A vulnerability in Rust’s standard library was discovered, allowing for code injection when executing Windows batch files. Despite Rust’s reputation for memory safety, this incident highlights the language’s susceptibility...
A new vulnerability named HTTP/2 CONTINUATION Flood has been discovered in the HTTP/2 protocol, allowing for potential denial-of-service (DoS) attacks. Security researcher Bartek Nowotarski reported the issue to the...
Details were noted of a vulnerability involving the “wall” command in the util-linux package, which can be exploited by malicious users to leak user passwords or change privileges on...
Fortra has addressed a critical security flaw in its FileCatalyst file transfer solution, identified as CVE-2024-25153, which could have allowed unauthenticated attackers to execute remote code on vulnerable servers....
A DarkGate malware campaign exploited a recently patched security vulnerability in Microsoft Windows, employing deceptive software installers to ensnare unsuspecting users. Trend Micro revealed that users were lured in...
A critical security flaw, identified as CVE-2024-2172, has been found in miniOrange’s Malware Scanner and Web Application Firewall plugins for WordPress, prompting urgent deletion by users. With a severity...
Ivanti disclosed a critical security vulnerability, CVE-2024-22024, in Connect Secure, Policy Secure, and ZTA gateway devices, potentially allowing attackers to bypass authentication measures. Rated 8.3 out of 10 on...