Do Son Researcheruncovered a privilege escalation vulnerability (CVE-2023-30869) in the Easy Digital Downloads plugin versions 3.1.1.4.1 and below
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
The CVE-2023-21839 vulnerability affects the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)
Rapture shares similarities with the Paradise ransomware, such as the RSA key configuration file and the requirement of a .NET 4.0 framework
CVE-2023-2356 (CVSS score of 10) allows attackers to access local server files on tracking server through a relative path traversal exploit
CVE-2023-30847 leads to invalid memory reads in proxy handler, which causes crashes, leaks of sensitive information to backend HTTP servers
One of APT41's tools is a stealthy and persistent PowerShell backdoor that bypasses traditional security measures
The impact of the CVE-2023-29007 vulnerability is substantial, as it can lead to arbitrary code execution by injecting values for executables
These HiddenAds applications generate large amounts of stealthy advertising packets, exploiting players for advertising revenue.
Since the full-scale invasion of Russia started, the Ukrainian IT area has experienced the worst times from...
WhatsApp is a popular messaging app that offers users a convenient way to communicate with others. While...
Have you ever found yourself locked out of your home, frantically searching for a way to get...
Kimsuky targets entities related to South Korean politics, government, and military, as well as individuals and organizations
Most fake Flipper Zero websites emulate the sleek design of the genuine site, flipperzero.one. They also tend to use HTTPS
CVE-2023-29489 can be exploited without any authentication and affects even cPanel management ports that are not exposed externally
Researchers from Unit 42 have recently discovered a new variant of the PingPull malware, which targets Linux systems and is used by the Chinese APT group
Researchers at TrendMicro have discovered a unique threat affecting Docker containers, a piece of software they've dubbed "TrafficStealer."
VMware Workstation and Fusion contain a critical stack-based buffer-overflow CVE-2023-20869 vulnerability (CVSSv3 base score of 9.3
CVE-2023-30839 allows a back-office user to write, update, and delete data in the database without having the necessary permissions.
The vast and speedy encroachment of tech innovations, such as machine learning (ML) and artificial intelligence (AI),...
The swift exploitation of CVE-2023-1389 by the Mirai botnet underscores the decreasing "time-to-exploit" speed observed
As a programmer, you spend countless hours typing away on your keyboard. You need a reliable tool...
The Proof-of-Concept (PoC) for CVE-2023-1671, now available on Github, demonstrates how the vulnerability can be exploited