Aggregator

Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak

The Hackers News
5 days 11 hours ago
Cybersecurity researchers have disclosed a critical security vulnerability in Ollama that, if successfully exploited, could allow a remote, unauthenticated attacker to leak its entire process memory. The out-of-bounds read flaw, which likely impacts over 300,000 servers globally, is tracked as CVE-2026-7482 (CVSS score: 9.1). It has been codenamed Bleeding Llama by Cyera. Ollama is a
The Hacker News

Official JDownloader site served malware to Windows and Linux users between May 6 and May 7

Security Affairs
5 days 11 hours ago
JDownloader website was hacked to distribute malicious Windows and Linux installers carrying a Python RAT between May 6–7, 2026. JDownloader official website was compromised in a supply chain attack that replaced legitimate Windows and Linux installers with malicious files between May 6 and May 7, 2026. JDownloader is a free, open-source download management application designed […]
Pierluigi Paganini

Audit

Dark Feed IO
5 days 11 hours ago

You must login to view this content

cohenido

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 96

Security Affairs
5 days 12 hours ago
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter CloudZ RAT potentially steals OTP messages using Pheno plugin   Backdoored PyTorch Lightning package drops credential stealer A rigged game: ScarCruft compromises gaming platform in a supply-chain attack Muddying the Tracks: The State-Sponsored Shadow Behind […]
Pierluigi Paganini

CVE-2026-8226 | Open5GS up to 2.7.7 /lib/proto/types.c ogs_pcc_rule_install_flow_from_media denial of service (Issue 4441 / EUVD-2026-28974)

Vuldb Updates
5 days 13 hours ago
A vulnerability labeled as problematic has been found in Open5GS up to 2.7.7. This vulnerability affects the function ogs_pcc_rule_install_flow_from_media in the library /lib/proto/types.c. The manipulation results in denial of service. This vulnerability is reported as CVE-2026-8226. The attack can be launched remotely. Moreover, an exploit is present. The project was informed of the problem early through an issue report but has not responded yet.
vuldb.com

CVE-2026-8227 | Wavlink NU516U1 240425 /cgi-bin/adm.cgi wzdapMesh os command injection (EUVD-2026-28975)

Vuldb Updates
5 days 13 hours ago
A vulnerability marked as critical has been reported in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. This vulnerability appears as CVE-2026-8227. The attack may be initiated remotely. In addition, an exploit is available. The vendor was contacted early about this disclosure.
vuldb.com

CVE-2026-8228 | Wavlink NU516U1 240425 /cgi-bin/wireless.cgi advance wlan_conf/Channel/skiplist/ieee_80211h os command injection (EUVD-2026-28976)

Vuldb Updates
5 days 13 hours ago
A vulnerability described as critical has been identified in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_conf/Channel/skiplist/ieee_80211h leads to os command injection. This vulnerability is traded as CVE-2026-8228. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure.
vuldb.com

Managed ad