-
Vulnerability Watch No47
Hard-Coded Credentials Expose LB-LINK X-PRO • SQL Injection Hits SourceCodester Timetabling System • Fastify Multipart Flaw Enables Persistent Disk Exhaustion • Fastify Multipart Bug Can Exhaust Disk and Event Loop • Fastify JWT Key Override Breaks Authorization Boundaries…
-
Vulnerability Watch No46
Unauthenticated Stored XSS Hits Invisible Anti-Spam WordPress Plugin • Cookie Consent Plugin Exposes WordPress Sites to Stored XSS • MaxUpload Flaw Enables Unauthenticated File Upload and Possible RCE • User Session Synchronizer Bug Allows Full WordPress Account Takeover • Propovoice Manager Accounts Can Escalate to WordPress Administrator…
-
Vulnerability Watch No27
H3C NX15 Web API Exposes Dangerous Routine • UTT HiPER 1200GW Hit by Remote Buffer Overflow • UTT HiPER 1250GW TempName Overflow Exposed • UTT HiPER 1250GW 5 GHz Endpoint Overflow • ESAFENET CDG KeyID Parameter Enables SQL Injection…
-
Topics Everyone Is Talking About No228
Stop Telling Us XMPP Should Use JSON • Orion 1.0: A Privacy-First Browser Takes Flight • Google Antigravity Exploit: Prompt Injection Breaches AI Safety • Someone at YouTube Needs Glasses: The Prophecy Has Been Fulfilled • Trillions Spent, Yet Software Projects Keep Failing…