Vulnerability

Mirai Botnet Attacking Apache OFBiz Directory Traversal Vulnerability

The notorious Mirai botnet has been observed exploiting a recently disclosed directory traversal vulnerability in Apache OFBiz. This Java-based framework,…

5 months ago

Leaked Wallpaper Vulnerability Exposes Windows Users to Privilege Escalation Attacks

A newly discovered vulnerability in Windows File Explorer has raised alarms within the cybersecurity community. Identified as CVE-2024-38100, this security…

5 months ago

Hackers Actively Exploiting WordPress Plugin Arbitrary File Upload Vulnerability

Hackers have been actively exploiting a critical vulnerability in the WordPress plugin 简数采集器 (Keydatas). The vulnerability, CVE-2024-6220, allows unauthenticated threat…

5 months ago

OAuth Vulnerability Exposes 1 Million Websites To XSS Attacks

Despite robust defenses, Cross-Site Scripting (XSS) remains a persistent web vulnerability, as its exploitation has become increasingly challenging. A recent…

5 months ago

Chrome Security Update: Patch for Critical Flaw that Leads to Exploitation

Google has rolled out a new security update for its Chrome browser, addressing several critical vulnerabilities. The update on the…

5 months ago

Progress Patched New MOVEit File Transfer Flaw that Allows Privilege Escalation

Progress, the company behind MOVEit Transfer, has issued a critical security alert addressing a newly discovered vulnerability in its MOVEit…

5 months ago

RaspAP Flaw Let Hackers Escalate Privileges with Raspberry Pi Devices

A critical local privilege escalation vulnerability has been discovered in RaspAP, an open-source project designed to transform Raspberry Pi devices…

6 months ago

Cisco Patches the Products Impacted by RADIUS Protocol Vulnerability

Cisco has issued patches for multiple products affected by a critical vulnerability in the RADIUS protocol. The vulnerability, identified as…

6 months ago

Google Chrome 127 Released with a fix for 24 Security Vulnerabilities

Google has unveiled the latest version of its Chrome browser, Chrome 127, which is now available on the Stable channel.…

6 months ago

SonicOS IPSec VPN Vulnerability Let Attackers Cause Dos Condition

SonicWall has disclosed a critical heap-based buffer overflow vulnerability in its SonicOS IPSec VPN. This flaw, identified as CVE-2024-40764, can…

6 months ago