Latest news
Check out these in-demand cross-platform development frameworks - Flutter, React Native, and Xamarin - to build apps that smoothly work on all platforms
CVE-2023-25616 (CVSS score of 9.9), a code injection vulnerability in SAP BusinessObjects Business Intelligence Platform (CMC)
there has been a significant data breach at DC Health Link, which may have exposed the personal identity information of thousands of policyholders
Bytecode Alliance Wasmtime, CVE-2023-26489, with a CVSS3 score of 9.9, is caused by an out-of-bounds read/write on x86_64.
The vulnerability has been assigned two CVEs, CVE-2022-47003 for Mura CMS and CVE-2022-47002 for Masa CMS, with a CVSS3 score of 9.8 for both
Bug has been identified as CVE-2023-27482, with a CVSS score of 10, the highest possible score, indicating that it is a critical security issue
Acer, the Taiwanese computer manufacturer, has confirmed that its servers used by the operations team were hacked, and 160GB of confidential data was stolen
Due to the CVE-2023-26604 vulnerability, an attacker could potentially exploit the system to gain elevated privileges to execute commands
CVE-2023-25610 allows an unauthenticated attacker to execute arbitrary code on the system, caused by a heap buffer underflow in the administrative interface
A remote attacker could exploit CVE-2023-25690 to bypass access controls in the proxy server, proxying unintended URLs to existing origin servers
CVE-2022-35914 allows a remote attacker to execute arbitrary PHP code on the system, caused by a flaw in the script in the htmlawed module
4 of the critical bugs patched this month reside in System (CVE-2023-20951 & CVE-2023-20954) and Qualcomm's closed-source components
Today, a technical analysis of the CVE-2023-21716 (CVSS score: 9.8) bug was published and a PoC exploit has now been released.
CVE-2022-31678 allows a remote attacker to obtain sensitive information, caused by improper handling of XML external entity declarations
Researchers investigated and analyzed the data samples posted on the forum, and speculated that the leaked database contains actual company data of Beeline
CVE-2023-26463 vulnerability can allow an attacker to bypass authentication and potentially execute remote code on your system.
CVE-2023-0656 allows a remote unauthenticated attacker to cause DoS by exploiting a stack-based buffer overflow vulnerability