Latest news
TurkoRat, a pernicious open-source infostealer, was found to have surreptitiously infiltrated the npm platform for two months
The CVE-2023-20883 vulnerability could trigger a DoS attack when Spring MVC is used along with a reverse proxy cache
CVE-2023-32409, a flaw that, quite alarmingly, allowed a remote attacker to break free from the confines of the Web Content sandbox
CVE-2023-20159 vulnerability stems from a security hole in the web-based user interface of the Cisco Small Business Series Switches.
Revealing the personal information of approximately 237,000 current and former federal government employee
In light of these potential risks, researchers from Check Point embarked on a mission to uncover potentially malicious VSCode extensions
CVE-2023-32956 is ranked as critical with a CVSS3 Base Score of 9.8. It is an OS Command Injection flaw found in the CGI component of SRM
The vulnerabilities have been confirmed in versions 3.8.45 and 3.8.49 of the Kiddoware Kids Place Parental Control Android App
A Proof-of-Concept (PoC) for CVE-2023-32233 allows unprivileged local users to start a root shell on impacted systems.
CVE-2023-2499 (CVSS score of 9.8) is an authentication bypass vulnerability present in RegistrationMagic versions up to and including 5.2.1.0
CVE-2023-32314, (CVSS score of 9.8) vulnerability could allow a malicious entity to bypass the sandbox protections.
This requires corporations and individuals to adopt the latest cybersecurity practices to mitigate these risks effectively
Lancefly has been deploying a powerful custom-written backdoor named Merdoor to launch targeted cyber-attacks on organizations across South
Dubbed CVE-2023-32784, this security bug exposes a loophole that allows for the master password to be dumped from memory