Over 39,000 Unauthenticated Redis Instances Found Exposed on the Internet

An unknown attacker targeted tens of thousands of unauthenticated Redis servers exposed on the internet in an attempt to install a cryptocurrency miner. It's not immediately known if all of these hosts were successfully compromised. Nonetheless, it was made possible by means of a "lesser-known...

CVE-2022-1843: Cross-Site Request Forgery (CSRF)

The MailPress WordPress plugin through 7.2.1 does not have CSRF checks in various places, which could allow attackers to make a logged in admin change the settings, purge log files and more via CSRF attacks...

PT-2022-14161

Name of the Vulnerable Software and Affected Versions MailPress WordPress plugin versions prior to 7.2.2 Description The issue concerns the lack of CSRF checks in various parts of the plugin, which could allow attackers to perform actions such as changing settings or purging log files by tricking...