161 matches found
Wordfence Intelligence Weekly WordPress Vulnerability Report (June 9, 2025 to June 15, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...
Rockwell Automation FactoryTalk Updater Web Client Detection
Binary data rockwellfactorytalkupdaterwebclientdetect.nbin...
Dell Trusted Device Installed (Windows)
Binary data delltrusteddevicewininstalled.nbin...
5 Impactful AWS Vulnerabilities You're Responsible For
If you're using AWS, it's easy to assume your cloud security is handled - but that's a dangerous misconception. AWS secures its own infrastructure, but security within a cloud environment remains the customer's responsibility. Think of AWS security like protecting a building: AWS provides strong...
Astrill VPN Installed (Windows)
Binary data astrillvpnwininstalled.nbin...
Fedora 41 : jupyterlab (2025-e50201543b)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-e50201543b advisory. Update to 4.3.6 rhbz2352545 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...
LiteLLM Default Credentials
LiteLLM applies an authentication system with credentials that could have been suggested from the documentation. If these credentials are not modified, an attacker could access LiteLLM's interface and perform arbitrary actions. This detection is included in the AI and LLM category. No source data...
Linux Distros Unpatched Vulnerability : CVE-2024-57792
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: power: supply: gpio-charger: Fix set charge current limits Fix set charge current limits for...
Linux Distros Unpatched Vulnerability : CVE-2022-44451
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted...
Linux Distros Unpatched Vulnerability : CVE-2022-49221
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: populate connector of struct dppanel DP CTS test case 4.2.2.6 has valid edid wit...
Linux Distros Unpatched Vulnerability : CVE-2017-7303
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 because of missing a check in...
CVE-2025-1889 picklescan - Security scanning bypass via non-standard file extensions
picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pickle file with a non-standard file extension. Because the malicious pickle file inclusion is not...
CVE-2025-1716 picklescan - Security scanning bypass via 'pip main'
picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package hosted, for example, on pypi.org or GitHub via pip.main. Because pip is not a restricted global, the model, when scanned with picklesca...
Wordfence Intelligence Weekly WordPress Vulnerability Report (January 20, 2025 to January 26, 2025)
Did you know Wordfence runs aBug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability , for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we...
Masa CMS Default Credentials
The scanner successfully authenticated on the Masa CMS web application by using predictable credentials on its login form. No source data...
Content Security Policy Permissive Sources
Content Security Policy CSP is a web security standard that helps prevent attacks like XSS, clickjacking and mixed content by restricting which resources browsers can load. Several high-risk sources have been detected in the CSP that could allow bypassing these protections through permissive...
Ivanti Desktop & Server Management (DSM) Installed (Windows)
Binary data ivantidesktopservermanagementwininstalled.nbin...
Beyondtrust Remote Support Detection
Binary data beyondtrustremotesupportdetect.nbin...