Collaborate Disseminate
Vanilla Forums software suffers from vulnerabilities that could let an attacker gain access to user accounts, carry out web-cache poisoning attacks, and in some instances, execute arbitrary code. Continue reading Vanilla Forums Software Vulnerable to RCE, Host Header Injection Vulnerability
Vanilla Forums software suffers from vulnerabilities that could let an attacker gain access to user accounts, carry out web-cache poisoning attacks, and in some instances, execute arbitrary code. Continue reading Vanilla Forums Software Vulnerable to RCE, Host Header Injection Vulnerability
A zero day vulnerability exists in WordPress Core that in some instances, could allow an attacker to reset a user’s password and in turn, gain access to their account. Continue reading Unpatched WordPress Password Reset Vulnerability Lingers
SquirrelMail suffers from a remote code execution vulnerability that could let attackers execute arbitrary commands on the target and compromise the remote system. Continue reading No Fix for SquirrelMail Remote Code Execution Vulnerability
A new WordPress update, pushed this week, resolves eight security issues, including a handful of XSS and CSRF bugs. Continue reading WordPress 4.7.1 Fixes CSRF, XSS, PHPMailer Vulnerabilities
Critical remote code execution vulnerabilities in PHPMailer and SwiftMailer, libraries used to send emails via PHP, were patched this week. Continue reading PHPMailer, SwiftMailer Updates Resolve Critical Remote Code Execution Vulnerabilities
Nagios Core has been updated to take care of two critical vulnerabilities that can be pinned together to attack servers hosting the open source IT infrastructure monitoring software. Continue reading Nagios Core Patches Root, RCE Vulnerabilities
Critical vulnerabilities in MySQL and database servers MariaDB and PerconaDB can lead to arbitrary code execution, root privilege escalation, and server compromise. Continue reading Critical MySQL Vulnerabilities Can Lead to Server Compromise
A researcher has disclosed some details and a limited proof-of-concept for a critical MySQL vulnerability. The flaw has been patched in MariaDB and PerconaDB. Continue reading Critical MySQL Vulnerability Disclosed
Adobe pushed hotfixes to ColdFusion 11 and 10 installations addressing a XXE vulnerability that can be exploited processing OOXML documents. Continue reading Patched ColdFusion Flaw Exposes Applications to Attack