-
Vulnerability Watch No71
SPIP Flaw Enables Remote Code Execution at Critical Severity • SPIP Authorization Bypass Allows Administrator Account Takeover • SPIP Sitemap SQL Injection Exposes Database Secrets • Laci Synchroni OAuth Bug Enables User Impersonation • MoguBlog Authorization Flaw Allows Comment Deletion…
-
Vulnerability Watch No21
Hardcoded Backdoor Exposes WordPress Sites to Admin Takeover • Easy Digital Downloads Upload Flaw Could Enable Code Execution • WooCommerce Wholesale Plugin Lets Authors Become Administrators • Netty OCSP Race Can Leak Data to Revoked Servers • Netty Accepts Replayed Expired OCSP Responses…
-
Vulnerability Watch No10
Critical Unauthenticated RCE in Autel Maxi Charger • WordPress WP Foodbakery File Deletion Flaw Can Lead to RCE • Veeam Software Appliance Privilege Escalation to Root • Netty OCSP Validation Bug Enables Revocation Check Bypass • Netty HTTP2 Memory Leak Can Crash JVM…