Author: admin
HomeDescriptionAn improper authorization vulnerability in HCL BigFix WebUI allows an authenticated user without Master Operator privileges to access internal data…
Up until version 6.49.8 (July 20, 2023), MikroTik RouterOS Long-term was vulnerable to CVE-2023-30799. Remote and authenticated attackers can use…
HomeDescriptionA missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information…
For the oldstable distribution (bookworm), these problems have been fixedin version 8.2.31-1~deb12u1.We recommend that you upgrade your php8.2 packages.For the…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. federal agencies four days to secure their networks against…
<p>A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain…
HomeDescriptionThe LatePoint plugin for WordPress is vulnerable to Account Takeover via Weak Password Recovery Mechanism in the unauthenticated guest booking…
The attack on the Trellix source code repository disclosed last week has been claimed by the RansomHouse threat group, which…
HomeDescriptionGibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphing https://github.com/GibbonEdu/core/blob/c431e25fdc874adece5d2dc7e408e9aa2d1abadb/modules/Tracking/graphing.php#L145 feature. Successful exploitation…
<p>SENTRON Powermanager and Desigo CC devices are not affected by a remote code execution vulnerability in Apache Tomcat that can…