GoDaddy Data Breach Exposes Over 1 Million WordPress Customers' Data

Web hosting giant GoDaddy on Monday disclosed a data breach that resulted in the unauthorized access of data belonging to a total of 1.2 million active and inactive customers, making it the third security incident to come to light since 2018. In a filing with the U.S. Securities and Exchange...

SAP NetWeaver AS JAVA Command Execution Vulnerability (CNVD-2020-62998)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A security vulnerability exists in SAP NetWeaver AS JAVA version 7.20, 7.30, 7.31, 7.40, and 7.50 that allows an...

Cisco IOx Application Framework Input Validation Error Vulnerability

Cisco Iox is the U.S. Cisco Cisco a combination of Cisco IOS and Linux OS for secure network connectivity and the development of IOT applications for secure development environment. An input validation error vulnerability exists in Cisco IOx Application Framework versions prior to 1.9.0, which...

Langfang Extreme Networks Technology Co. Extreme CMS has file upload vulnerability

Extreme CMS is an open source PHPCMS web content management system. Ltd. Extreme CMS has a file upload vulnerability that can be exploited by attackers to upload malicious files to gain server privileges...

File Upload Vulnerability in Extreme CMS Backend

Extreme CMS is open source and free PHPCMS web content management system. There is a file upload vulnerability in the backend of Extreme CMS, which can be exploited by attackers to upload malicious files and gain administrative privileges on the server...

Multiple Huawei Products Improperly Licensed Vulnerability

The Huawei HiRouter-CD15-10, among others, is a wireless router from the Chinese company Huawei Huawei. An improper authorization vulnerability exists in multiple Huawei products, which can be exploited by attackers to execute uploaded malicious files and elevate privileges...