Announcements

CVE-2026-18315 (matched: wordpress)

  • 20th August 2026
A security vulnerability has been discovered in the TrueBooker – Appointment Booking and Scheduler System plugin for WordPress, a tool many service-based businesses use to manage client appointment bookings. All versions of this plugin up to and including version 1.2.6 are affected by this flaw.The issue allows unauthenticated attackers (people ...
Continue reading

Ray-Project Ray: Ray-Project Ray Code Injection Vulnerability

  • 20th August 2026
A code injection vulnerability has been discovered in Ray, a tool many developers use to build and test websites and applications. This type of flaw can let unauthorized people run harmful custom code on systems where Ray is installed, which may lead to those systems being taken over remotely by bad actors.The vulnerability can be exploited ...
Continue reading

Apple macOS: Apple macOS Improper Authentication Vulnerability

  • 20th August 2026
Apple has identified a security flaw in its macOS operating system. This is an improper authentication vulnerability, meaning the system’s built-in login verification for a core feature does not work as intended. The flaw impacts macOS’s built-in Screen Sharing tool, which lets users remotely access and control a Mac from another device. An ...
Continue reading

Microsoft SharePoint: Microsoft SharePoint Weak Authentication Vulnerability

  • 20th August 2026
A security weakness has been identified in Microsoft SharePoint, a popular platform many organizations use to host internal team sites, share work files, and manage collaborative workflows. This flaw affects the platform's login verification system, and can be exploited by an unauthorized person to bypass a built-in security feature when accessing ...
Continue reading