CVE-2023-20252 : CISCO CATALYST SD-WAN MANAGER SAML API IMPROPER AUTHENTICATION
Description A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an
Best Practices For Protecting Your Online Assets
In today’s digital age, our online presence and assets hold immense value. From personal information to sensitive financial data, it’s
CVE-2023-5129 : Google WebP Libwebp ReadHuffmanCodes Out-of-bounds Write
Description With a specially crafted WebP lossless file, libwebp may write data out of bounds to the heap. The ReadHuffmanCodes()
What Is Magecart? How To Detect And Mitigate Magecart Attacks?
Magecart has emerged as a prominent threat to e-commerce websites, putting both businesses and consumers at risk of data breaches
CVE-2023-4291 : Frauscher Sensortechnik FDS101 For FAdC 1.4.24 Code Injection
Description Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution (RCE)
Top 3 Data Breaches This Week
According to recent news reports, there have been a number of alarming data breaches that have created an urgent situation
CVE-2023-2163 : Linux Kernel 5.4 BPF kernel/bpf/verifier.c backtrack_insn calculation
Description Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe,
What Are Digital Skimmers?
Digital skimmers have become a pervasive threat in the realm of online transactions, posing significant risks to individuals and businesses
CVE-2023-42454 : SQLpage Up To 0.11.0 Database Connection String sqlpage/sqlpage.json Information Disclosure
Description SQLpage is a SQL-only webapp builder. Someone using SQLpage versions prior to 0.11.1, whose SQLpage instance is exposed publicly,
CVE-2023-41349 : Asus RT-AX88U Advanced Open VPN Format String
Description ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An
WAF Logging And Analysis For Continuous Security Enhancement
WAF Logging and Analysis: A Critical Tool for Improving Web Application Security Web application firewalls (WAFs) are an important tool
CVE-2023-42442 : JumpServer Up To 3.5.4/3.6.3 HTTP Response Code Improper Authentication
Description JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version
What Is Credit Card Skimming?
Credit card skimming is a method used by cybercriminals to steal payment card information during transactions and is one among
CVE-2023-4831 : Ncode Ncep Prior 20230914 SQL Injection
Description Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Ncode Ncep allows SQL Injection.This
What Do You Mean By Formjacking? How To Avoid It?
Formjacking is a malicious practice where cybercriminals inject malicious JavaScript code into e-commerce websites to steal users’ payment card details
CVE-2023-38204 : Adobe ColdFusion Deserialization
Description Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of
What Is Broken Function Level Authorization?
Application Programming Interfaces (APIs) play a vital role in modern software development, enabling communication and integration between different systems. However,
CVE-2023-4501 : Micro Focus OpenText Improper Authentication
Description User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer,
Troubleshooting CoreDNS Issues In MicroK8s: A Technical Deep Dive
MicroK8s is a versatile tool for deploying Kubernetes clusters with minimal overhead. However, when dealing with production-like projects or even
CVE-2023-30995 : IBM ASPERA FASPEX 5.0.5 HTTP REQUEST ACCESS CONTROL
Description IBM Aspera Faspex 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP
CVE-2023-30908 : HPE ONEVIEW IMPROPER AUTHENTICATION
Description Potential security vulnerabilities have been identified in Hewlett Packard Enterprise OneView Software. These vulnerabilities could be remotely exploited to
Safeguarding Application Against Massive Attacks
The Rising Threat of Massive Cyberattacks Cyberattacks have increased in complexity and scale, making it imperative for organizations and individuals
CVE-2023-20238 : CISCO BROADWORKS APPLICATION DELIVERY PLATFORM SINGLE SIGN-ON REMOTE CODE EXECUTION
Description A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services
Unveiling The Latest Enhancement In API Security
In today’s digital landscape, APIs have become the backbone of modern software development, enabling seamless integration and data exchange between