Google has rolled out the latest version of its renowned browser, Chrome 127. This release brings a host of improvements, prominently featuring 24 security-related fixes. Available for Windows, macOS, and...
A vulnerability was discovered in LiteSpeed Cache (LS Cache), a widely used WordPress plugin installed on over five million sites. The vulnerability, tracked as CVE-2024-3246, allows attackers to inject malicious...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding two actively exploited vulnerabilities affecting Microsoft Internet Explorer and Twilio Authy, a popular two-factor authentication app....
Docker has issued a security advisory for a critical vulnerability affecting certain versions of Docker Engine. This vulnerability, identified as CVE-2024-41110, has a CVSS score of 10, indicating a critical...
A significant vulnerability has been identified in Laravel v11.x, the popular PHP web framework renowned for building modern, elegant web applications. This vulnerability, designated as CVE-2024-40075, is an XML External...
National Instruments (NI) has issued a critical security advisory warning users of its widely-used real-time testing software, VeriStand, about two severe vulnerabilities that could allow attackers to execute malicious code...
National Instruments (NI) has issued an urgent security advisory regarding a critical vulnerability in its VeriStand Gateway software, a cornerstone of the VeriStand real-time testing and simulation framework. This vulnerability,...
Okta, a leading identity and access management provider, has recently patched a high-severity cross-site scripting (XSS) vulnerability (CVE-2024-0981) in its browser plugin. This vulnerability affected versions 6.5.0 through 6.31.0 of...
A vulnerability in BlueStacks, a popular Android emulator used by millions of gamers worldwide, has been discovered by security researcher Maciej Miszczyk. The vulnerability, tracked as CVE-2024-33352, could allow attackers...
A critical SQL injection vulnerability, collectively endangering millions of Linux servers worldwide found in the popular open-source server management tool, 1Panel. Identified as CVE-2024-39911, this SQL injection flaw, carries a...
A newly discovered vulnerability class, termed “False File Immutability” (FFI), has raised serious concerns within the cybersecurity community due to its potential to circumvent Windows Code Integrity (CI), a critical...
In a significant move to combat the escalating threat of Denial-of-Service (DoS) attacks, IPFire, the renowned open-source firewall distribution, has introduced robust SYN Flood Protection for its enterprise users. This...
Researchers from ESET have identified a zero-day exploit targeting Telegram for Android. Dubbed EvilVideo vulnerability, the exploit surfaced on an underground forum on June 6, 2024. Hackers employed this vulnerability...
A critical-severity vulnerability has been discovered in 1Panel, an open-source, web-based server management control panel. Designated as CVE-2024-39907, this SQL injection flaw has a CVSS score of 9.8, underscoring its...
JumpServer, a widely used open-source privileged access management (PAM) tool, has disclosed two critical vulnerabilities that could allow attackers to gain unauthorized access to sensitive systems and data. The vulnerabilities,...
Support Securityonline.info site. Thanks!
