Critical Authentication Bypass Flaw in VMware Cloud Director Appliance

VMware flaw carries a CVSS severity-score of 9.8/10 and can be exploited to bypass login restrictions when authenticating on certain ports.
The post Critical Authentication Bypass Flaw in VMware Cloud Director Appliance appeared first on SecurityWeek.
Continue reading Critical Authentication Bypass Flaw in VMware Cloud Director Appliance

Cisco Plugs Gaping Hole in Emergency Responder Software

Cisco warns that unauthenticated, remote attackers can log into devices using root account, which has default, static credentials that cannot be changed or deleted.
The post Cisco Plugs Gaping Hole in Emergency Responder Software appeared first on Secu… Continue reading Cisco Plugs Gaping Hole in Emergency Responder Software

Critical WordPress Plugin Vulnerabilities Impact Thousands of Sites

Two critical-severity authentication bypass vulnerabilities in WordPress plugins with tens of thousands of installations.
The post Critical WordPress Plugin Vulnerabilities Impact Thousands of Sites appeared first on SecurityWeek.
Continue reading Critical WordPress Plugin Vulnerabilities Impact Thousands of Sites