Latest news
Tracked as CVE-2023-23947 (CVSS score of 9.1), the bug exists due to improper authorization, was introduced in Argo CD version v2.3.0-rc1
CVE-2022-39952 could allow unauthenticated threat actors to execute unauthorized code or commands via specifically crafted HTTP requests
Aย technical analysisย of the CVE-2022-44666 bug was published and a PoC exploit has now been created on the Github page.
CVE-2023-0662 is a remote unauthenticated Denial of Service vulnerability and affects the default/production configuration.
an authenticated attacker could exploit the CVE-2023-20009 vulnerability to execute arbitrary commands as root.
Tracked as CVE-2023-20032 with a CVSS score of 9.8, the critical bug exists because of improper bounds checking
This post introduces an effective solution to avoid the โcloned hard disk shows wrong sizeโ issue. It also provides several effective troubleshooting methods
RCE Security has been credited with discovering and reporting the bug on January 13 that's been assigned the identifier CVE-2023-0291
An attacker could exploit CVE-2023-25725 to bypass HAProxy's headers processing, thus, could smuggle HTTP requests to the backend server
By executing a specially-crafted program, an authenticated attacker could exploit CVE-2023-21823 to gain SYSTEM privileges.
CVE-2023-23529, the issue has been described by the tech giant as a type confusion issue in the WebKit browser engine
Two security researchers Andrea Pierini & Antonio Cocomazzi announced the release of PoC exploits code targeting the CVE-2023-21746 flaw
Namecheap has its mail system hacked. Some users found that they received a phishing email from hello@namecheap.com.
CVE-2023-20076 (CVSS score of 7.2) exists because of incomplete sanitization of parameters passed in for activation of an application
Tracked as CVE-2023-25194, Apache Kafka could allow a remote authenticated attacker to execute arbitrary code on the system