Researcher Demonstrated On How Attacker Can Gain Full Web Admin Access With XSS
A cybersecurity researcher has unveiled an unexpected discovery that demonstrates how a simple Cross-Site Scripting (XSS) vulnerability can be leveraged to gain full administrative...
Qlik Sense Enterprise For Windows Vulnerability Let Attackers Execute Remote Code
A critical security vulnerability has been discovered in Qlik Sense Enterprise for Windows, potentially allowing attackers to execute remote code on affected systems.
The issue,...
%20in%20IBM%20Db2.webp?w=324&resize=324,235&ssl=1 "Critical Vulnerability (CVE-2024-37071) in IBM Db2 Affects Linux and UNIX Platforms")
Critical Vulnerability (CVE-2024-37071) in IBM Db2 Affects Linux and UNIX Platforms
IBM has recently disclosed a security vulnerability (CVE-2024-37071) affecting its Db2 database software for Linux and UNIX platforms.
Under certain circumstances, an authenticated user...
Multiple QNAP Vulnerabilities Let Remote Attackers To Compromise The System Remotely
QNAP Systems, a leading provider of network-attached storage (NAS) solutions, has disclosed multiple critical vulnerabilities affecting its QTS and QuTS hero operating systems.
The security...
Rockwell Automation Vulnerabilities Let Attackers Execute Remote Code
Rockwell Automation, a leading provider of industrial automation solutions, has disclosed multiple critical vulnerabilities in its Arena software that could allow attackers to execute...
WordPress Gutenberg Editor Vulnerability Let Attackers Inject Malicious Scripts
A newly disclosed vulnerability in the Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress has raised concerns among website...
HCL DevOps Deploy & Launch Vulnerable To HTML Injection Attacks
A recently disclosed vulnerability in HCL Software's DevOps Deploy and Launch platforms has raised security concerns.
Identified as CVE-2024-42195, this vulnerability allows attackers to embed...
Mitel MiCollab Zero-Day Vulnerability Let Attackers Bypass Authentication
Security researchers have uncovered a critical zero-day vulnerability in Mitel MiCollab, a popular unified communications solution.
The flaw, which remains unpatched, allows attackers to perform...
CISA Warns Of CyberPanel, North Grid, ProjectSend & Zyxel Firewalls Flaws Exploited In Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert regarding four critical vulnerabilities actively exploited in the wild, urging organizations to...
SolarWinds Platform XSS Vulnerability Let Attackers Inject Malicious Code
A critical security vulnerability has been recently disclosed by SolarWinds in its Platform product, a major player in IT management software.
The flaw, identified as...
Recent Posts
CyTwist Launches Advanced Security Solution to identify AI-Driven Cyber Threats in...
CyTwist, a leader in advanced next-generation threat detection solutions, has launched its patented detection engine to combat the insidious rise of AI-generated malware.
The cybersecurity...