Path traversal

The JSON datasource plugin ( https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ ) is a Grafana Labs maintained plugin f ...

Continue Reading
F5 Networks BIG-IP : BIG-IP iControl REST API vulnerability (K32544615)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.9 / 16.1.4 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K32544615 advisory. Note that Ne ...

Continue Reading
Design/Logic Flaw

When BIG-IP is deployed in high availability (HA) and an iControl REST API token is updated, the change does not sync to the peer device. Note: Software versions which have reached End of Technical ...

Continue Reading
Metabase 0.46.6 – Pre-Auth Remote Code Execution

...Read More ...

Continue Reading
Wednesday February 14 2024 Security Releases

# Thursday February 16 2023 Security Releases By Michael Dawson, 16 Feb 2023 # _(Update 16-February-2023)_ Security releases available Updates are now available for the v19.x, v18.x, v16.x, and v14.x ...

Continue Reading
Important Photon OS Security Update – PHSA-2024-5.0-0206

Updates of ['linux', 'linux-secure', 'linux-rt'] packages of Photon OS have been...Read More ...

Continue Reading
Code injection

A vulnerability has been identified in Polarion ALM (All versions). The REST API endpoints of doorsconnector of the affected product lacks proper authentication. An unauthenticated attacker could acce ...

Continue Reading
Email Validation Bypass And Preventing Sign Up From Email’s Owner

Summary Email validation can easily be bypassed because verify_email_enabled option enable email validation at sign up only. A user changing it's email after signing up (and verifying it) can cha ...

Continue Reading

Back to Main

Subscribe for the latest news: