Latest news
With a maximum severity CVSS score of 10, the CVE-2023-26045 vulnerability demonstrated an alarming capacity to wreak havoc
Create captivating tutorial videos with ease using iTop Screen Recorder. Record, edit, and share high-quality content hassle-free. Download now!
CVE-2023-34478 is a significant security flaw that can lead to an authentication bypass when Apache Shiro is used in conjunction with APIs
Apple is aware of a report that CVE-2023-38606 may have been actively exploited against versions of iOS released before iOS 15.7.1
CVE-2023-20593 allows bad actors to spy on the registers of other processes, with no system calls or privileges needed
The most serious flaw, CVE-2023-34966 (CVSS score of 7.5), is an infinite loop vulnerability in Samba's mdssvc RPC service for Spotlight
Implement fine-grained access control and least privilege in microservice contexts. Learn about capability-based tokens and how to apply permissions to specific users.
With a target in sight, the attacker exploited CVE-2022-26923, a vulnerability patched by Microsoft in update KB5014754
With a slightly higher CVSS score of 8.5, CVE-2023-22508, too, allows an authenticated attacker to execute arbitrary code
Security researcher Farhan Phakhruddin has published a PoC exploit code that can be used to exploit the CVE-2023-35885 vulnerability
CVE-2023-38408 is a RCE vulnerability that lies within the ssh-agent's forwarded feature, particularly in relation to the PKCS#11 providers
The botnet under investigation by Black Lotus Labs, for instance, has seen its AVrecon malware infect over 70,000 Linux-based routers
Fitzpatrick, concurrently one of the founders of the BreachForums, was responsible for the design and construction of its fundamental infrastructure
The United States has unveiled a proposal for a smart device security standard, coined as the "U.S. Cyber Trust Mark,"
The vulnerability, which has been assigned the CVE identifier CVE-2023-3765, has a Common Vulnerability Scoring System score of a perfect 10
CVE-2023-3519 (CVSS score of 9.8) - The most severe of the three, this vulnerability allows unauthenticated remote code execution
This specific vulnerability, tagged as CVE-2023-33999, is a site-wide Reflected Cross-Site Scripting (XSS) vulnerability.
CVE-2023-34034 has a CVSS score of 8.8 and occurs when "**" is used as a pattern in Spring Security configuration for WebFlux