Latest news
Tracked as CVE-2023-23924 (CVSS score: 10), the bug impacts all versions of the Dompdf library, including and below 2.0.1
Today, security researchers from Horizon3's Attack Team created a proof-of-concept (PoC) exploit for CVE-2022-31706.
Tracked as CVE-2022-27596 (CVSS score: 9.8), the security hole could allow a remote attacker to inject malicious code on vulnerable devices
Writing a book review is something that most students have to deal with from time to time. Find out more about how to complete this task and how online experts can help.
CVE-2023-0558 and CVE-2023-0557 security flaws impact versions 1.2.5 and below of ContentStudio and were fully resolved with version 1.2.6.
CVE-2022-29841 was caused by a command that read files from a privileged location and created a system command without sanitizing the read data
TheΒ critical vulnerabilityΒ tracked as CVE-2017-11357Β is rated 9.8 out of 10 for severity on the CVSS scoring system, and was patched by Progress
Argo CD users are advised to update to a fixed version of the platform as soon as possible as no workarounds are available for CVE-2023-22482
A remote attacker could exploit CVE-2023-23560 to conduct an SSRF attack, allowing the attacker to execute arbitrary code on the system.
Riot Games first stated that the attack damaged systems in the development environment, causing their update frequency to slow down
Tracked as CVE-2023-23504, the flaw concerns a heap underwrite vulnerability in the XNU kernel (OS used for a number of Apple products).
With a CVSS score of 9.8 and tracked as CVE-2022-31704, the first of the bugs is a remote code execution vulnerability affecting vRealize Log Insight
TheΒ PoC exploitΒ targets CVE-2022-38181, a vulnerability that could allow a remote authenticated attacker to bypass security restrictions
CVE-2022-42856 vulnerability could allow a remote attacker to execute arbitrary code on the system, caused by a type confusion flaw in the WebKit component
The PoC exploit targets CVE-2022-42864, a vulnerability that could allow a remote attacker to execute arbitrary code on the system
Tracked as CVE-2023-22727 (Github CVSS score of 9.8), CakePHP is vulnerable to SQL injection, caused by un-sanitized user request data
CVE-2023-24059 allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January 2023.