Do Son Designated as CVE-2024-35204, this vulnerability has been assigned a CVSS score of 8.4, indicating its high severity
Vulnerability
A critical vulnerability (CVE-2024-3273) discovered in multiple end-of-life D-Link network-attached storage (NAS) devices
This RCE vulnerability was facilitated through the use of Cog, Replicate’s proprietary format for containerizing AI models.
The flaw, designated CVE-2024-4671, is a "use after free" bug located within the browser's "Visuals" component.
CVE-2024-4439 (CVSS score of 7.2) pertains to a stored Cross-Site Scripting (XSS) flaw in the WordPress Core.
CVE-2024-32971 vulnerability with a CVSS score of 9.1, has been discovered in versions 1.44.0 and 1.45.0 of the Apollo Router
The vulnerability, now patched, resided in Telegram's "Mini App" system. These mini web applications, designed to run within Telegram
Apache HugeGraph has recently addressed several critical security vulnerabilities that posed significant risks to its users
This vulnerability, found in the TP-Link Archer AX21's web management interface, allows hackers to inject malicious code without needing the router's password
A serious security vulnerability (CVE-2024-32019) has been discovered in Netdata, a widely used open-source monitoring and troubleshooting tool
Dell has released a critical security patch addressing a severe vulnerability (CVE-2024-0172) in the BIOS software used on a wide range
ConnectWise issued a critical security advisory, exposing two gaping security vulnerabilities in its popular ScreenConnect software
There is no publicly available PoC exploit for CVE-2024-21833. Evidence from underground forums indicates active exploitation of this flaw
Apple has recently confronted a formidable challenge: a zero-day vulnerability within their groundbreaking product, the Apple Vision Pro
Dubbed CVE-2023-6933, this security flaw has been classified with a critical severity rating of 9.8 out of 10
As of January 17, 2024, VMware has reported evidence that the CVE-2023-34048 RCE bug is currently being exploited in attacks
Valentin-Metz unveiled a critical buffer overflow vulnerability in Factorio. This flaw, lurking within the game's custom-engine C++ code
The vulnerability, identified as CVE-2024-21633 (CVSS 7.8), exists in the apktool, a component of the MobSF.
PoC code has been released for iOS and macOS vulnerability, CVE-2023-41974, that can be chained to take full control of a mobile device
A moderate severity flaw, this vulnerability lurked in the shadows of Apache OpenOffice and LibreOffice, where embedded content
CVE-2023-6817, poses a severe threat with a CVSS score of 7.8, categorizing it as a high-severity issue, also PoC exploit published.
The recently sensationalized Bitcoin inscriptions have been reported as a cybersecurity vulnerability, designated as CVE-2023-50428