CVE-2026-47074: ex_aws_sns verify_message/1 fails to validate SigningCertURL, allowing unauthenticated SNS message signature spoofing; affects versions 2.0.1 to before 2.3.5.
Explains the second wave of commencement provisions under the Renters’ Rights Act 2025 and the implications for landlords and property managers under UK health and safety law.
A publicly disclosed buffer overflow in H3C Magic B1’s /goform/aspForm could allow remote code execution; the vendor did not respond to the disclosure.
A WordPress plugin flaw allows authenticated admins to force downloads and extract ZIPs into wp-content/plugins/cmp-premium-themes/, enabling remote code execution; inventory, isolate and remove or patch the plugin immediately.
CVE-2026-6483 allows remote OS command injection in Wavlink WL-WN530H4 via /cgi-bin/internet.cgi; exploit public, fix is firmware 2026.04.16 — patch or isolate immediately.
A correction to the Boiler Upgrade Scheme Regulations 2022 in England and Wales clarifies eligibility and administration; businesses installing heat pumps or biomass boilers should review their processes to ensure compliance and secure funding.
PHANTOMPULSE, delivered through an Obsidian plugin in the REF6598 campaign, bypasses AV and targets finance and crypto users; here’s what to check first.
Donec ullamcorper nulla non metus auctor fringilla. Cras justo odio, dapibus ac facilisis in, egestas eget
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.