Do Son A series of critical vulnerabilities have been discovered in the XStore theme and its accompanying XStore Core plugin
Vulnerability
Exploiting CVE-2024-22120 allows attackers to dump any values from the database, including sensitive information
Each tasked with managing activities and establishing communication with compromised IPs to facilitate the distribution of XMRig cryptominers
Bryan Smith shared the technical details and a proof-of-concept (PoC) for CVE-2024-22026 in Ivanti's Enterprise Mobility Management Platform
The flaw, tracked as CVE-2024-22476, could allow an unauthenticated attacker to “enable escalation of privilege via remote access”.
A critical SQL injection vulnerability (CVE-2024-32888) has been discovered in the Amazon JDBC Driver for Redshift
The PrestaShop project has recently issued a security advisory revealing two significant vulnerabilities (CVE-2024-34716 & CVE-2024-34717)
Two of the vulnerabilities, CVE-2014-100005 and CVE-2021-40655, affect specific models of D-Link routers (DIR-600 and DIR-605)
CVE-2024-22039, CVE-2024-22040, and CVE-2024-22041, reside within the network communication stack of the affected systems
CVE-2024-4984 could allow malicious actors to inject harmful scripts into websites, potentially compromising visitor data, redirecting traffic
Git project addressed a series of critical security flaws that could expose users to remote code execution (CVE-2024-32002, CVE-2024-32004)
A critical vulnerability (CVE-2024-34070) has been discovered in Froxlor, a popular open-source web hosting control panel
CVE-2024-4947 allow attackers to execute harmful code on users' systems, compromising sensitive data and taking control of their devices
A new report reveals four critical vulnerabilities in ThroughTek's Kalay platform, a cornerstone of the IoT ecosystem
CVE-2024-32741 (CVSS 10): Hardcoded Root Password: The presence of a hardcoded password for the root user and boot loader
HPE Aruba Networking has issued an urgent security advisory, urging customers to patch their Aruba Access Points running InstantOS and ArubaOS 10
This vulnerability, identified as CVE-2023-52424 and dubbed the SSID Confusion Attack, was uncovered by security researcher Mathy Vanhoef
Microsoft swiftly assigned the CVE-2024-30051 identifier to the vulnerability and released a patch during this month's Patch Tuesday
CVE-2024-30040, a Security Feature Bypass vulnerability in Windows MSHTML, could allow attackers to bypass security measures
These flaws, tracked as CVE-2024-22267, CVE-2024-22268, CVE-2024-22269, and CVE-2024-22270, expose users to a range of threats
a critical vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform, tracked as CVE-2024-33006, with a CVSS score of 9.6
This critical security flaw cataloged as CVE-2023-46012 (CVSS 9.8), poses a significant risk to users of the affected routers