Latest news
The CVE-2023-32960 vulnerability could lead to a more insidious Stored Site-Wide Cross-Site Scripting (XSS) attack on the wp-admin area
PoC exploit code has been made available for the CVE-2023-21554 bug, making it imperative that users move quickly to apply the patches
A bounty has been placed on Russian ransomware developer Mikhail Matveev under the U.S. Treasury Department's Transnational Organized Crime Rewards Program
TurkoRat, a pernicious open-source infostealer, was found to have surreptitiously infiltrated the npm platform for two months
The CVE-2023-20883 vulnerability could trigger a DoS attack when Spring MVC is used along with a reverse proxy cache
CVE-2023-32409, a flaw that, quite alarmingly, allowed a remote attacker to break free from the confines of the Web Content sandbox
CVE-2023-20159 vulnerability stems from a security hole in the web-based user interface of the Cisco Small Business Series Switches.
Revealing the personal information of approximately 237,000 current and former federal government employee
In light of these potential risks, researchers from Check Point embarked on a mission to uncover potentially malicious VSCode extensions
CVE-2023-32956 is ranked as critical with a CVSS3 Base Score of 9.8. It is an OS Command Injection flaw found in the CGI component of SRM
The vulnerabilities have been confirmed in versions 3.8.45 and 3.8.49 of the Kiddoware Kids Place Parental Control Android App
A Proof-of-Concept (PoC) for CVE-2023-32233 allows unprivileged local users to start a root shell on impacted systems.
CVE-2023-2499 (CVSS score of 9.8) is an authentication bypass vulnerability present in RegistrationMagic versions up to and including 5.2.1.0
CVE-2023-32314, (CVSS score of 9.8) vulnerability could allow a malicious entity to bypass the sandbox protections.
This requires corporations and individuals to adopt the latest cybersecurity practices to mitigate these risks effectively