CVE-2026-105885 is a high-severity vulnerability in the Slider by 10Web plugin, affecting versions from initial release up to 1.2.62. It involves deserialization of untrusted data, which can lead to object injection. This vulnerability has a CVSS score of 8.8, indicating a serious risk to confidentiality, integrity, and availability. No official patch or remediation information is provided in the available data.
CVE-2026-102388 is a stored cross-site scripting (XSS) vulnerability in the WPMU DEV Forminator plugin. It affects versions from the initial release up to 1.57.3. The vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts. The CVSS score is 7.1, indicating a high severity level with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability.
Immich versions up to 3.3.1 have a missing authorization vulnerability in the partner synchronization stream. Authenticated partners can access metadata of Locked Folder assets because synchronization queries do not exclude assets with Locked visibility. This allows attackers with an active partner relationship to retrieve sensitive metadata such as GPS coordinates, capture times, descriptions, and camera details via specific API calls.
Pingvin Share X versions before 1.22.0 have a vulnerability in their authentication rate limiting mechanism. The throttler's time-to-live (TTL) values are specified in seconds but incorrectly interpreted as milliseconds, allowing attackers to bypass rate limits. This flaw enables unauthenticated attackers to send a high volume of requests to authentication endpoints, facilitating brute-force attacks on passwords and TOTP codes.
Pingvin Share X versions before 1.22.0 have a rate limit bypass vulnerability due to unconditional trust in proxy headers. This allows unauthenticated remote attackers to evade per-IP throttling by spoofing X-Forwarded-For headers. Attackers can exploit this to brute-force passwords and TOTP codes on authentication endpoints and forge logged client IP addresses.
CVE-2026-107794 is an integer underflow vulnerability in ExtUtils::Typemaps::STL::List for Perl versions before 1.07. The flaw causes the module to allocate a very large 32 GiB array when processing an empty list due to an underflow in the av_extend function call. This results in memory exhaustion. A similar issue was previously fixed in the related ExtUtils::Typemaps::STL::Vector module.
ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument. The typemap uses $var = std::string( SvPV_nolen($arg), SvCUR($arg) ) However, evaluation order for C++ arguments is not specified, and some compilers may produce code that evalutes SvCUR($arg) first. When $arg is not a string (for example, an interger, number or a reference) then SvCUR will return an invalid value, and the program may abort or segfault.
Criminal IP by AI SPERA introduces AITEM, an AI-powered evolution of Attack Surface Management (ASM) that extends beyond traditional asset discovery. AITEM integrates threat intelligence with AI to connect exposure discovery, investigation, prioritization, and automated response. It aggregates data from external assets, internal infrastructure, open-source intelligence, dark web sources, leaked data, and emerging vulnerabilities to provide a comprehensive threat exposure management approach. The solution aims to help security teams focus on meaningful risks and accelerate response times amid increasing attacker automation. This announcement reflects a broader industry trend toward AI-driven, integrated security operations.
A heap buffer overflow vulnerability exists in the HLL sketch deserialization functionality of Apache DataSketches C++ prior to version 5.3.0. When deserializing a sketch in LIST mode, the coupon count from the input is used to copy entries into a fixed-size buffer of 8 entries without proper bounds checking. This can lead to writing up to 988 bytes beyond the buffer, corrupting heap memory and potentially causing crashes or further exploitation. Only applications deserializing HLL sketches from untrusted sources are affected. Upgrading to version 5.3.0 resolves this issue.
The PyPI package 'agent-vx' version 0.1.0 contains malicious code that installs a persistent job on the victim's machine. This allows attackers to exfiltrate files and execute remote commands, effectively functioning as a remote access trojan (RAT). The package is designed for persistence and unauthorized remote control.
The pafer package on PyPI contains malicious code that loads and executes a disguised pickle file, leading to automatic execution of embedded malicious code. This code establishes persistence on the victim's system via a PTH file, downloads additional payloads, and functions as a remote access trojan (RAT) enabling remote code execution and data exfiltration. The malicious behavior is intentionally embedded in a dependency of the main package webreader.
The PyPI package 'webreader' version 2.3.8 contains embedded malicious code disguised as a pickle configuration file. A related dependency 'pafer' loads this pickle, triggering automatic execution of malicious code during unpickling. This code establishes persistence via a PTH file, downloads additional payloads, and functions as a remote access trojan (RAT) enabling remote code execution and data exfiltration.
A former core infrastructure engineer at an industrial firm conducted a cyber extortion attack by deleting administrator accounts and resetting hundreds of passwords, effectively locking the company out of its systems. He demanded 20 bitcoin ransom to prevent further damage. The attack was discovered quickly, and the firm did not pay the ransom. Law enforcement traced the attack to the engineer, who pleaded guilty and was sentenced to 32 months in prison.
An out-of-bounds read vulnerability exists in the VarOpt union deserialization function of Apache DataSketches C++ versions from 2.0.0-incubating up to 5.2.0. The flaw occurs because the deserialization reads more bytes than available in a truncated serialized union, potentially reading up to 24 bytes past the input end. This can cause a crash (denial of service) and may expose adjacent memory contents. Only applications deserializing VarOpt unions from untrusted sources are affected. The issue is fixed in version 5.3.0.
CVE-2026-103635 is an out-of-bounds read vulnerability in the Apache DataSketches C++ library affecting the compact Theta sketch deserialization process. The vulnerability arises because header fields are read before verifying the input length, allowing crafted or truncated sketches to cause reads past the input end. This can lead to crashes (denial of service) and potential exposure of adjacent memory. The issue affects versions from 3.1.0 up to and including 5.2.0. Upgrading to version 5.3.0 resolves the vulnerability.
CVE-2026-103513 is a critical out-of-bounds read and write vulnerability in the Apache DataSketches C++ library's CPC sketch deserialization. It occurs when a crafted serialized CPC sketch is deserialized, allowing reading past the end of compressed data and writing outside an internal heap buffer due to lack of validation on decoded indices and header fields. This can corrupt heap memory, causing crashes and potentially enabling further exploitation. The issue affects versions from 2.0.0-incubating up to 5.2.0. Upgrading to version 5.3.0 resolves the vulnerability.