Aggregator

Experts Advise Moving From Verifying Identities to Knowing Agent Intentions
Financial institutions are rushing to deploy AI agents capable of autonomously initiating transactions, approving payments and freezing accounts in real time. But agents are creating a "dual authentication crisis" that traditional security frameworks cannot address.

今日暂未更新资讯~
更多最新文章，请访问SecWiki

A vulnerability was found in Rockwellautomation Studio 5000 Logix Designer 30.01.00. It has been declared as problematic. This affects an unknown function of the file C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\ of the component FactoryTalk Activation Service. Such manipulation leads to unquoted search path. This vulnerability is uniquely identified as CVE-2019-25276. Local access is required to approach this attack. Moreover, an exploit is present.

A vulnerability was found in ncp-e NCP_Secure_Entry_Client 9.2x. It has been rated as problematic. This impacts an unknown function of the component Windows Service. Performing a manipulation results in unquoted search path. This vulnerability was named CVE-2019-25281. The attack needs to be approached locally. In addition, an exploit is available.

A vulnerability categorized as problematic has been discovered in Shrew Soft VPN Client 2.2.2. Affected is an unknown function. Executing a manipulation can lead to unquoted search path. The identification of this vulnerability is CVE-2019-25283. The attack can only be executed locally. Furthermore, there is an exploit available.

A vulnerability marked as critical has been reported in Tenda RX3 16.03.13.11. This issue affects the function set_device_name of the file /goform/setBlackRule of the component MAC Filtering Configuration Endpoint. This manipulation of the argument devName/mac causes stack-based buffer overflow. This vulnerability is tracked as CVE-2026-2185. The attack is possible to be carried out remotely. Moreover, an exploit is present.

甚至还出了一道ctf的题目

A vulnerability labeled as critical has been found in Great Developers Certificate Generation System up to 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73. This vulnerability affects unknown code of the file /restructured/csv.php. The manipulation of the argument photo results in os command injection. This vulnerability is identified as CVE-2026-2184. The attack can be executed remotely. There is not any exploit available. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The code repository of the project has not been active for many years.

A vulnerability identified as critical has been detected in Great Developers Certificate Generation System up to 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73. This affects an unknown part of the file /restructured/csv.php. The manipulation leads to unrestricted upload. This vulnerability is referenced as CVE-2026-2183. Remote exploitation of the attack is possible. No exploit is available. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The code repository of the project has not been active for many years.

Submit #749715 / VDB-344888

A vulnerability categorized as critical has been discovered in UTT 进取 521G 3.1.1-190816. Affected by this issue is the function doSystem of the file /goform/setSysAdm. Executing a manipulation of the argument passwd1 can lead to command injection. The identification of this vulnerability is CVE-2026-2182. The attack may be launched remotely. Furthermore, there is an exploit available.

Submit #749714 / VDB-344887

Submit #749713 / VDB-344886

A vulnerability was found in Tenda RX3 16.03.13.11. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the file /goform/openSchedWifi. Performing a manipulation of the argument schedStartTime/schedEndTime results in stack-based buffer overflow. This vulnerability was named CVE-2026-2181. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability was found in Tenda RX3 16.03.13.11. It has been declared as critical. Affected is an unknown function of the file /goform/fast_setting_wifi_set. Such manipulation of the argument ssid_5g leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2026-2180. The attack can be launched remotely. Moreover, an exploit is present.

Submit #749712 / VDB-344885

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been classified as critical. This impacts an unknown function of the file /admin/manage-users.php. This manipulation of the argument ID causes sql injection. This vulnerability is handled as CVE-2026-2179. The attack can be initiated remotely. Additionally, an exploit exists.

Submit #749710 / VDB-344884

Submit #749703 / VDB-344883

A vulnerability was found in r-huijts xcode-mcp-server up to f3419f00117aa9949e326f78cc940166c88f18cb and classified as critical. This affects the function registerXcodeTools of the file src/tools/xcode/index.ts of the component run_lldb. The manipulation of the argument args results in command injection. This vulnerability is known as CVE-2026-2178. It is possible to launch the attack remotely. Furthermore, an exploit is available. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Applying a patch is advised to resolve this issue.