Research · Mar 10, 2025
Apache Tomcat Vulnerability Exposes Path Equivalence Risks
A critical vulnerability in Apache Tomcat allows for potential remote code execution and information disclosure, impacting multiple versions of the server software.
Every 24 hours
Tech
Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.
A serious OS command injection vulnerability has been identified in the Edimax IC-7100 IP camera, potentially allowing remote code execution.
VMware ESXi has been identified with a significant arbitrary write vulnerability that could allow attackers to escape the sandbox environment.
Research · Feb 26, 2025
Critical Fix Addressed in Linux Kernel's RXRPC Call Timer
A significant vulnerability in the Linux kernel's RXRPC call timer has been resolved, improving the stability and security of the system.
A significant slab-out-of-bounds vulnerability in the Linux kernel's TLS module has been addressed, enhancing system security against potential exploits.
Research · Feb 20, 2025
Critical Eval Injection Vulnerability Discovered in XWiki Platform
A significant eval injection vulnerability has been identified in the XWiki Platform, allowing unauthorized remote code execution, affecting the security of installations.
An improper access control vulnerability in Microsoft Power Pages has been mitigated, addressing potential unauthorized access risks for users.
A serious heap-based buffer overflow vulnerability has been identified in the Microsoft Windows Ancillary Function Driver for WinSock, posing significant risks for users.
A serious deserialization vulnerability in Wazuh Server could lead to remote code execution, impacting numerous installations and requiring immediate attention from administrators.
A critical SQL injection vulnerability has been identified in Advantive VeraCore, potentially allowing remote attackers to execute arbitrary SQL commands.
A significant vulnerability has been identified in Advantive VeraCore, allowing unauthorized file uploads to unintended directories, posing serious security risks.
A significant vulnerability in the Linux kernel affecting IEEE 802.15.4 network interfaces has been addressed, enhancing system stability and security.