CVE-2024-34102 : Thousands of Magento Stores at Risk
A new critical security vulnerability dubbed “CosmicSting” (CVE-2024-34102) has been recently discovered. The new security flow might jeopardizing millions of online web stores that are [more…]
Tag: Vulnerabilities
FUJITSU Software Fixes Multiple Critical Vulnerabilities
FUJITSU Software has released security patches to fix multiple critical vulnerabilities in their ID Link Manager and TIME CREATOR products. These vulnerabilities, if exploited, could [more…]
Critical VMware vCenter Server Vulnerabilities Patched
Broadcom has issued security fixes for VMware vCenter Server software products, to fix several vulnerabilities of critical and high severity. The security fixes, released today, [more…]
POC Released for Veeam Authentication Bypass CVE-2024-29849
Recently, a critical vulnerability has been discovered in Veeam Backup Enterprise Manager, a popular backup solution for managing backups across various environments. This vulnerability, identified [more…]
Exploits Out: PHP RCE Flaw CVE-2024-4577
A new critical remote code execution (RCE) vulnerability has been discovered in PHP, affecting all versions affects all PHP versions PHP since 5.x that are [more…]
Operation MidnightEclipse: Active Exploiting Campaigns Target Palo Alto’s CVE-2024-3400 Vulnerability
Palo Alto Networks has disclosed a critical remote code execution (RCE) vulnerability (CVE-2024-3400) impacting PAN-OS firewalls. This vulnerability affects specific PAN-OS versions and requires a [more…]
Critical Vulnerabilities Discovered in MasterStudy LMS Plugin Up to Version 3.3.3
Multiple critical vulnerabilities were discovered in a popular WordPress plugin MasterStudy LMS, that has over 10,000 active installations. The reported vulnerabilities, if exploited, could allow [more…]
Command Injection Vulnerability Puts Thousands of D-Link NAS at Risk
Security researchers have uncovered a critical vulnerability in multiple D-Link NAS (Network Attached Storage) devices that could allow attackers to execute arbitrary commands and gain [more…]
Unauthenticated SQL Injection Vulnerability Patched in Popular LayerSlider WordPress Plugin
Wordfence, recently disclosed and helped patch a critical vulnerability in the popular LayerSlider WordPress plugin. This vulnerability, an unauthenticated SQL injection flaw, could potentially allow [more…]
Major Security Flaw Discovered in Popular WordPress WP-Members Membership Plugin
A serious security vulnerability was recently found in WP-Members Membership, a widely-used WordPress plugin for creating membership sites. An unauthenticated stored cross-site scripting (XSS) vulnerability, [more…]
