A vulnerability in Red Hat Quay allows an attacker to craft a specially designed PDF with long indirect object headers not terminated by whitespace, causing long runtimes when the PDF is processed. This issue has been addressed by updating the pypdf library to version 6.18.0. Workarounds include applying specific code changes if upgrading is not immediately possible.
Google's Gemini could soon access any file on your macOS device, open apps, browse the web, and perform actions without asking for permission every time. [...]
A stored cross-site scripting (XSS) vulnerability exists in vincent-peugnet wcms through version 3.18.0. Unauthenticated attackers can inject malicious scripts via the login user field and visitor comment website field. These scripts execute with administrator or editor privileges when rendered in specific admin interfaces such as adminlog.php and editrightbar.php.
CVE-2026-105123 is a high-severity remote code execution vulnerability in vincent-peugnet wcms up to version 3.18.0. Authenticated editors can upload arbitrary files, including .php scripts, by exploiting an unvalidated file path in the media upload API. This allows attackers to execute code on the server, write files outside the intended media directory using encoded path traversal sequences, and delete arbitrary files via the media deletion API.
This content is a discussion post referencing a YouTube video that speculates about AI potentially reversing engineering digital systems and causing disruption. The post questions the video's claims, noting that actual compromise of server architectures would require encryption keys or authentication bypass methods. It also contrasts this with offline product piracy, which may be easier to achieve. There is no concrete vulnerability or exploit detailed.
A suspected ShinyHunters hacking group member known online as "Rey" has reportedly been detained in Jordan and is cooperating with the FBI to help locate other members of the extortion group. [...]
CVE-2026-73802 is a critical privilege management vulnerability in Gitea Runner that allows workflow authors to pass Docker container options preserving host namespaces and capabilities even when privileged mode is disabled. This enables execution of commands as root on the runner host by entering host PID/IPC namespaces. The flaw affects versions prior to 1.0.9-0.20260731160927-34bfa1915022 and is particularly dangerous for shared runners where untrusted users can submit workflows. A fix is available that rejects or strips unsafe container options when privileged mode is disabled.
A vulnerability in python-urllib3 versions from 1.10.3 up to but not including 2.8.0 allows a malicious HTTP server to cause unbounded memory allocation in the HTTPResponse.read_chunked and HTTPResponse.stream methods. This occurs because the chunk parser buffers the chunk-size field without a length limit when processing Transfer-Encoding: chunked responses with very long chunk-size lines lacking a newline. The issue can lead to exhaustion of client process memory, resulting in denial of service. The vulnerability is fixed in version 2.8.0. Ubuntu has released security updates for multiple LTS versions addressing this and related urllib3 issues. A standard system update or Ubuntu Pro subscription will apply the necessary fixes.
A vulnerability has been found in Linux Mint Xreader up to 4.6.9. Impacted is the function g_file_get_child of the file shell/ev-window.c of the component PDF Attachment Saving Handler. Such manipulation of the argument attachment leads to path traversal. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. One of the project maintainers closed this issue as "completed", because "EPUB support was removed from Xreader and reimplemented in Xepub". Code analysis indicates that this might be a misunderstanding of the situation.
---
_-= Per source details. Do not edit below this line.=-_
## Source: kam193 (4abc7154004498e9054ca8ac239acd73ab86815f6029ad5d52e4c883488f4c70)
The package imitates real activity and instead deploys a coin miner.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-10-voxeval
Reasons (based on the campaign):
- cryptominer
---
_-= Per source details. Do not edit below this line.=-_
## Source: kam193 (12f18950a276ca27a304d3053835b0102656168083e7ddf414fffb112cbe01ba)
The package imitates real activity and instead deploys a coin miner.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-10-voxeval
Reasons (based on the campaign):
- cryptominer
YARA-X 1.21.0 is a software release that includes five improvements and four bug fixes. One notable enhancement is the ability to use standard input (stdin) for the command-line interface option --scan-list, enabling users to pipe a list of folders to scan. This release announcement does not describe any security vulnerabilities or threats.
The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers accessed its identity and access management system and downloaded a large amount of data. [...]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20.
CVE-2026-103065 is a high severity vulnerability in Themeum Kirki up to version 6.3.1. It involves improper validation of specified quantity in input, leading to access of functionality not properly constrained by access control lists (ACLs). This could allow unauthorized users to access certain features or functions. The vulnerability has a CVSS score of 8.2, indicating a significant impact on confidentiality with limited impact on integrity and no impact on availability.
---
_-= Per source details. Do not edit below this line.=-_
## Source: kam193 (28ef552864bd4b4558137163734077a2429281647a26868f40d8d735af95c967)
The package imitates real activity and instead deploys a coin miner.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-10-voxeval
Reasons (based on the campaign):
- cryptominer
---
_-= Per source details. Do not edit below this line.=-_
## Source: kam193 (18746c0b1bc840ee608e3aba81f9e18e4411373b8993d315177e95614fe67b08)
The package imitates real activity and instead deploys a coin miner.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-10-voxeval
Reasons (based on the campaign):
- cryptominer
Multiple cheap Android projectors using the Allwinner H713 chipset, sold under various brand names, come pre-installed with a multi-stage malware ecosystem. This malware includes a command-and-control (C2) loader that deploys modular plugins for residential proxy networks, ad-fraud, and botnet activities. The malware has root backdoors and can execute arbitrary code with system privileges. It exfiltrates device identifiers to servers in China and supports geo-fenced malicious activities. The infection chain involves four stages: StoreOS dropper, SilentSDK, PluginManager, and final plugins. Network-level blocking and disabling malicious apps via ADB are recommended mitigations.
---
_-= Per source details. Do not edit below this line.=-_
## Source: kam193 (92a0735c100233f803adcf4cec20645acbb5f01b1757e8889dfaa631e49dae71)
The package imitates real activity and instead deploys a coin miner.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-10-voxeval
Reasons (based on the campaign):
- cryptominer
OpenAM versions before 16.1.3 contain a server-side request forgery (SSRF) vulnerability. This flaw allows attackers who can register or modify OAuth 2.0 clients to make OpenAM fetch internal resources via an unvalidated jwks_uri parameter. Exploitation can lead to unauthenticated internal resource access and potential denial of service by exhausting request threads.