Threat database

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3.

CVE-2026-96461 is a missing authorization vulnerability in the TMS Amelia booking plugin affecting versions prior to 2.4.11. It allows unauthorized users to exploit incorrectly configured access control security levels, potentially leading to unauthorized modification of data. The vulnerability has a high severity rating with a CVSS score of 7.5. No known exploits are reported in the wild. The affected versions range from initial releases up to 2.4.10.

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3.

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3.

Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.

CVE-2026-96553 is a reflected cross-site scripting (XSS) vulnerability in the FiboSearch plugin for WooCommerce by Damian Góra. It affects versions from the initial release up to 1.34.1. The flaw allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts that execute in users' browsers. The vulnerability has a high severity rating with a CVSS score of 7.1.

CVE-2026-96336 is an authentication bypass vulnerability in WPMU DEV Forminator that allows identity spoofing. It affects versions from the initial release up to 1.57.2. This flaw enables attackers to bypass authentication mechanisms without user interaction, potentially leading to unauthorized actions. The vulnerability has a high severity rating with a CVSS score of 7.5. No official patch or remediation information is provided in the available data.

Midnight Mimosa is a malware campaign involving preinstalled firmware malware on low-cost Android devices, primarily built on MediaTek platforms. The malware runs with system-level privileges, allowing remote operators to install and remove apps, grant permissions, and load arbitrary code. It is focused on ad fraud, automated click fraud, and building large botnets. The campaign affects devices in over 150 countries, with no single region dominating. Additionally, related apps carrying the same malware code have been found on Google Play, though with less privilege. The malware disables Google Play Protect during malicious app installations to evade detection. This campaign represents a supply-chain threat with persistent, preinstalled malware that cannot be removed by normal uninstall methods.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an incorrect authorization vulnerability (CWE-863). This flaw allows a high privileged attacker with remote access to potentially elevate privileges and gain unauthorized access. The vulnerability has a CVSS 3.1 score of 6.5, indicating a medium severity level.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain a path traversal vulnerability (CWE-22). This flaw allows a high privileged local attacker to potentially execute code and access the filesystem by improperly limiting pathname access to restricted directories. The vulnerability has a CVSS 3.1 base score of 6.3, indicating medium severity. No official patch or remediation details are provided in the input data.

CVE-2026-71884 is a vulnerability in Legion of the Bouncy Castle Inc.'s BC-LTS-JAVA library versions 2.73.4 up to but not including 2.73.13. The native one-shot CTR packet cipher implementation did not validate that the input length fit within the counter space derived from the IV, causing the counter to wrap and the keystream to repeat. This results in two segments of the ciphertext being encrypted under the same keystream, allowing plaintext recovery without the key. The issue affects the native one-shot path only; other implementations validate the counter range properly. The vulnerability has a high severity with a CVSS 4.0 score of 8.2.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an incorrect permission assignment vulnerability. This flaw allows a low privileged local attacker to potentially disclose information, bypass protection mechanisms, and gain unauthorized access. The vulnerability is identified as CWE-732 and has a medium severity with a CVSS score of 6.3. No patch information is provided in the input data.

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Server-side request forgery.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 have an authorization bypass vulnerability due to a user-controlled key. This flaw allows a low privileged remote attacker to potentially elevate their privileges. The vulnerability is identified as CWE-639 and has a CVSS score of 4.3, indicating medium severity.

CVE-2026-62049 is a stored cross-site scripting (XSS) vulnerability in Crocoblock JetBlocks For Elementor. It affects versions from initial releases up to 1.5.2.1. The vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts. The CVSS score is 6.5, indicating a medium severity level. No known exploits are reported in the wild. Patch or remediation status is not provided in the available data.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 have a vulnerability where critical functions lack proper authentication. This allows unauthenticated remote attackers to potentially access sensitive information and bypass protection mechanisms. The vulnerability is identified as CWE-306 and has a high severity with a CVSS score of 7.5.

This content describes the development of a micro AI-powered Security Operations Center (SOC) for a small SaaS project. The SOC integrates Wazuh for log collection and alerting, ClickHouse for event storage and fast querying, and custom Python connectors for cloud API polling. It aims to monitor all infrastructure components, detect incidents, and enable automated or semi-automated response. The architecture is designed to run on a single VM and leverages AI for investigation and response tasks. No specific vulnerability or exploit is described.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain a Server-Side Request Forgery (SSRF) vulnerability (CWE-918). This vulnerability allows a high privileged attacker with remote access to potentially cause information disclosure, bypass protection mechanisms, perform SSRF attacks, and gain unauthorized access. The CVSS v3.1 base score is 7.7, indicating high severity. No patch or remediation details are provided in the available data.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an authorization bypass vulnerability (CWE-639) that allows a low privileged remote attacker to elevate privileges by exploiting a user-controlled key. This vulnerability has a high severity with a CVSS score of 7.1. No official patch or remediation information is provided in the input data.

CVE-2026-107935 is a critical path traversal vulnerability in gvproxy, part of the gvisor-tap-vsock package used by Red Hat Build of Podman Desktop. The vulnerability exists in the unauthenticated /services/forwarder/expose endpoint, which fails to validate the caller-supplied socket path. This flaw allows an attacker to delete arbitrary files on the host system. The issue affects versions from 0.4.0 up to but not including 0.9.0. The vulnerability has a CVSS 3.1 score of 9.3, indicating high impact on integrity and availability without requiring privileges or user interaction.