Do Son CVE-2022-42009, is a notable case of Spring Expression Language injection. A malicious authenticated user can execute arbitrary code remotely
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
CVE-2023-37450 zero-day exploit allows ill-intentioned hackers to execute arbitrary code on targeted devices
Mobile marketing campaigns pack a punch. You can create them anywhere, and there’s a wide variety of...
IMY considers that the data transferred to the US via Google's statistics tool is personal data because the data can be linked with other unique data
With a towering CVSS score of 9.9, CVE-2023-36460 allowed attackers to create arbitrary files anywhere, using specially crafted media files
After trace analysis, Kaspersky discovered 34 analogous extensions on the Chrome Web Store. While these extensions offer specific functionalities
The CVE-2023-20185 security loophole is specific to Cisco Nexus 9000 Series Fabric Switches in ACI mode running releases 14.0 and later
An unauthenticated attacker could potentially exploit the CVE-2023-36934 flaw to gain unauthorized access to the MOVEit Transfer database
CVE-2023-21250 is a critical-severity remote code execution (RCE) flaw affecting Android releases 11, 12, 12L, and 13.
StackRot (CVE-2023-3269) refers to a flaw discovered in the Linux kernel's handling of stack expansion, specifically within versions 6.1 through 6.4
High-severity flaw in Ghostscript tagged as CVE-2023-36664 could allow an attacker to take over a routine and even execute commands on systems
Anonymous Sudan breached Microsoft and could access a large database containing 30 million Microsoft accounts and related information
ransomware group LockBit asserted they had successfully infiltrated the systems of TSMC, demanding a ransom of 70 million dollars
This vulnerability assigned the identifier CVE-2023-36812 and a severe Common Vulnerability Scoring System (CVSS) score of 9.8
Learn about key technology in patient care and how the digital healthcare sector is expected to alter in the near future. It’ll completely transform healthcare service delivery, shift focus to patient-centered personalized care, and challenge healthcare providers that lag behind in their digital transformation initiatives.
CVE-2023-36475 vulnerability, carrying a daunting CVSS score of 9.8, lies in the heart of the MongoDB BSON parser that Parse Server employ
CVE-2023-3460 - a privilege escalation vulnerability with a Common Vulnerability Scoring System (CVSS) score of a worrisome 9.8.
Researchers have released technical details and a PoC exploit code for the CVE-2023-28252 vulnerability that escalates to SYSTEM privilege
Netgear has recently addressed a high-severity vulnerability that had been lurking in its RAX30 WiFi router model
More and more businesses choose computerized systems to store important information and perform their daily activities. As...
Automattic has recently alerted its user base to a critical security vulnerability in the Jetpack WordPress Plugin — CVE-2023-2996
Automated testing guarantees software application compatibility across multiple operating systems and web browsers. Developers confront significant hurdles...