Threat database

Cryptocurrency exchange Bitget experienced a major security breach resulting in the theft of over $350 million in Bitcoin, allegedly by North Korean hackers. Following the incident, Bitget suspended Bitcoin withdrawals but has now resumed them. The breach highlights significant risks in cryptocurrency exchange security.

CVE-2026-101018 is a medium severity SQL injection vulnerability in dayrui XunruiCMS versions 4.7.0, 4.7.1, and 4.7.2. The flaw exists in the group_all_edit function of the Group Editing component, allowing remote attackers to manipulate the groupid argument to perform SQL injection. The vulnerability has a CVSS 4.0 base score of 5.1. The vendor has not responded to disclosure attempts, and no patch or fix is currently available.

A vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2. This vulnerability affects the function strcasecmp in the library libopendmarc/opendmarc_policy.c. The manipulation results in handling of exceptional conditions. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.

CVE-2026-94286 is a high-severity vulnerability in x.org's libXtst library before version 1.2.6. It involves a buffer over-read in the RECORD reply parser that could be exploited by malicious X servers to crash connected X clients. The vulnerability does not allow data modification or privilege escalation but can cause denial of service by crashing clients.

CVE-2026-94285 is an out-of-bounds read vulnerability in the byte-oriented codeset parser of libX11 versions before 1.8.14. This flaw could allow a malicious X server to crash connected X clients. The vulnerability has a medium severity rating with a CVSS score of 5.1. No known exploits are reported in the wild. Affected versions include all libX11 releases from 0 up to but not including 1.8.14.

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_policy_parse_dmarc in the library libopendmarc/opendmarc_policy.c. The manipulation of the argument fo/rf/ri/pct/sp/adkim/aspf/rua/ruf leads to handling of exceptional conditions. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-94284 is an out-of-bounds read vulnerability in the XIM trigger-key registration parser of libX11 versions before 1.8.14. This flaw could allow a malicious X server to cause a crash in attached X clients. The vulnerability has a medium severity rating with a CVSS score of 5.5, primarily impacting availability. No known exploits are reported in the wild. The issue affects libX11 versions from 0 up to but not including 1.8.14.

CVE-2026-94283 is an out-of-bounds read vulnerability in the X Input Method (XIM) attribute parser of libX11 versions before 1.8.14. This flaw could allow a malicious X server to crash connected X clients, causing denial of service. The vulnerability does not impact confidentiality or integrity but affects availability by causing application crashes.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.

CVE-2026-101015 is a medium severity vulnerability in Trusted Domain Project OpenDMARC up to version 1.4.2. It involves improper validation of unsafe equivalence in input within the Domain Handler component (policy.c). The flaw can be exploited remotely without authentication and has publicly available exploit code. The vendor has not responded to the disclosure, and no official patch or fix has been confirmed.

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.

Improper neutralization of input in Apache Roller 6.1.5 allows an anonymous remote attacker to store a crafted comment-author URL that can execute script in the session of a weblog moderator or global administrator when the comment management page is viewed. This affects sites that permit comments on at least one weblog and whose moderator subsequently reviews the submitted comment; no non-default server setting is required. Users are recommended to upgrade to Apache Roller 6.1.6 or later.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.

CVE-2026-94282 is an out-of-bounds read vulnerability in the libXi library of x.org, specifically affecting versions before 1.8.4. The flaw occurs in the XI2 enter/leave/focus cookie conversion code and could be exploited by a malicious X server to crash an attached X client. This vulnerability has a medium severity rating with a CVSS score of 5.6.

A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_util_cleanup in the library libopendmarc/opendmarc_util.c of the component DMARC Record Parser. Performing a manipulation results in off-by-one. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named b3b1da9264bc80324094a27c71e7369bdedc62ae. To fix this issue, it is recommended to deploy a patch.

A stack-based buffer overflow vulnerability exists in BUFFALO INC. WSR-300HP Wi-Fi products. This flaw can be triggered by a crafted HTTP request without authentication, potentially causing a denial-of-service (DoS) condition. The vulnerability has a high severity rating with a CVSS score of 7.5. No information about available patches or vendor advisories is provided.

CVE-2026-86530 is an OS command injection vulnerability in BUFFALO INC.'s WSR-300HP Wi-Fi product. The vulnerability arises from improper handling of web form input used to assemble command line strings internally. An administrative user can exploit this flaw by sending a crafted HTTP request to execute arbitrary operating system commands. The vulnerability has a high severity rating with a CVSS score of 7.2.

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updateresultdetails.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-82379 is an authentication bypass vulnerability in Apache Roller 6.1.5 affecting installations that enable the non-default AtomPub API with WSSE authentication and plaintext-compatible password storage. The flaw allows an attacker who captures a valid WSSE digest authentication header to replay it and gain the victim's AtomPub authority due to lack of nonce uniqueness and timestamp freshness enforcement. Apache Roller 6.1.6 and later remove WSSE as an AtomPub authentication method, mitigating this issue.