Aggregator

CVE-2026-33599 | PowerDNS DNSdist up to 1.9.12/2.0.3 SVCB auto_upgrade out-of-bounds (EUVD-2026-24941)

Vuldb Updates
3 weeks 4 days ago
A vulnerability identified as problematic has been detected in PowerDNS DNSdist up to 1.9.12/2.0.3. This vulnerability affects the function auto_upgrade of the component SVCB Handler. The manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2026-33599. The attack needs to be initiated within the local network. No exploit is available. You should upgrade the affected component.
vuldb.com

CVE-2026-35548 | ODBC Enrichment Plugin up to 5.2.0 Connection Endpoint server-side request forgery (EUVD-2026-24953)

Vuldb Updates
3 weeks 4 days ago
A vulnerability was found in ODBC Enrichment Plugin up to 5.2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Connection Endpoint. Such manipulation leads to server-side request forgery. This vulnerability is uniquely identified as CVE-2026-35548. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.
vuldb.com

New Auraboros RAT Exposes Live Audio Streaming, Keylogging, and Cookie Hijacking in Open C2 Panel

Cyber Security News
3 weeks 4 days ago

A previously undocumented remote access trojan (RAT) framework called Auraboros C2 has surfaced, exposing an alarming level of open access to victim data, live surveillance capabilities, and browser credential theft. The entire command-and-control (C2) dashboard operates over plain HTTP with no login, no token, and no authentication of any kind, making victim data accessible to […]

The post New Auraboros RAT Exposes Live Audio Streaming, Keylogging, and Cookie Hijacking in Open C2 Panel appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2026-20665 | Apple Safari/iOS/iPadOS/macOS/tvOS/visionOS/watchOS up to 26.3 Web ui layer (Nessus ID 304065 / WID-SEC-2026-0911)

Vuldb Updates
3 weeks 4 days ago
A vulnerability was found in Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS and watchOS up to 26.3. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Web Handler. This manipulation causes improper restriction of rendered ui layers. This vulnerability appears as CVE-2026-20665. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-20664 | Apple Safari/iOS/iPadOS/macOS/visionOS up to 26.3 Web memory corruption (Nessus ID 304078 / WID-SEC-2026-0911)

Vuldb Updates
3 weeks 4 days ago
A vulnerability was found in Apple Safari, iOS, iPadOS, macOS and visionOS up to 26.3. It has been rated as critical. This vulnerability affects unknown code of the component Web Handler. Performing a manipulation results in memory corruption. This vulnerability is known as CVE-2026-20664. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.
vuldb.com

阴谋论引发美国总统关注促使 FBI 调查

Solidot
3 weeks 4 days ago
美国 UFO 社群将过去几年发生的一系列航空航天和核物理领域无关联的专家死亡或失踪案关联起来，认为其中存在巨大的阴谋，怀疑是黑衣人组织 MIB 在执行清理工作。这一阴谋论最终渗透到美国政府，美国总统特朗普称此事非常严重，白宫表示在与联邦机构合作对此展开调查，共和党领导的众议院监督委员会也表示展开调查，FBI 表示正牵头展开调查，正与能源部、战争部以及州和地方执法部门合作去寻找答案。

CVE-2022-20598 | Google Android media.c sec_media_protect integer overflow (A-242357514 / EUVD-2022-25858)

Vuldb Updates
3 weeks 4 days ago
A vulnerability was found in Google Android and classified as problematic. This issue affects the function sec_media_protect of the file media.c. The manipulation results in integer overflow. This vulnerability is identified as CVE-2022-20598. The attack is only possible with local access. There is not any exploit available. A patch should be applied to remediate this issue.
vuldb.com

CVE-2022-20596 | Google Android WirelessCharger.cpp sendChunk out-of-bounds write (A-239700400 / EUVD-2022-25856)

Vuldb Updates
3 weeks 4 days ago
A vulnerability, which was classified as critical, was found in Google Android. This affects the function sendChunk of the file WirelessCharger.cpp. Executing a manipulation can lead to out-of-bounds write. The identification of this vulnerability is CVE-2022-20596. The attack can only be executed locally. There is no exploit available. Applying a patch is advised to resolve this issue.
vuldb.com

Managed ad