Tag: cloudSecurity

  • Vulnerability Watch No55

    FFmpeg DASH Demuxer Vulnerable to Negative Array Index • FFmpeg AV1 RTP Packetizer Out-of-Bounds Read • FFmpeg VC-2 RTP Packetizer Heap Overflow • Critical FFmpeg RIST Reader Heap Buffer Overflow • FFmpeg MPEG-PS Muxer Stack Buffer Overflow…

  • Vulnerability Watch No42

    UpSnap Fresh Installs Exposed to Unauthenticated Root RCE • Cedar Express Middleware Flaw Can Bypass Route Authorization • MRBS Vulnerable to Server-Side Request Forgery • OpenStack Designate Flaw Enables Cross-Tenant DNS Hijacking • UpSnap Device Fields Allow Authenticated Command Injection…

  • Topics Everyone Is Talking About No399

    Stripe Just Wants a Number • Google fixed more Chrome bugs in June than over the past two years, thanks to AI • The End of an Era • DeepSeek V4 Flash 0731 Intelligence, Performance and Price Analysis • Elevators…

  • Vulnerability Watch No16

    NoteGen Shell Permissions Enable Full Remote Code Execution • Unsanitized AI Responses Expose NoteGen Users to XSS • WordPress Membership Flaw Lets Visitors Claim Elevated Roles • Critical SQL Injection Hits WordPress Issue-Tracking Plugin • CAFEHAUS API Bug Enables Administrator Account Takeover…

  • Vulnerability Watch No15

    Pre-Auth Heap Overflow in libssh2 Clients • libssh2 Bounds Check Bug Leaks Memory • Stored XSS Hits Loytec OPC XML-DA • Loytec Privilege Management Flaw Enables Password Resets • Critical Symlink Attack Leads to Root on Loytec…

  • Vulnerability Watch No14

    Exim .forward Flaw Enables Privilege Escalation • Exim Directory Traversal Leads to Privilege Gain • OpenStack Ironic Agent Exposed to Code Execution • WordPress Wpify Woo Plugin Allows Admin Takeover • Azure DNS Authorization Flaw Rated Critical…

  • Vulnerability Watch No13

    Critical Joomla Easy Store SQL Injection Exposes Databases • Joomla Easy Store Flaw Reveals Other Customers Orders • Joomla Easy Store Payment Forgery Bug Enables Order Manipulation • Proxygen HTTP2 Bug Can Trigger Memory Exhaustion DoS • CyberPanel Backup IDOR Lets Users Access Other Tenants…

  • Vulnerability Watch No9

    PraisonAI Workspace Isolation Flaw Allows Cross-Tenant Access • PraisonAI Platform JWT Secret Flaw Enables Account Takeover • PraisonAI Platform Member Removal Authorization Bypass • PraisonAI Platform Critical Workspace Access Control Failure • PraisonAI Dependency API IDOR Exposes Workspace Boundaries…