-
Vulnerability Watch No40
Velociraptor Permission Bypass Enables Analyst-to-Investigator Escalation • Socket Syscall TOCTOU Race Can Corrupt Kernel Heap Memory • VentraConnect WordPress Login Flaw Enables Administrator Takeover • RHACM Channel Flaw Exposes Cross-Tenant Secrets and ConfigMaps • Multicloud Integrations Flaw Can Force Malicious ArgoCD Synchronization…
-
Vulnerability Watch No19
Xendit Payment Access-Control Flaw Exposes Unauthenticated Attack Surface • Contest Gallery Hit by Unauthenticated XSS Vulnerability • Kali Forms Vulnerable to Unauthenticated Script Injection • BackWPup XSS Flaw Threatens WordPress Administrators • FormCraft SSRF Flaw Could Reach Internal Services…