Cyber

Apple has released updates to address a critical type confusion vulnerability in WebKit, affecting various products and potentially leading to arbitrary code execution.

Read the briefing

A critical path traversal vulnerability has been identified in the D-Link DIR-859 router, affecting unsupported firmware versions.

Read the briefing

A significant template injection vulnerability has been identified in older versions of Atlassian Confluence Data Center and Server, allowing unauthenticated remote code execution.

Read the briefing

A significant vulnerability in GitLab Community and Enterprise Editions allows password reset emails to be sent to unverified email addresses, impacting user security.

Read the briefing

A command injection vulnerability has been identified in Ivanti Connect Secure and Policy Secure, potentially allowing code execution by authenticated administrators.

Read the briefing

A command injection vulnerability has been identified in tj-actions/changed-files, allowing potential execution of arbitrary code through manipulated filenames.

Read the briefing

Apple has released updates to address a critical memory corruption vulnerability that could allow attackers to bypass Pointer Authentication in several of its products.

Read the briefing

A critical vulnerability affecting SQLite3 versions up to 3.43.0 has been identified, necessitating immediate attention from users and administrators.

Read the briefing

A use-after-free vulnerability in the Linux kernel's netfilter component has been identified, allowing for potential local privilege escalation.

Read the briefing

A critical vulnerability has been identified in Spreadsheet::ParseExcel, allowing for arbitrary code execution due to improper input validation.

Read the briefing

A heap buffer overflow vulnerability has been identified in Google Chromium's WebRTC, potentially allowing remote exploitation through crafted HTML.

Read the briefing

A segmentation fault vulnerability has been identified in NCurse v6.4-20230418, potentially impacting system stability and performance.

Read the briefing