A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
A malicious ChatGPT share link could run an attacker’s code in the logged-in session of anyone who opened it, allowing
Read More
Month: October 2026
Asia should read the fine print on Musk’s Starlink contracts
“Were Starlink to be turned off,” Elon Musk wrote, “the Ukrainian front line would collapse immediately.” The line appeared in
Read MoreCVE-2026-118147 | Microsoft Visual Studio input validation
A vulnerability classified as critical has been found in Microsoft Visual Studio. Affected by this issue is some unknown functionality.
Read MoreCVE-2026-120135 | Apache Thrift TProtocolUtil.skip recursion
A vulnerability classified as critical was found in Apache Thrift. This affects the function TProtocolUtil.skip. Such manipulation leads to uncontrolled
Read More
Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post
Read MoreCVE-2026-110176 | Drupal File Force Download Extension up to 7.1.2 File Download hook_file_download access control
A vulnerability was found in Drupal File Force Download Extension up to 7.1.2 and classified as problematic. This vulnerability affects
Read MoreCVE-2026-96634 | vrana Adminer SQL Import sql.inc.php preg_match query incorrect regex
A vulnerability was found in vrana Adminer. It has been classified as problematic. This issue affects the function preg_match of
Read MoreCVE-2026-96632 | Vrana AdminNeo Database Connection admin/core/Admin.php get->getVersion cross site scripting
A vulnerability was found in Vrana AdminNeo. It has been declared as problematic. Impacted is the function Connection::get->getVersion of the
Read MoreCVE-2026-96630 | vrana Adminer SQL Blocklist sql.inc.php q code injection
A vulnerability was found in vrana Adminer. It has been rated as critical. The affected element is an unknown function
Read MoreCVE-2026-96633 | Vrana AdminNeo SQLite driver drop_databases db path traversal
A vulnerability categorized as problematic has been discovered in Vrana AdminNeo. The impacted element is the function drop_databases of the
Read More