Security
Headlines
HeadlinesLatestCVEs

Tag

#google

phpAnalyzer 2.0.4 Insecure Settings

phpAnalyzer version 2.0.4 appears to leave default credentials installed after installation.

Packet Storm
#vulnerability#windows#google#php#auth#firefox
EasyAnswer 1.0.1 Cross Site Request Forgery

EasyAnswer version 1.0.1 suffers from a cross site request forgery vulnerability.

RHSA-2023:3495: Red Hat Security Advisory: Logging Subsystem 5.7.2 - Red Hat OpenShift security update

Logging Subsystem 5.7.2 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-41723: A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests. * CVE-2023-27539: A denial of service vulnerability was found in rubygem-rack in how it parses headers. A carefully crafted input can cause header parsing to take an unexpe...

An Anti-Porn App Put Him in Jail and His Family Under Surveillance

A court used an app called Covenant Eyes to surveil the family of a man released on bond. Now he’s back in jail, and tech misuse may be to blame.

PhotoSwipe 5.3.7 Arbitrary File Download

PhotoSwipe version 5.3.7 suffers from an arbitrary file download vulnerability.

PES Pro CMS 1.9.7 Add Administrator

PES Pro CMS version 1.9.7 suffers from an add administrator vulnerability.

KesionCMS X 9.5 Add Administrator

KesionCMS X version 9.5 suffers from an unauthenticated add administrator vulnerability.

Pannres-Idence CMS 7.3 Cross Site Request Forgery

Pannres-Idence CMS version 7.3 suffers from a cross site request forgery vulnerability.