Affected versions of this crate called the RocksDB C API `rocksdb_open_column_families_with_ttl()` with a pointer to a single integer TTL value, but one TTL value for each column family is expected. T ...
Continue ReadingAugust 12, 2022
Users of Apples Instagram and Facebook iOS apps are being warned that both use an in-app browser that allows parent company Meta to track every single tap users make with external websites acces ...
Continue ReadingAugust 12, 2022
Adobe Experience Manager Core Components version 2.20.6 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL re ...
Continue ReadingAugust 12, 2022
Hello Team @top_echelon_software Information: Using REST API, we can see all the WordPress users/author with some of their information. Step To Reproduce: You can get user info by entering below url ...
Continue ReadingAugust 11, 2022
The `xml.etree.ElementTree` module that mofh used up until version `1.0.1` implements a simple and efficient API for parsing and creating XML data. But it makes the application vulnerable to: - [Billi ...
Continue ReadingAugust 11, 2022
The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input.Read More ...
Continue ReadingAugust 11, 2022
The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input.Read More ...
Continue ReadingAugust 11, 2022
![](https://krebsonsecurity.com/wp-content/uploads/2022/08/mysterydb.png) Image: Shutterstock. A cybersecurity firm says it has intercepted a large, unique stolen data set containing the names, addres ...
Continue ReadingAugust 11, 2022
Back to Main