Chaotic Eclipse, the security researcher behind the recently disclosed Windows flaws, YellowKey and GreenPlasma, has released a proof-of-concept (PoC) for a Windows privilege escalation zero-day flaw ...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added half a dozen security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active ...
ABSTRACT: SQL injection attacks pose a critical threat to web application security, exploiting vulnerabilities to gain access, or modify sensitive data. Traditional rule-based and machine learning ...
description: rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because nodes' passwords are stored by default in cleartext, this vulnerability ...
Chinese cybersecurity firm Sichuan Silence has been sanctioned for exploiting a vulnerability in Sophos firewalls used at critical infrastructure organizations in the U.S. The U.S. has sanctioned ...
Progress Software ships patches for critical-severity flaws in its WS_FTP file transfer software and warns that a pre-authenticated attacker could wreak havoc on the underlying operating system.
Cashing in on the global attack that tapped the MOVEit Transfer SQL injection vulnerability, the Cl0p ransomware group has started listing victims on its leak site. The group earlier gave June 14 as ...
Learn the shocking truth behind the Balada Injector campaign and find out how to protect your organization from this relentless viral invasion. A deadly cyber campaign has been working silently to ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results