Latest news
The vulnerability, identified as CVE-2023-28708, allows cybercriminals to access session cookies transmitted over an insecure channel
The CVE-2022-37337 vulnerability stems from the dev_name parameter in the access control function, which is susceptible to command injection.
By using a specially crafted file, an attacker could exploit the CVE-2023-28115 vulnerability to execute arbitrary code on the system.
The CVE-2023-20860 vulnerability, which carries a Common Vulnerability Scoring System (CVSS) score of 8.8, involves a security bypass
Flatpak has been found to allow remote attackers to execute arbitrary commands on the system. CVE-2023-28100- CVSS score of 10
Microsoft unveiled dedicated PowerShell scripts for enterprise IT administrators, intended to remediate CVE-2022-41099 vulnerability.
CISA warns of nation-state-backed hackers and cybercrime groups exploiting an old Telerik vulnerability, compromising a federal agency's network server
According to the document, the company's researchers uncovered 721.5 million exposed online credentials in 2022.
By persuading a victim to open a maliciously crafted file, an attacker can exploit CVE-2023-27329 to execute arbitrary code on the system.
CVE-2023-25589 - A critical (CVSS3 score of 9.8) vulnerability in the web-based management interface of ClearPass Policy Manager
a user claims to possess a database containing over 900 million Indian legal documents, including detailed information on Indian police records
CVE-2023-23392 which carries a CVSS score of 9.8, enables a remote attacker to execute arbitrary code on the affected systems.
With a CVSS score of 9.6, CVE-2022-39214 is a high-severity vulnerability that allows authenticated users to bypass security restrictions
CVE-2023-27588, with a CVSS score of 7.5, is an unauthenticated path traversal vulnerability affecting the Hasura GraphQL Engine
Exploiting CVE-2023-0814 can retrieve this key for any user. Hackers can reset the targeted user's password and subsequently login
Malicious actors can exploit the CVE-2023-22885 vulnerability by setting up a rogue SMB server to respond to client requests
The vulnerability, tracked as CVE-2023-24880, allows attackers to create files that can bypass Mark of the Web (MOTW) defenses
Adobe released security updates for ColdFusion versions 2021 and 2018 to resolve this critical flaw, tracked as CVE-2023-26360
Attackers can exploit CVE-2023-23397 by sending specially crafted emails that force a connection from the victim's device