Samsung Electronics' Device Solutions (DS) division recently discharged an engineer accused of divulging documents that incorporate key technologies
Do Son
Android users who had installed an earlier, innocuous version of iRecorder were unwittingly exposed to AhRat when they updated the app.
CVE-2023-2825 is a path traversal vulnerability that enables an unauthenticated user to read arbitrary files on the server.
CVE-2023-32692 (CVSS score of 9.8) is a Remote Code Execution (RCE) vulnerability within CodeIgniter's Validation Placeholders.
This vulnerability tracked as CVE-2023-33246, revolves around the potential for RCE when utilizing the update configuration function
Google has now declared the initiation of a novel reward scheme for the discovery of vulnerabilities within a selection of its own Android applications
DSkfunk not only shared a proof of concept (PoC) for the CVE-2023-25690 vulnerability but also published an in-depth write-up
CVE-2023-31457 and CVE-2023-32748 have a Common Vulnerability Scoring System (CVSS) score of 9.6, highlighting the gravity of the situation
The CVE-2023-32960 vulnerability could lead to a more insidious Stored Site-Wide Cross-Site Scripting (XSS) attack on the wp-admin area
PoC exploit code has been made available for the CVE-2023-21554 bug, making it imperative that users move quickly to apply the patches
A bounty has been placed on Russian ransomware developer Mikhail Matveev under the U.S. Treasury Department's Transnational Organized Crime Rewards Program
TurkoRat, a pernicious open-source infostealer, was found to have surreptitiously infiltrated the npm platform for two months
The CVE-2023-20883 vulnerability could trigger a DoS attack when Spring MVC is used along with a reverse proxy cache
CVE-2023-32409, a flaw that, quite alarmingly, allowed a remote attacker to break free from the confines of the Web Content sandbox
CVE-2023-20159 vulnerability stems from a security hole in the web-based user interface of the Cisco Small Business Series Switches.
Revealing the personal information of approximately 237,000 current and former federal government employee
In light of these potential risks, researchers from Check Point embarked on a mission to uncover potentially malicious VSCode extensions