Latest news
A hacker team from TU Berlin in Germany discovered that by injecting voltage faults, they could successfully unlock the TPM key of Tesla's AMD Ryzen SoC
The vulnerability, which has been assigned the CVE-2023-39157 identifier, has a CVSS score of 9.0, making it a critical risk.
the Controller Manager component has fallen prey to another critical vulnerability, CVE-2023-39292, boasting an elevated CVSS score of 8.8
the CVE-2023-35082 vulnerability scored the maximum 10 points on the Common Vulnerability Scoring System (CVSS)
CVE-2023-3718 is an authenticated command injection vulnerability dwelling in the AOS-CX command line interface.
The CVE-2023-3162 vulnerability lies in the way the plugin handles user authentication during a Stripe checkout.
CVE-2023-20583 vulnerability in AMD processors may allow an authenticated attacker to monitor the CPU power consumption
The researchers at Pentests.nl have generously provided comprehensive technical details and a proof-of-concept for the CVE-2023-28130 flaw
BleedingPipe vulnerability allows hackers to execute comprehensive remote code on player devices and servers running Minecraft mods
Xiaobye released a captivating video demonstration of exploiting the CVE-2023-31710 vulnerability on his Github repository
As of now we are only aware of the same limited number of customers impacted by CVE-2023-35078 as being impacted by CVE-2023-35081.
the software's ubiquity has drawn the attention of cybercriminals, who are deceiving and compromising these users via a Trojanized MS Visual Studio malware
VulnCheck unveiled in a report a critical privilege escalation flaw (CVE-2023-30799, CVSS score 9.1) present within the MikroTik RouterOS system
The report states that the extended time for Android patches to reach user devices compromises Android's security.
CVE-2022-27595 is classified as a high-risk issue due to its ability to allow authenticated users to execute code maliciously
Vaishno Chaitanya has been making waves in the digital ocean, creating a proof-of-concept (PoC) exploit for CVE-2023-35078
CVE-2023-38646 allows an unauthenticated attacker to execute arbitrary commands with the same privileges as the Metabase server
A critical security vulnerability, identified as CVE-2023-37895, has been discovered in Apache Jackrabbit, an open-source content repository
CVE-2023-38647 vulnerability, which has a severity rating of 'important', afflicts all Apache Helix versions up to and including 1.2.0.