Aggregator

CVE-2026-3146 | libvips up to 8.18.0 matrixload.c vips_foreign_load_matrix_header null pointer dereference (Issue 4875 / Nessus ID 299986)

Vuldb Updates
4 months ago
A vulnerability has been found in libvips up to 8.18.0 and classified as problematic. The impacted element is the function vips_foreign_load_matrix_header of the file libvips/foreign/matrixload.c. The manipulation leads to null pointer dereference. This vulnerability is documented as CVE-2026-3146. The attack needs to be performed locally. There is not any exploit available. To fix this issue, it is recommended to deploy a patch.
vuldb.com

CVE-2026-27624 | Coturn up to 4.8.x ns_turn_ioaddr.c access control (GHSA-6g6j-r9rf-cm7p / EUVD-2026-8620)

Vuldb Updates
4 months ago
A vulnerability, which was classified as critical, has been found in Coturn up to 4.8.x. The affected element is an unknown function of the file src/client/ns_turn_ioaddr.c. The manipulation leads to improper access controls. This vulnerability is referenced as CVE-2026-27624. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

1Campaign Platform Helps Attackers Bypass Google Ads Screening to Show Malicious Ads

Cyber Security News
4 months ago

A newly uncovered cloaking platform called 1Campaign is giving cybercriminals a powerful tool to push malicious advertisements through Google’s ad review system, putting everyday users at serious risk of phishing scams and cryptocurrency theft.​ Google Ads is one of the most trusted advertising networks online. Millions of users click on sponsored search results daily, trusting those links […]

The post 1Campaign Platform Helps Attackers Bypass Google Ads Screening to Show Malicious Ads appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2026-3289 | Sanluan PublicCMS 6.202506.d Template Cache Generation TemplateCacheComponent.java saveMetadata path traversal

VulDB Recent Entries
4 months ago
A vulnerability was found in Sanluan PublicCMS 6.202506.d and classified as critical. This impacts the function saveMetadata of the file TemplateCacheComponent.java of the component Template Cache Generation. Executing a manipulation can lead to path traversal. This vulnerability is handled as CVE-2026-3289. The attack can be executed remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

Conduent Says Hack Now Affects at Least 25 Million Patients

DataBreachToday.com
4 months ago
State Officials Investigating Breach of Back-Office Services Provider Found in 2025
The victim count in the 2024 hack on back-office support services vendor Conduent Business Services has just ballooned again, with the Xerox-spinoff now reporting to Wisconsin regulators that the incident affected "25 million-plus" people nationwide.

Feds Scramble Amid Shutdown to Secure Cisco SD-WAN Systems

DataBreachToday.com
4 months ago
Emergency CISA Directive Lands as DHS Shutdown Strains Cyber Operations
The Cybersecurity and Infrastructure Security Agency issued a directive Wednesday ordering civilian agencies to secure and hunt for compromise in vulnerable Cisco SD-WAN systems after officials observed active exploitation - while warning that shutdown-related disruptions heighten operational risk.

Marquis Sues SonicWall Over 2025 Firewall Data Breach

DataBreachToday.com
4 months ago
Lawsuit Claims SonicWall Cloud Backup Flaw Led to Ransomware Attack Against Marquis
Marquis Software Solutions has sued SonicWall alleging a cloud backup data breach exposed firewall configuration files, including credentials and multifactor authentication scratch codes. The firm says the breach enabled an August 2025 ransomware attack and triggered dozens of class action lawsuits.

CVE-2026-2677 | A3factura Web Platform 4.111.2-rev.1 representatives-management Name cross site scripting (EUVD-2026-8849)

Vuldb Updates
4 months ago
A vulnerability identified as problematic has been detected in A3factura Web Platform 4.111.2-rev.1. Impacted is an unknown function of the file a3factura-app.wolterskluwer.es/#/incomes/representatives-management. Performing a manipulation of the argument Name results in cross site scripting. This vulnerability is cataloged as CVE-2026-2677. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CVE-2026-2678 | A3factura Web Platform 4.111.2-rev.1 on A3factura customers Name cross site scripting (EUVD-2026-8850)

Vuldb Updates
4 months ago
A vulnerability labeled as problematic has been found in A3factura Web Platform 4.111.2-rev.1 on A3factura. The affected element is an unknown function of the file a3factura-app.wolterskluwer.es/#/incomes/customers. Executing a manipulation of the argument Name can lead to cross site scripting. This vulnerability is registered as CVE-2026-2678. It is possible to launch the attack remotely. No exploit is available.
vuldb.com

CVE-2026-2679 | A3factura Web Platform 4.111.2-rev.1 salesInvoices customerName cross site scripting (EUVD-2026-8851)

Vuldb Updates
4 months ago
A vulnerability marked as problematic has been reported in A3factura Web Platform 4.111.2-rev.1. The impacted element is an unknown function of the file a3factura-app.wolterskluwer.es/#/incomes/salesInvoices. The manipulation of the argument customerName leads to cross site scripting. This vulnerability is documented as CVE-2026-2679. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2026-2680 | A3factura Web Platform 4.111.2-rev.1 salesDeliveryNotes customerVATNumber cross site scripting (EUVD-2026-8852)

Vuldb Updates
4 months ago
A vulnerability described as problematic has been identified in A3factura Web Platform 4.111.2-rev.1. This affects an unknown function of the file a3factura-app.wolterskluwer.es/#/incomes/salesDeliveryNotes. The manipulation of the argument customerVATNumber results in cross site scripting. This vulnerability is reported as CVE-2026-2680. The attack can be launched remotely. No exploit exists.
vuldb.com

CVE-2026-2244 | Google Cloud Vertex AI Workbench prior 01/30/2026 information disclosure (EUVD-2026-8853 / WID-SEC-2026-0541)

Vuldb Updates
4 months ago
A vulnerability was found in Google Cloud Vertex AI Workbench and classified as problematic. This vulnerability affects unknown code. The manipulation results in information disclosure. This vulnerability was named CVE-2026-2244. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.
vuldb.com

Analysis: Root Cause of Most Security Incidents Traced to Unpatched Firewalls

Security Boulevard
4 months ago

An analysis of more than two trillion IT events collected during 2025 by Barracuda Networks finds 90% of ransomware incidents exploited firewalls via unpatched software or a vulnerable account that enables cybercriminals to gain access to an IT environment. Merium Khalid, director of offensive security for the security operations center (SOC) at Barracuda Networks, said..

The post Analysis: Root Cause of Most Security Incidents Traced to Unpatched Firewalls appeared first on Security Boulevard.

Michael Vizard

Managed ad