Brandon Rothel from QED Secure Solutions has found that the VAPIX API tcptest.cgi did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploi ...
Continue ReadingFebruary 05, 2024
The remote host is affected by the vulnerability described in GLSA-202402-08 (OpenSSL: Multiple Vulnerabilities) OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() functi ...
Continue ReadingFebruary 04, 2024
The remote host is affected by the vulnerability described in GLSA-202402-08 (OpenSSL: Multiple Vulnerabilities) OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() functi ...
Continue ReadingFebruary 04, 2024
The remote host is affected by the vulnerability described in GLSA-202402-08 (OpenSSL: Multiple Vulnerabilities) OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() functi ...
Continue ReadingFebruary 04, 2024
The remote host is affected by the vulnerability described in GLSA-202402-08 (OpenSSL: Multiple Vulnerabilities) OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() functi ...
Continue ReadingFebruary 04, 2024
Bref enable serverless PHP on AWS Lambda. When Bref is used in combination with an API Gateway with the v2 format, it does not handle multiple values headers. If PHP generates a response with two head ...
Continue ReadingFebruary 04, 2024
Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is built FROM scratch. Also, changes to ...
Continue ReadingFebruary 03, 2024
The Anonymous Restricted Content plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.6.2. This is due to insufficient restrictions through the REST API ...
Continue ReadingFebruary 03, 2024
Back to Main