Aggregator

Компания придумала новый алгоритм восстановления доступа. Насколько он безопасен? Хороший вопрос.

A vulnerability was found in getgrav Grav up to 2.0.8. It has been declared as critical. Affected by this issue is the function FlexDirectory::dynamicDataField of the component FlexDirectory. Executing a manipulation can lead to os command injection. This vulnerability is registered as CVE-2026-65608. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

Discover how a filepath.Join misconception caused cross-tenant path traversal vulnerabilities in Kubernetes CSI drivers.

filepath.Join was never designed to be a security boundary. We found two CSI drivers that

A vulnerability was found in siyuan-note SiYuan up to 3.7.1. It has been classified as problematic. Affected by this vulnerability is the function serveExport of the file kernel/server/serve.go of the component Export. Performing a manipulation results in path traversal. This vulnerability is cataloged as CVE-2026-65607. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

Network telemetry is actually business revenue telemetry. Every packet and digital interaction shapes the customer experience, which directly influences retention and customer lifetime value.

A new shellcode loader, dubbed “TriBack Loader,” to a China-nexus intrusion cluster tracked as JadeProx, with the malware explicitly engineered to evade modern EDR by abusing signed binaries and uncommon Win32 callback APIs. Across at least four observed variants, the loader underpins simultaneous espionage campaigns in South-East Asia and Latin America, including targeting of a […]

The post New TriBack Loader Evades EDR Using Signed Binaries and Win32 Callback APIs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cobalt has introduced Cobalt Autonomous Pentest, a new offering that enables continuous offensive security across an organization’s application portfolio by delivering actionable penetration testing results in as little as 24 hours. AI-assisted development enables organizations to ship software faster than ever, while attackers are using AI to automate reconnaissance and accelerate exploitation. Pentesting performed quarterly or even monthly, can no longer keep pace. As security teams face growing attack surfaces and constrained budgets, organizations need … More →

The post Cobalt adds Autonomous Pentest to scale application security testing appeared first on Help Net Security.

A vulnerability was found in WP Chill Modula Image Gallery Plugin up to 2.14.30 on WordPress and classified as problematic. Affected is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is listed as CVE-2026-65475. The attack may be performed from remote. There is no available exploit.

A vulnerability has been found in JetBrains IntelliJ IDEA up to 2026.1 and classified as problematic. This impacts an unknown function of the component UI Designer. This manipulation causes code injection. This vulnerability is tracked as CVE-2026-64815. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in JetBrains IntelliJ IDEA up to 2026.1. This affects an unknown function of the component Notification. The manipulation results in cross site scripting. This vulnerability is identified as CVE-2026-64810. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in siyuan-note SiYuan up to 3.7.1. The impacted element is the function innerHTML of the file app/src/layout/Tab.ts of the component Protocol Handler. The manipulation of the argument icon leads to cross site scripting. This vulnerability is referenced as CVE-2026-65606. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

giovedì 23 luglio 2026 Seminario sulla NIS2 (con mio intervento) Segnal

A vulnerability classified as critical was found in JetBrains IntelliJ IDEA up to 2026.1. The affected element is an unknown function. Executing a manipulation can lead to improper authorization. The identification of this vulnerability is CVE-2026-64814. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in JetBrains IntelliJ IDEA up to 2026.1. Impacted is an unknown function. Performing a manipulation results in improper authorization. This vulnerability was named CVE-2026-64813. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in JetBrains IntelliJ IDEA up to 2026.1. This issue affects some unknown processing. Such manipulation leads to injection. This vulnerability is uniquely identified as CVE-2026-64812. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in JetBrains IntelliJ IDEA. This vulnerability affects unknown code of the component Development Container Configuration. This manipulation causes code injection. This vulnerability is handled as CVE-2026-64811. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in siyuan-note SiYuan up to 3.7.1. This affects the function innerHTML of the component Attribute View. The manipulation of the argument Template column value results in cross site scripting. This vulnerability is known as CVE-2026-65605. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

A vulnerability identified as problematic has been detected in JetBrains PhpStorm 2020.3/2023.1. Affected by this issue is some unknown functionality of the component Interpreter. The manipulation leads to code injection. This vulnerability is traded as CVE-2026-64809. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.