CVE-2023-2334: Cross-Site Request Forgery (CSRF)

The edd-google-sheet-connector-pro WordPress plugin before 1.4, Easy Digital Downloads Google Sheet Connector WordPress plugin before 1.6.6 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a...

PT-2025-21369 · WordPress · Edd-Google-Sheet-Connector-Pro +1

Name of the Vulnerable Software and Affected Versions: edd-google-sheet-connector-pro WordPress plugin versions prior to 1.4 Easy Digital Downloads Google Sheet Connector WordPress plugin versions prior to 1.6.6 Description: The issue concerns a lack of CSRF check when updating the Access Code,...

CVE-2025-0921: Execution with Unnecessary Privileges

Execution with Unnecessary Privileges vulnerability in multiple services of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian version...

Alibaba Cloud Linux 3 : 0201: libreoffice (ALINUX3-SA-2022:0201)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0201 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-25633: LibreOffice supports digit...

GNU Privacy Guard 2.4.8

GnuPG the GNU Privacy Guard or GPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As suc...

Google Is Using On-Device AI to Spot Scam Texts and Investment Fraud

Android’s “Scam Detection” protection in Google Messages will now be able to flag even more types of digital fraud...

CVE-2025-43004

The CVE-2025-43004 entry describes a security misconfiguration in SAP Digital Manufacturing Production Operator Dashboards (PODs) that allows unauthenticated external access to non-sensitive customer data. The root cause is lack of enforcement of authentication, with no indication that integrity ...

CVE-2025-43004 Security Misconfiguration Vulnerability in SAP Digital Manufacturing (Production Operator Dashboard)

Due to a security misconfiguration vulnerability, customers can develop Production Operator Dashboards PODs that enable outside users to access customer data when they access these dashboards. Since no mechanisms exist to enforce authentication, malicious unauthenticated users can view...

CVE-2025-43004 Security Misconfiguration Vulnerability in SAP Digital Manufacturing (Production Operator Dashboard)

Due to a security misconfiguration vulnerability, customers can develop Production Operator Dashboards PODs that enable outside users to access customer data when they access these dashboards. Since no mechanisms exist to enforce authentication, malicious unauthenticated users can view...

SAP Digital Manufacturing 安全漏洞

SAP Digital Manufacturing is a manufacturing operations management MOM platform from SAP, Germany, that supports agile operations and supports a sustainable workforce. A security vulnerability exists in SAP Digital Manufacturing that stems from a security misconfiguration that could lead to...

Practical Ways to Improve Your Digital Efficiency

Optimizing your online productivity is more important than ever. Whether you’re a business owner, freelancer, or simply someone…...

Zero Trust in the Age of Digital Transformation: The New Cybersecurity Paradigm

With the digital transformation movement sweeping the world and cyber threats evolving simultaneously to pose greater and greater…...

Exploit for Use After Free in Apple Ipados

iOS "Airborne" Vulnerabilities - Log Artifact Extractor This...

CVE-2024-13962

CVE-2024-13962 affects Avast Cleanup Premium (Gen Digital) using TuneupSvc on Windows 10 Pro x64. A local privilege escalation exists via creating a symbolic link and TOCTTOU timing, enabling an attacker with low privileges to escalate to SYSTEM and potentially execute arbitrary code. Affected ve...

Gen Digital AVG TuneUp 安全漏洞

Gen Digital AVG TuneUp is a professional PC optimization tool from Gen Digital, Inc. that provides system cleanup, performance acceleration and automated maintenance. A security vulnerability exists in Gen Digital AVG TuneUp version 23.4, which stems from a mishandling of symbolic links in the...

Gen Digital Avast Cleanup Premium 安全漏洞

Gen Digital Avast Cleanup Premium is an advanced PC cleanup and optimization tool from Gen Digital, Inc. with deep junk cleaning and automated maintenance features. A security vulnerability exists in Gen Digital Avast Cleanup Premium version 24.2.16593.17810, which stems from a mishandling of...

Gen Digital AVG TuneUp 安全漏洞

Gen Digital AVG TuneUp is a professional PC optimization tool from Gen Digital, Inc. that provides system cleanup, performance acceleration and automated maintenance. A security vulnerability exists in Gen Digital AVG TuneUp version 24.2.16593.9844, which stems from a mishandling of symbolic link...

CVE-2024-13962: Improper Link Resolution Before File Access

Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Gen Digital Inc. Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveragi...

38,000+ FreeDrain Subdomains Found Exploiting SEO to Steal Crypto Wallet Seed Phrases

Cybersecurity researchers have exposed what they say is an "industrial-scale, global cryptocurrency phishing operation" engineered to steal digital assets from cryptocurrency wallets for several years. The campaign has been codenamed FreeDrain by threat intelligence firms SentinelOne and Validin...

RLSA-2024:2137 Low: LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. Security Fixes: LibRaw: a heap-buffer-overflow in raw2imageex CVE-2023-1729 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...