Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attac…
Researchers from Qualys recently revealed critical vulnerabilities in the Linux utility needrestart . This tool is an indispensable resource for administrators…
CUPS, or the Common Unix Printing System , is an open-source printing system widely utilized on Unix-like operating systems such as Linux, BSDs, and macOS. CUP…
cups-filters security update
SolarWinds has released fixes to address two security flaws in its Access Rights Manager (ARM) software, including a critical vulnerability that could result i…
fence-agents security update
Google Chrome, a widely used web browser, serves millions of internet users by connecting them to the online world. Unfortunately, severe vulnerabilities can o…
bubblewrap and flatpak security update
python3.12-setuptools security update
Multiple threat actors have been observed exploiting a recently disclosed security flaw in PHP to deliver remote access trojans, cryptocurrency miners, and dis…
A vulnerability has been discovered in RDoc, which can lead to execution of arbitrary code.
A vulnerability has been discovered in Commons-BeanUtils, which could lead to execution of arbitrary code.
It was discovered that ClamAV incorrectly handled parsing HFS+ files ( CVE-2023-20197 ). This bug is easy to exploit and poses a severe threat to the availabil…
Security vulnerabilities discovered in Honda's e-commerce platform could have been exploited to gain unrestricted access to sensitive dealer information."Broke…
VMware hasreleasedsecurity updates to fix a trio of flaws in Aria Operations for Networks that could result in information disclosure and remote code execution…
It was discovered that Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1 incorrectly handled uploading multiple files using one form field (CVE-…
Several out of bounds memory access and buffer overflows were fixed in xrdp, an open source project which provides a graphical login to remote machines using M…
Three different security flaws have been disclosed in American Megatrends (AMI) MegaRACBaseboard Management Controller (BMC) software that could lead to remote…
Samba this week released patches for an integer overflow vulnerability that could potentially lead to arbitrary code execution.
The syscall.Faccessat function checks whether the calling process can access a file. Faccessat contains a bug where it checks a file's group permission bits if…
Remote arbitrary code execution related to dsi_stream_receive(). (CVE-2021-31439) Remote arbitrary code execution related to parse_entries(). (CVE-2022-23121) …
Romanian cybersecurity technology company Bitdefender on Monday revealed that attempts are being made to target Windows machines with a novel ransomware family…
Multiple unpatched security vulnerabilities have been disclosed in Mitsubishi safety programmable logic controllers (PLCs) that could be exploited by an advers…
An unidentified threat actor has been exploiting a now-patched zero-day flaw in Internet Explorer browser to deliver a fully-featured VBA-based remote access t…
