Vulnerability

Stealthy XML Backdoor Haunts Magento Stores – New Threat Exploits Critical Vulnerability (CVE-2024-20720)

• Vulnerability

Stealthy XML Backdoor Haunts Magento Stores – New Threat Exploits Critical Vulnerability (CVE-2024-20720)

Do Son April 5, 2024 0

Magento merchants, brace yourselves. A cunning new malware campaign is targeting your online stores with an insidious...

Read More Read more about Stealthy XML Backdoor Haunts Magento Stores – New Threat Exploits Critical Vulnerability (CVE-2024-20720)

QlikView Patches High Severity Privilege Escalation Vulnerability (CVE-2024-29863)

• Vulnerability

QlikView Patches High Severity Privilege Escalation Vulnerability (CVE-2024-29863)

Do Son April 5, 2024 0

Qlik, the popular business intelligence software vendor, has released urgent security patches to address a critical vulnerability...

Read More Read more about QlikView Patches High Severity Privilege Escalation Vulnerability (CVE-2024-29863)

CVE-2024-3116: Critical pgAdmin Vulnerability Exposes Databases to Remote Attacks

• Vulnerability

CVE-2024-3116: Critical pgAdmin Vulnerability Exposes Databases to Remote Attacks

Do Son April 5, 2024 0

A severe security flaw has been uncovered in pgAdmin, the popular open-source tool used by database administrators...

Read More Read more about CVE-2024-3116: Critical pgAdmin Vulnerability Exposes Databases to Remote Attacks

YubiKey Manager Flaw (CVE-2024-31498): Patch Now To Prevent Admin Privilege Escalation on Windows

• Vulnerability

YubiKey Manager Flaw (CVE-2024-31498): Patch Now To Prevent Admin Privilege Escalation on Windows

Do Son April 4, 2024 0

Yubico has released a security advisory and patch (version 1.2.6) for its YubiKey Manager GUI software. A...

Read More Read more about YubiKey Manager Flaw (CVE-2024-31498): Patch Now To Prevent Admin Privilege Escalation on Windows

Apache CloudStack Releases Critical Security Patches – Update Immediately

• Vulnerability

Apache CloudStack Releases Critical Security Patches – Update Immediately

Do Son April 4, 2024 0

The Apache Software Foundation has issued security releases 4.18.1.1 and 4.19.0.1 for its popular cloud management platform,...

Read More Read more about Apache CloudStack Releases Critical Security Patches – Update Immediately

Unpatched Vulnerabilities: Ransomware’s Favorite Entry Point

• Cyber Security
• Malware
• Vulnerability

Unpatched Vulnerabilities: Ransomware’s Favorite Entry Point

Do Son April 4, 2024 0

A recent report by Sophos, based on a comprehensive survey conducted by Vanson Bourne, sheds light on...

Read More Read more about Unpatched Vulnerabilities: Ransomware’s Favorite Entry Point

Apache HTTP Server Hit by Triple Vulnerabilities – Users Urged to Update

• Vulnerability

Apache HTTP Server Hit by Triple Vulnerabilities – Users Urged to Update

Do Son April 4, 2024 0

Security researchers have uncovered three vulnerabilities in the widely used Apache HTTP Server, prompting an urgent call...

Read More Read more about Apache HTTP Server Hit by Triple Vulnerabilities – Users Urged to Update

CVE-2024-3273: D-Link NAS Vulnerability Threatens 92,000 Devices

• Vulnerability

CVE-2024-3273: D-Link NAS Vulnerability Threatens 92,000 Devices

Do Son April 3, 2024 0

Security researchers have uncovered a serious vulnerability in several D-Link Network Attached Storage (NAS) devices, including DNS-320L,...

Read More Read more about CVE-2024-3273: D-Link NAS Vulnerability Threatens 92,000 Devices

Node.js Security Update Addresses Server Crash, Request Smuggling Vulnerabilities

• Vulnerability

Node.js Security Update Addresses Server Crash, Request Smuggling Vulnerabilities

Do Son April 3, 2024 0

The Node.js project has released a critical security update addressing vulnerabilities in active release lines (v18.x, v20.x,...

Read More Read more about Node.js Security Update Addresses Server Crash, Request Smuggling Vulnerabilities

Multi Vulnerabilities Discovered in VeridiumID Authentication Platform – Patch Now

• Vulnerability

Multi Vulnerabilities Discovered in VeridiumID Authentication Platform – Patch Now

Do Son April 3, 2024 0

A recent security advisory from Veridium has exposed a series of significant vulnerabilities in their popular VeridiumID...

Read More Read more about Multi Vulnerabilities Discovered in VeridiumID Authentication Platform – Patch Now

Critical Vulnerabilities Discovered in Ivanti Connect Secure and Policy Secure

• Vulnerability

Critical Vulnerabilities Discovered in Ivanti Connect Secure and Policy Secure

Do Son April 3, 2024 0

Ivanti has released an urgent security advisory detailing multiple critical vulnerabilities affecting their popular Connect Secure (ICS)...

Read More Read more about Critical Vulnerabilities Discovered in Ivanti Connect Secure and Policy Secure

Urgent: Patch Critical Vulnerabilities in Widely-Used REHub WordPress Theme & Plugin

• Vulnerability

Urgent: Patch Critical Vulnerabilities in Widely-Used REHub WordPress Theme & Plugin

Do Son April 3, 2024 0

The security researcher Rafie Muhammad has found multiple high-severity vulnerabilities in the REHub WordPress theme (premium version)...

Read More Read more about Urgent: Patch Critical Vulnerabilities in Widely-Used REHub WordPress Theme & Plugin

CVE-2024-29745 & CVE-2024-29748: Critical Google Pixel Flaws Exploited – Update Immediately

• Vulnerability

CVE-2024-29745 & CVE-2024-29748: Critical Google Pixel Flaws Exploited – Update Immediately

Do Son April 3, 2024 0

Google has revealed in their April 2024 Pixel Update Bulletin that several serious security flaws could be...

Read More Read more about CVE-2024-29745 & CVE-2024-29748: Critical Google Pixel Flaws Exploited – Update Immediately

VMware SD-WAN Vulnerabilities Pose Risk to Network Security, Patches Released

• Vulnerability

VMware SD-WAN Vulnerabilities Pose Risk to Network Security, Patches Released

Do Son April 2, 2024 0

VMware has released critical security patches to address multiple vulnerabilities in its SD-WAN (Software-Defined Wide Area Network)...

Read More Read more about VMware SD-WAN Vulnerabilities Pose Risk to Network Security, Patches Released

CVE-2024-3159: Google Chrome Zero-Day Exploit Demonstrated at Pwn2Own

• Vulnerability

CVE-2024-3159: Google Chrome Zero-Day Exploit Demonstrated at Pwn2Own

Do Son April 2, 2024 0

Google has released an urgent security update for its Chrome web browser, patching a critical zero-day vulnerability...

Read More Read more about CVE-2024-3159: Google Chrome Zero-Day Exploit Demonstrated at Pwn2Own

Major WordPress Plugin Exposes Millions of Sites to Data Theft

• Vulnerability

Major WordPress Plugin Exposes Millions of Sites to Data Theft

Do Son April 2, 2024 0

A severe security flaw discovered in the popular LayerSlider WordPress plugin has potentially put over a million...

Read More Read more about Major WordPress Plugin Exposes Millions of Sites to Data Theft

CVE-2024-2389 (CVSS 10): Critical Security Flaw Discovered in Progress Flowmon Network Monitoring Tool

• Vulnerability

CVE-2024-2389 (CVSS 10): Critical Security Flaw Discovered in Progress Flowmon Network Monitoring Tool

Do Son April 2, 2024 0

Progress, the provider of Flowmon, a widely used network monitoring and security solution, has disclosed a major...

Read More Read more about CVE-2024-2389 (CVSS 10): Critical Security Flaw Discovered in Progress Flowmon Network Monitoring Tool

Apache Pulsar Patches Authorization Flaw (CVE-2024-29834) – Update Now to Protect Sensitive Data

• Vulnerability

Apache Pulsar Patches Authorization Flaw (CVE-2024-29834) – Update Now to Protect Sensitive Data

Do Son April 2, 2024 0

Apache Pulsar, a highly popular open-source messaging and streaming platform, has recently patched a critical security vulnerability...

Read More Read more about Apache Pulsar Patches Authorization Flaw (CVE-2024-29834) – Update Now to Protect Sensitive Data

CVE-2024-2975: Octopus Deploy Patches Critical Privilege Escalation Vulnerability

• Vulnerability

CVE-2024-2975: Octopus Deploy Patches Critical Privilege Escalation Vulnerability

Do Son April 1, 2024 0

Octopus Deploy, the popular deployment automation platform, has released a security advisory and subsequent patches to address...

Read More Read more about CVE-2024-2975: Octopus Deploy Patches Critical Privilege Escalation Vulnerability

Qualcomm Addresses Critical Security Vulnerabilities in April Bulletin

• Vulnerability

Qualcomm Addresses Critical Security Vulnerabilities in April Bulletin

Do Son April 1, 2024 0

US-based chip giant Qualcomm has released a critical security bulletin patching a major flaw along with 11...

Read More Read more about Qualcomm Addresses Critical Security Vulnerabilities in April Bulletin