file upload

CVE-2025-64095: Critical CVSS 10.0 Flaw in DNN Platform Allows Unauthenticated Website Overwrite

• Vulnerability Report

CVE-2025-64095: Critical CVSS 10.0 Flaw in DNN Platform Allows Unauthenticated Website Overwrite

Do Son October 31, 2025 0

The DNN Platform, a leading open-source Content Management System (CMS) in the Microsoft ecosystem, is urging its...

Read More Read more about CVE-2025-64095: Critical CVSS 10.0 Flaw in DNN Platform Allows Unauthenticated Website Overwrite

CVE-2025-55746: Critical Directus Flaw Exposes Servers to Unauthenticated File Upload and RCE

• Vulnerability Report

CVE-2025-55746: Critical Directus Flaw Exposes Servers to Unauthenticated File Upload and RCE

Do Son August 22, 2025 0

The Directus project has disclosed a critical vulnerability tracked as CVE-2025-55746 (CVSS 9.3) that could allow unauthenticated...

Read More Read more about CVE-2025-55746: Critical Directus Flaw Exposes Servers to Unauthenticated File Upload and RCE

Critical Flaw (CVE-2025-22470, CVSS 9.8) in SATO Industrial Label Printers Allow Remote Root Takeover

• Vulnerability Report

Critical Flaw (CVE-2025-22470, CVSS 9.8) in SATO Industrial Label Printers Allow Remote Root Takeover

Do Son August 7, 2025 0

JPCERT/CC has issued a vulnerability note detailing two critical security flaws in SATO Corporation’s widely deployed industrial...

Read More Read more about Critical Flaw (CVE-2025-22470, CVSS 9.8) in SATO Industrial Label Printers Allow Remote Root Takeover

Apache Tomcat Patches Trio of Denial-of-Service Flaws

• Vulnerability

Apache Tomcat Patches Trio of Denial-of-Service Flaws

Do Son July 9, 2025 0

The Apache Software Foundation has released critical updates for Apache Tomcat 9, addressing three newly disclosed denial-of-service...

Read More Read more about Apache Tomcat Patches Trio of Denial-of-Service Flaws

Unpatched & Critical (CVSS 10): TI WooCommerce Wishlist Vulnerability Affects 100K+ Sites

• Vulnerability

Unpatched & Critical (CVSS 10): TI WooCommerce Wishlist Vulnerability Affects 100K+ Sites

Do Son May 27, 2025 0

Researchers have discovered a critical security vulnerability in the TI WooCommerce Wishlist plugin, a widely-used tool that...

Read More Read more about Unpatched & Critical (CVSS 10): TI WooCommerce Wishlist Vulnerability Affects 100K+ Sites

SAP NetWeaver RCE: Zero-Day Allows File Uploads, Qilin Ransomware Connection

• Vulnerability

SAP NetWeaver RCE: Zero-Day Allows File Uploads, Qilin Ransomware Connection

Do Son May 20, 2025 0

In a recent revelation, OP Innovate has uncovered early evidence of real-world exploitation of CVE-2025-31324 (CVSS 10),...

Read More Read more about SAP NetWeaver RCE: Zero-Day Allows File Uploads, Qilin Ransomware Connection

82,000+ WordPress Sites at Risk: TheGem Theme Vulnerabilities Allow Full Site Takeover

• Vulnerability

82,000+ WordPress Sites at Risk: TheGem Theme Vulnerabilities Allow Full Site Takeover

Do Son May 14, 2025 0

In a recent disclosure by Wordfence, two serious vulnerabilities have been discovered in TheGem, a popular premium...

Read More Read more about 82,000+ WordPress Sites at Risk: TheGem Theme Vulnerabilities Allow Full Site Takeover

Critical IBM Cognos Analytics Vulnerabilities Demand Urgent Patching

• Vulnerability

Critical IBM Cognos Analytics Vulnerabilities Demand Urgent Patching

Do Son May 6, 2025 0

IBM has released security updates to address two critical vulnerabilities affecting its flagship business intelligence platform, IBM...

Read More Read more about Critical IBM Cognos Analytics Vulnerabilities Demand Urgent Patching

Kibana Code Injection Vulnerability: Prototype Pollution Threat (CVE-2024-12556)

• Vulnerability

Kibana Code Injection Vulnerability: Prototype Pollution Threat (CVE-2024-12556)

Do Son April 9, 2025 0

A newly disclosed vulnerability in Kibana, the popular open-source data visualization front-end for Elasticsearch, has been rated...

Read More Read more about Kibana Code Injection Vulnerability: Prototype Pollution Threat (CVE-2024-12556)