Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A serious information disclosure bug existed in the WordPress plugin OptinMonster. Exploiting the vulnerability could…OptinMonster Plugin Bug Potentially Riske…
The CISA recently urged developers to update Discourse versions 2.7.8 and earlier, warning of a critical remote code execution (RCE) vulnerability ( CVE-2021-4…
An update is now available for Red Hat support for Spring Boot. Red Hat Product Security has rated this update as having a security impact of Moderate. A Commo…
Multiple security vulnerabilities have been disclosed in softphone software from Linphone and MicroSIP that could be exploited by an unauthenticated remote adv…
This update addresses CVE-2021-42013. It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path …
It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files …
Two serious security vulnerabilities in OnionShare could expose users' data. OnionShare is a secure communication…Serious Data Exposure Vulnerabilities Spotted…
Bottle could be made to cache malicious requests if it received a specially crafted input.
The container suse/dotnet-sdk was updated. The following patches have been included in this update:
The container suse/dotnet-aspnet was updated. The following patches have been included in this update:
The container suse/dotnet-aspnet was updated. The following patches have been included in this update:
The container suse/dotnet-sdk was updated. The following patches have been included in this update:
An update is now available for Red Hat support for Spring Boot. Red Hat Product Security has rated this update as having a security impact of Important. A Comm…
A security researcher has found how one can exploit the Google Play sign-in feature for…Google Play Sign-In Feature Allows Spying On Other Users' Location on L…
New vulnerabilities have been discovered in Fortress S03 Wi-Fi Home Security System that could be potentially abused by a malicious party to gain unauthorized …
Simple Mail Transfer Protocol or SMTP has easily exploitable security loopholes. Email routing protocols were designed in a time when cryptographic technology …
Numerous critical security vulnerabilities riddled the file manager plugin elFinder. Exploiting these bugs could allow…Multiple Vulnerabilities Spotted In elFi…
A serious vulnerability in the SEOPress plugin posed a threat to thousands of WordPress websites.…SEOPress WordPress Plugin Vulnerability Potentially Risked Ov…
A potential security flaw was found on xscreensaver 5.45 which may cause buffer overflow or crash xscreensaver daemon. This vulnerability was assigned as CVE-2…
Realtek has recently addressed serious security issues in its SDK within numerous routers. Exploiting these…Realtek SDK Bugs Make Various IoT Devices Vulnerabl…
Some serious security vulnerabilities exist in the web hosting platform cPanel & WHM allowing for…Numerous Vulnerabilities Spotted In cPanel and WHM Web Hostin…
Lukas Euler discovered a path traversal vulnerability in commons-io, a Java library for common useful IO related classes. When invoking the method FileNameUtil…
This week, Microsoft has rolled out its monthly Patch Tuesday updates for August 2021. It…Microsoft August Patch Tuesday Updates Fix PetiPotam, PrintNightmare,…
It looks like the Print Spooler fiasco continues as more bugs surface online, triggering different…New Windows Print Spooler Zero-Day Bug Triggers Remote Attac…
