akira

Dark Feed IO
2 months 2 weeks ago

You must login to view this content

cohenido

Akira

Dark Feed IO
2 months 2 weeks ago

You must login to view this content

cohenido

Akira

Dark Feed IO
2 months 2 weeks ago

You must login to view this content

cohenido

传粉昆虫与农户健康与收入息息相关

Solidot
2 months 2 weeks ago
根据发表在《自然》期刊上的一项研究，传粉昆虫与农户健康与收入息息相关。英国研究人员观察了尼泊尔 10 个小农社区中 776 人的饮食、营养状况、耕作方式和社会经济状况，并记录了支持其营养和生计的传粉物种。他们发现，昆虫传粉者直接贡献了 44% 的农场收入，以及超过 20% 的维生素A、叶酸和维生素E摄入。研究表明，传粉者和人类的关系对于维持环境和人类健康至关重要。传粉者减少与营养摄入和家庭收入降低相关。

Qilin

Dark Feed IO
2 months 2 weeks ago

You must login to view this content

cohenido

Qilin

Dark Feed IO
2 months 2 weeks ago

You must login to view this content

cohenido

What Mozilla learned running an AI security bug hunting pipeline on Firefox

Help Net Security
2 months 2 weeks ago

Over the past several months, Mozilla ran an agentic harness powered by Claude Mythos Preview across Firefox’s source code, identifying 271 security bugs that were fixed in Firefox 150, with additional fixes shipped in versions 149.0.2 and 150.0.1. Over 100 people contributed code to get those patches out. The bugs spanned a wide range of subsystems. Among the disclosed reports: a 15-year-old flaw in the HTML <legend> element, a 20-year-old XSLT bug involving reentrant key() … More →

The post What Mozilla learned running an AI security bug hunting pipeline on Firefox appeared first on Help Net Security.

Mirko Zorz

Managed ad