YAMCS Flaw Lets Any User Enumerate All Accounts Including Superadmins
Another vulnerability in the YAMCS platform allowed any authenticated user, regardless of their privilege level, to list every account in…
Security
Cybersecurity, vulnerabilities, threats, and defense
YAMCS Authentication Server Patches Three Critical Flaws Found by Researcher
A security researcher has disclosed three distinct vulnerabilities in YAMCS, an open-source telemetry software system used for spacecraft and satellite…
WordPress OrderConvo plugin exploited via path traversal
A path traversal vulnerability in the WordPress plugin OrderConvo (version 13.5 and below) allows unauthenticated attackers to read arbitrary files…
Notepad++ 8.9.6 allows arbitrary code execution via config manipulation
Notepad++ versions up to and including 8.9.6 contain a vulnerability that lets an attacker achieve arbitrary code execution by modifying…
Drupal Core 10.5.5 vulnerable to error-based SQL injection
A proof-of-concept exploit has been published for an error-based SQL injection vulnerability in Drupal Core 10.5.5. The flaw, tracked as…
WordPress Contest Gallery 28.1.4 Blind SQL Injection (CVE-2026-3180)
A blind SQL injection vulnerability in Contest Gallery plugin versions up to 28.1.4 allows unauthenticated attackers to extract database contents…
OpenEMR 7.0.2 Patched Against Arbitrary File Read Vulnerability (CVE-2026-24849)
OpenEMR versions before 7.0.4 are vulnerable to an arbitrary file read flaw that lets any authenticated user — even a…
Ukraine, FBI Uncover Russian Intelligence Campaign Targeting Messaging Accounts
Ukraine’s Security Service and the FBI have uncovered a long-running campaign by Russian intelligence services to break into the messaging…
Apple Patches Two Actively Exploited Zero-Days Affecting iPhone and Mac
Apple has released emergency updates fixing two zero-day vulnerabilities that are being actively exploited in the wild. If you’re running…
Malware Targets Travelers Through Fake Reservation Emails
If your flight’s already canceled and your hotel’s overbooked, the last thing you need is a fake confirmation email making…