|
You are here |
blog.codydmartin.com | ||
| | | | |
neroteam.com
|
|
| | | | | Vulnerabilities of F-logic DataCube3, including unauthenticated SQL Injection, unrestricted file upload, improper access control, and XSS. | |
| | | | |
www.thexero.co.uk
|
|
| | | | | Vulnerabilities within publicly available WordPress extensions are regularly disclosed on the internet. During some downtime from active engagements, a persistent Cross-Site scripting issue was found within one of these plugins. | |
| | | | |
swordbytes.com
|
|
| | | | | SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application. | |
| | | | |
blog.talosintelligence.com
|
|
| | | Cisco Talos is aware of the ongoing exploitation of CVE-2025-53770 and CVE-2025-53771 in the wild. These are path traversal vulnerabilities affecting SharePoint Server Subscription Edition, SharePoint Server 2016, and SharePoint Server 2019. | ||