A new macOS information-stealing malware dubbed ClickLock terminates all visible processes to force users into entering their system login password. […]

The Coca-Cola Company disclosed today that a ransomware attack impacting its Fairlife dairy subsidiary has disrupted operations, temporarily suspending production of Fairlife products across the United States. […]

Posted by NotCVE Advisories on Jul 15 —————————————————————————- NotCVE Disclosure Update — NotCVE-2026-0001 / CVE-2026-14440 —————————————————————————- [-] Summary: On 2026-01-19 the issue described below was published as NotCVE-2026-0001 after no CVE identifier was assigned for it. On 2026-07-01 — 163

Learn More[NotCVE-2026-0001] Cloudflare Universal SSL CAA augmentation weakens RFC 8657 account binding — CVE-2026-14440 assigned 163 days after public no-CVE disclosure

Posted by AliReza on Jul 15 # Exploit Title: EZ Game Booster v1.0.0 – Cleartext Credentials in user.config # Date: 2026-07-16 # Exploit Author: Alireza Chegini # Vendor Homepage: https://ezsystemrepairs.com # Software Link: https://ezsystemrepairs.com (Free version available) # Version: 1.0.0

Learn MoreSubject: Advisory Submission: EZ Game Booster – Cleartext Storage of Sensitive Credentials (CWE-312)

Posted by Greg via Fulldisclosure on Jul 15 Skillable’s SCORM lab launch endpoint validates a launch token but enforces per-user allocation limits using a browser-supplied userId that is not bound to the validated token. An authenticated learner can modify this

Learn MoreCVE-2026-56877 – Skillable SCORM userId authorisation bypass

Posted by Matteo Beccati on Jul 08 ======================================================================== Revive Adserver Security Advisory REVIVE-SA-2026-003 ————————————————————————https://www.revive-adserver.com/security/revive-sa-2026-003 ———————————————————————— Date: 2026-06-25 Risk Level: Medium to High Applications affected: Revive Adserver Versions…

Posted by evan on Jul 06 SUMMARY: a stored XPATH injection allows any user with just ca manager/certificate manager perms to leak any secret key/any value in config.xml, thus achieving privilege escalation and potentially remote code execution. this can also

Learn MoreOPNsense XPATH Injection (CVE-2026-53582)

Posted by Jan Hüber via Fulldisclosure on Jul 06 Authentication Bypass for SafeLine SL6 and SL6+ =============================================== The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to

Learn MoreSCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+

Posted by Red Nanaki via Fulldisclosure on Jul 02 Whistleblowersoftware.com: confidentiality and anonymity leakage to third parties ## Summary The anonymous reporting flow on `whistleblowersoftware.com` encrypts report text end-to-end in the browser but does not extend the same guarantee to

Learn MoreWhistleblowersoftware.com: confidentiality and anonymity leakage to third parties

Posted by Red Nanaki via Fulldisclosure on Jul 02 OpenBlow Multiple Deanonymization Vulnerabilities Summary A production deployment was observed (HTTP archive of a full, real whistleblower submission) to route its anonymous reporting flow through Google. The intake CAPTCHA is Google

Learn MoreOpenBlow Multiple Deanonymization Vulnerabilities