Aggregator

Submit #803522 / VDB-360118

A vulnerability was found in EyouCMS up to 1.7.9. It has been classified as critical. The affected element is the function GetSortData of the file application/common.php. The manipulation of the argument sort_asc leads to sql injection. This vulnerability is listed as CVE-2026-7389. The attack may be initiated remotely. In addition, an exploit is available. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was found in EyouCMS up to 1.7.9 and classified as critical. Impacted is the function editFile of the file application/admin/logic/FilemanagerLogic.php of the component Template File Handler. Executing a manipulation can lead to code injection. This vulnerability is tracked as CVE-2026-7388. The attack can be launched remotely. Moreover, an exploit is present. The project was informed of the problem early through an issue report but has not responded yet.

Студенты из Китая случайно выложили в сеть мечту любого майора.

GitHub Command Injection CVE-2026-3854|Chrome多UAF CVE-2026-7363|LiteLLM SQL注入已在野利用

Submit #803224 / VDB-359826

Submit #803107 / VDB-360117

Submit #803106 / VDB-360116

Submit #803105 / VDB-360115

cPanel has released security updates to address a security issue impacting various authentication paths that could allow an attacker to obtain access to the control panel software. The problem affects all currently supported versions of cPanel and WebHost Manager (WHM), according to an alert published by WebPros on Tuesday. It does not have an official identifier. The issue has been addressed in

Submit #803103 / VDB-360114

Submit #803102 / VDB-360113

A vulnerability has been found in CRM Sistemas de Fidelización MegaCMS 12.0.0 and classified as critical. This issue affects some unknown processing of the file /web_comunications/cms/get_provincias of the component POST Request Handler. Performing a manipulation of the argument id_territorio results in sql injection. This vulnerability is identified as CVE-2026-3325. The attack can be initiated remotely. There is not any exploit available.

A vulnerability, which was classified as problematic, was found in CDAC-Noida e-Sushrut Hospital Management Information System. This vulnerability affects unknown code of the component Base64 Encoding Handler. Such manipulation leads to authorization bypass. This vulnerability is referenced as CVE-2026-42517. It is possible to launch the attack remotely. No exploit is available.

A vulnerability, which was classified as critical, has been found in CDAC-Noida e-Sushrut Hospital Management Information System. This affects an unknown part. This manipulation of the argument encoded causes authorization bypass. The identification of this vulnerability is CVE-2026-42516. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in CDAC-Noida e-Sushrut Hospital Management Information System. Affected by this issue is some unknown functionality. The manipulation results in use of hard-coded cryptographic key . This vulnerability was named CVE-2026-42518. The attack may be performed from remote. There is no available exploit.

6 min readLegacy IAM can't govern autonomous AI agents that spin up, execute and terminate in seconds. New identity patterns are now emerging.

The post Why Traditional IAM Is No Match for Agentic AI appeared first on Aembit.

The post Why Traditional IAM Is No Match for Agentic AI appeared first on Security Boulevard.

A vulnerability classified as problematic has been found in Complianz Plugin up to 7.4.5 on WordPress. Affected by this vulnerability is the function cmplz_rest_consented_content of the component REST API Endpoint. The manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2026-4019. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability marked as critical has been reported in Google Chrome. Affected by this vulnerability is an unknown functionality of the component Media. Performing a manipulation results in use after free. This vulnerability was named CVE-2026-7335. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability classified as critical has been found in Google Chrome. This affects an unknown part of the component V8. The manipulation leads to type confusion. This vulnerability is referenced as CVE-2026-7337. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.