Vulnerability

Chrome Vulnerability Let Attackers Execute Arbitrary Code Remotely

The stable channel for desktops has been updated to version 128.0.6613.119/.120 for Windows and Mac, and 128.0.6613.119 for Linux. This…

4 months ago

Critical Vulnerability in Perl Module Installer Let Attackers Intercept Traffic

A critical vulnerability has been identified in App::cpanminus (cpanm), a widely used tool for downloading and installing Perl modules. This…

4 months ago

Microsoft Copilot Prompt Injection Vulnerability Let Hackers Exfiltrate Sensitive Data

A security researcher revealed a critical vulnerability in Microsoft Copilot, a tool integrated into Microsoft 365, which allowed hackers to…

5 months ago

News Chrome 0-Day Vulnerability (CVE-2024-7965) Actively Exploited in the Wild

The Chrome team announced that Chrome 128 has been promoted to the stable channel for Windows, Mac, and Linux. This…

5 months ago

Vesra File Type Upload Vulnerability Lets Attackers Gain Sys-Admin Access from MSP

A critical vulnerability has been identified in Versa Director, a vital component of the company's SD-WAN solution. The vulnerability, officially…

5 months ago

Chrome Zero-day Vulnerability Actively Exploited in the Wild

Google has announced the release of Chrome 128 to the stable channel for Windows, Mac, and Linux. This update, Chrome…

5 months ago

Progress WhatsUp Gold Vulnerabilities Let Attackers Inject SQL Commands

The Progress WhatsUp Gold team confirmed the existence of critical vulnerabilities in all versions of their software released before 2024.0.0.…

5 months ago

Dell Power Manager Privilege Escalation Vulnerability

Dell Technologies has issued a critical security update for its Dell Power Manager software following the discovery of a significant…

5 months ago

Critical Flaw in LiteSpeed Cache WordPress Plugin Exposes Millions of Websites to Attack

The Researcher team has identified and patched a critical privilege escalation vulnerability in the LiteSpeed Cache plugin. This plugin, installed…

5 months ago

Unauthenticated RCE in WordPress Plugin Exposes 100,000 WordPress Sites

A critical vulnerability has been discovered in the GiveWP plugin, a popular WordPress donation and fundraising platform. This vulnerability, CVE-2024-5932,…

5 months ago