Zabbix, a popular open-source IT infrastructure monitoring tool used by organizations worldwide, has been found to contain a critical SQL injection vulnerability (CVE-2024-42327) with a CVSS score of 9.9. This...
In a recent security advisory, Cisco disclosed a high-severity SQL injection vulnerability, designated as CVE-2024-20536 (CVSS 8.8), affecting specific versions of its Nexus Dashboard Fabric Controller (NDFC). This flaw poses...
Centreon, a widely-used open-source monitoring solution, has issued a critical security bulletin addressing multiple SQL injection vulnerabilities in its Centreon Web interface. These vulnerabilities, identified as CVE-2024-32501, CVE-2024-33852, CVE-2024-33853, CVE-2024-33854,...
A critical SQL injection vulnerability, collectively endangering millions of Linux servers worldwide found in the popular open-source server management tool, 1Panel. Identified as CVE-2024-39911, this SQL injection flaw, carries a...
A critical vulnerability has been discovered in the widely-used WordPress plugin, HUSKY – Products Filter Professional for WooCommerce. This security flaw, tracked as CVE-2024-6457 with a CVSS score of 9.8...
A critical SQL Injection vulnerability (CVE-2024-5276) has been discovered in Fortra FileCatalyst Workflow, a popular enterprise file transfer solution. This vulnerability could allow attackers to tamper with application data, potentially...
In a groundbreaking development, researchers at the University of Illinois Urbana-Champaign have demonstrated that teams of AI agents, powered by large language models (LLMs), can successfully exploit zero-day vulnerabilities. These...
WordPress users who have installed the popular HTML5 Video Player plugin are urged to take immediate action following the discovery of a critical security vulnerability. The flaw, tracked as CVE-2024-5522,...
A new critical-severity security vulnerability, tracked as CVE-2024-22120, has been discovered in Zabbix, the popular open-source IT infrastructure monitoring tool. With a CVSS score of 9.1, this time-based SQL injection...
QNAP has issued a critical security advisory regarding multiple vulnerabilities impacting their NAS software solutions. These vulnerabilities, if left unaddressed, could provide attackers with various avenues for compromising affected devices....
Shopware, an open-source ecommerce platform that helps businesses of all sizes create and manage their online stores, recently found itself in the cybersecurity spotlight. A critical flaw, identified as CVE-2024-22406...
In the world of WordPress themes, Porto has carved out a reputable niche for itself, known for its multipurpose functionality and WooCommerce integration. With over 95,000 active installations, it’s a...
In the fast-paced world of Internet communications, staying ahead of security threats is not just a choice but a necessity. Recently, 3CX, a renowned VoIP communications company, has issued a...
Recently, Progress Software’s MOVEit Transfer application has been spotlighted due to newly uncovered SQL injection vulnerabilities, threatening the integrity of this popular file transfer solution. This security issue, known as...
Web Exploitation / WebApp PenTest
by do son · Published June 19, 2019 · Last modified November 4, 2024
A web application firewall (or WAF) filters, monitors, and blocks HTTP traffic to and from a web application. A WAF is differentiated from a regular firewall in that a WAF is able to filter the content of specific...
Support Securityonline.info site. Thanks!
