EUVD-2020-23702

Malware in sbrugna...

CVE-2023-40004 Unauth. Access Token Manipulation vulnerability in multiple ServMask WordPress plugins

Missing Authorization vulnerability in ServMask All-in-One WP Migration Box Extension, ServMask All-in-One WP Migration OneDrive Extension, ServMask All-in-One WP Migration Dropbox Extension, ServMask All-in-One WP Migration Google Drive Extension.This issue affects All-in-One WP Migration Box...

North Korean state-sponsored threat actor Lazarus Group exploiting Chrome Zero-day vulnerability

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here For more than a month before a fix was available, North Korean state hackers known as Lazarus group exploited a zero-day, remote code execution vulnerability CVE-2022-0609 in Google Chromes web browser. The attack mainly targe...

PT-2021-11918

Name of the Vulnerable Software and Affected Versions: Pax Technology PAXSTORE versions 7.0.8 20200511171508 and lower Description: The issue allows an authenticated attacker to perform XML External Entity XXE injection, compromising the private keys of a JWT token. This enables the attacker to...