Onyxia remote code execution (RCE) vulnerability [CVE-2024-56333]
Onyxia is a web app that aims at being the glue between multiple open source backend technologies to provide a
Read MoreSecurity Vulnerabilities
The latest Security Vulnerabilities
Navidrome Plaintext Storage of JWT Secret in navidrome.db vulnerability [CVE-2024-56362]
CVE number – CVE-2024-56362 Navidrome is an open source web-based music collection server and streamer. Navidrome stores the JWT secret
Read More
APTRS (Automated Penetration Testing Reporting System) Server Side Template Injection Vulnerability [CVE-2024-56363]
APTRS (Automated Penetration Testing Reporting System) is a Python and Django-based automated reporting tool designed for penetration testers and security
Read More
Sophos issues hotfixes for three critical flaws in XG firewall
Sophos has issued hotfixes to resolve three security vulnerabilities in its Firewall products. These flaws, under certain conditions, could enable
Read More
Webmin CGI Command Injection Remote Code Execution Vulnerability [CVE-2024-12828]
CVE number = CVE-2024-12828 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is
Read More
Linux Kernel ksmbd TCP Connection Memory Exhaustion Denial-of-Service Vulnerability [CVE-2024-50285]
CVE number = CVE-2024-50285 This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of the Linux
Read More
Ivanti Avalanche FileStoreConfig Unrestricted File Upload Remote Code Execution Vulnerability [CVE-2024-37373]
CVE number = CVE-2024-37373 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication
Read More
Dell Avamar Fitness Analyzer API SQL Injection Information Disclosure Vulnerability [CVE-2024-47977]
Dell Avamar Fitness Analyzer API SQL Injection Information Disclosure Vulnerability – CVE number CVE-2024-47977 has been assigned to this. This
Read MorePlayloom Engine Data Storage Vulnerability [CVE-2024-55946]
CVE number = CVE-2024-55946 Playloom Engine is an open-source, high-performance game development engine. Engine Beta v0.0.1 has a security vulnerability
Read More
Mullvad VPN client out of band write vulnerability [CVE-2024-55884]
CVE number – CVE-2024-55884 In the Mullvad VPN client 2024.6 (Desktop), 2024.8 (iOS), and 2024.8-beta1 (Android), the exception-handling alternate stack
Read More