Latest news
Dubbed with the CVE-2023-22513 tag and boasting a CVSS score of a whopping 8.5, this high-severity Remote Code Execution (RCE) vulnerability
Researchers have discovered four vulnerabilities in widely used network management products from Nagios XI
The vulnerability tracked as CVE-2023-28434 has a CVSS score of 8.8 and allows an attacker to bypass metadata bucket name checking
CVE-2023-4998, with a CVSS v3.1 score of 9.6, affects both GitLab Community Edition (CE) and Enterprise Edition (EE) spanning versions
If an attacker is able to exploit the CVE-2023-42442 vulnerability, they could download session replays that contain sensitive information
The matter is further intensified by reports from Trend Micro Incorporated confirming observations of attacks exploiting CVE-2023-41179
It was discerned that Microsoft's AI researchers inadvertently exposed a repository on Azure, spanning a staggering 38 terabytes
The attacker could then use the CVE-2023-36735 vulnerability to execute arbitrary code with higher privileges and escape the browser sandbox.
When exploited, the CVE-2023-23362 vulnerability grants authenticated users the capability to execute commands over the network.
CVE-2023-39777 has far-reaching implications, especially in the vBulletin version 6.0.0, with prior versions equally at risk
The consequences of CVE-2023-41955 are significant. An attacker with administrator privileges could do anything they want to the website
According to Kaspersky Lab, the Linux application, "Free Download Manager", has clandestinely been embedded with a backdoor
By persuading a victim to open specially crafted content, an attacker could exploit CVE-2023-38146 to execute arbitrary code on the system
Explore how DSPM enhances cloud data security. With cyber threats on the rise, Flow Security's DSPM provides a robust shield for sensitive data in the cloud.
With a perfect 10 out of 10, it signifies that CVE-2023-41892 is not only easy to exploit due to its reduced attack code complexity
In a detailed expose, Symantec pointed out that Redfly employed the ShadowPad Trojan to infiltrate a national power grid in Asia
Using its dynamic memory extraction technique, MemDive intercepts the payload even before its execution.
Zoom has released security updates to fix three vulnerabilities that could allow attackers to take control of a user's account or system.
CVE-2023-4863 is a critical vulnerability in the libwebp component of Mozilla Products that could allow an attacker to execute arbitrary code
CVE-2023-36802 allows hackers to gain the coveted SYSTEM privileges, granting them unfettered access to a machine's core functionalities