CVE-2026-78313 | Deltaww DIAEnergie prior 1.11.00.022 access control
A vulnerability was found in Deltaww DIAEnergie. It has been rated as problematic. Affected by this issue is some unknown
Read MoreAuthor: Yanac
CVE-2026-57590 | Apache DolphinScheduler up to 3.4.2 Task Group APIs improper authorization
A vulnerability categorized as critical has been discovered in Apache DolphinScheduler up to 3.4.2. This affects an unknown part of
Read MoreCVE-2026-92905 | ZohoCorp EventLog Analyzer/Log360 prior 13071 Log Collector denial of service
A vulnerability identified as problematic has been detected in ZohoCorp EventLog Analyzer and Log360. This vulnerability affects unknown code of
Read MoreCVE-2026-15731 | magazine3 WP Multilang Plugin up to 2.4.31 on WordPress cross site scripting
A vulnerability labeled as problematic has been found in magazine3 WP Multilang Plugin up to 2.4.31 on WordPress. This issue
Read MoreCVE-2026-12227 | Visual Composer Website Builder Plugin up to 45.16.0 on WordPress vcv-template file inclusion
A vulnerability marked as critical has been reported in Visual Composer Website Builder Plugin up to 45.16.0 on WordPress. Impacted
Read MoreCVE-2026-18335 | themeum Kirki Plugin up to 6.2.0 on WordPress kirki_data server-side request forgery
A vulnerability described as critical has been identified in themeum Kirki Plugin up to 6.2.0 on WordPress. The affected element
Read MoreCVE-2026-97224 | Excalidraw up to 0.18.1 Imported File restore.ts customData.generationData.html cross site scripting
A vulnerability classified as problematic has been found in Excalidraw up to 0.18.1. The impacted element is an unknown function
Read MoreCVE-2026-97225 | DbGate up to 7.2.5-beta.5 JSON Runner runners.js comment.text/script.schedule code injection (GHSA-rfx7-cmmf-7ff7)
A vulnerability classified as critical was found in DbGate up to 7.2.5-beta.5. This affects an unknown function of the file
Read MoreCVE-2026-97226 | DbGate up to 7.2.5/7.3.1-premium-beta.1 files-style Endpoint files.js fs.readFile filePath/uri path traversal
A vulnerability, which was classified as critical, has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile
Read More
New AvisLoader Windows Malware Uses ClickFix Lure and Tox P2P for C2
Varonis Threat Labs discovered AvisLoader, a Windows malware loader that uses the Tox peer-to-peer network for C2 and arrives through
Read More