Vulnerabilities Cisco Says PoC Exploit Available for Newly Patched IMC Vulnerability Cisco patches a high-severity Integrated Management Controller vulnerability for which PoC exploit code is available. Ionut Arghire1 day ago
Vulnerabilities Delinea Scrambles to Patch Critical Flaw After Failed Responsible Disclosure Attempt PAM company Delinea over the weekend rushed to patch a critical authentication bypass vulnerability after it apparently ignored the researcher who found the flaw. Eduard Kovacs3 days ago
Vulnerabilities Juniper Networks Publishes Dozens of New Security Advisories Juniper Networks patches dozens of vulnerabilities in Junos OS, Junos OS Evolved, and other products. Ionut Arghire4 days ago
Application Security ‘BatBadBut’ Command Injection Vulnerability Affects Multiple Programming Languages A critical vulnerability in multiple programming languages allows attackers to inject commands in Windows applications. Ionut ArghireApril 12, 2024
Vulnerabilities Critical Vulnerability in Progress Flowmon Allows Remote Access to Systems A critical OS command injection in Progress Flowmon can be exploited to gain remote, unauthenticated access to the system. Ionut ArghireApril 4, 2024
Vulnerabilities Critical Vulnerability Found in LayerSlider Plugin Installed on a Million WordPress Sites A critical SQL injection vulnerability in the LayerSlider WordPress plugin allows attackers to extract sensitive information. Ionut ArghireApril 3, 2024
Vulnerabilities 26 Security Issues Patched in TeamCity JetBrains patches 26 security issues in TeamCity and takes steps to avoid malicious exploitation of vulnerabilities. Eduard KovacsMarch 29, 2024
Vulnerabilities Microsoft Patches Xbox Vulnerability Following Public Disclosure Microsoft patches Xbox Gaming Services vulnerability CVE-2024-28916 after initially saying it was not a security issue. Eduard KovacsMarch 21, 2024
Vulnerabilities Atlassian Patches Critical Vulnerability in Bamboo Data Center and Server Atlassian releases patches for two dozen vulnerabilities, including a critical-severity bug in Bamboo Data Center and Server. Ionut ArghireMarch 20, 2024
Vulnerabilities Chrome 123, Firefox 124 Patch Serious Vulnerabilities Chrome and Firefox security updates released on Tuesday resolve a critical-severity and multiple high-severity vulnerabilities. Ionut ArghireMarch 20, 2024
Vulnerabilities Pentagon Received Over 50,000 Vulnerability Reports Since 2016 Since 2016, the US DoD has received over 50,000 submissions through its vulnerability disclosure program. Ionut ArghireMarch 18, 2024
Vulnerabilities PoC Published for Critical Fortra Code Execution Vulnerability A critical directory traversal vulnerability in Fortra FileCatalyst Workflow could lead to remote code execution. Ionut ArghireMarch 18, 2024