Cyber

GeoVision devices are affected by a serious OS command injection vulnerability, allowing remote attackers to execute arbitrary commands.

Read the briefing

A serious XML External Entity (XXE) vulnerability has been identified in Adobe Commerce and Magento Open Source, potentially allowing arbitrary code execution.

Read the briefing

A significant OS command injection vulnerability has been discovered in specific PHP versions, affecting systems using Apache and PHP-CGI on Windows.

Read the briefing

A directory traversal vulnerability has been identified in SolarWinds Serv-U, potentially exposing sensitive files on affected systems.

Read the briefing

A critical authentication bypass vulnerability has been identified in Progress Telerik Report Server, allowing unauthorized access to restricted functionalities.

Read the briefing

A significant type confusion vulnerability has been identified in Google Chromium V8, potentially allowing remote code execution through malicious HTML content.

Read the briefing

A vulnerability has been discovered in the JAVS Viewer Installer, which contains embedded malicious code that could compromise system integrity.

Read the briefing

A critical vulnerability in the Linux kernel's networking component has been addressed, impacting rule management within the system.

Read the briefing

A high-severity type confusion vulnerability in the V8 engine of Google Chrome has been identified, allowing potential remote code execution through crafted HTML pages.

Read the briefing

A use-after-free vulnerability has been identified in Google Chromium Visuals, potentially impacting multiple web browsers and allowing for remote exploitation.

Read the briefing

A path traversal vulnerability has been discovered in Apache OFBiz, affecting versions prior to 18.12.13, necessitating immediate updates.

Read the briefing

A significant vulnerability in the WireGuard implementation of the Linux kernel has been addressed, enhancing security and performance.

Read the briefing