Medium Severity Description AVideo: 2FA toggle endpoint has no CSRF protection, letting an attacker page silently disable...
Latest
Medium Severity Description AVideo: stored XSS via unescaped stream key in modeYoutubeLive.php class attribute Read more at...
AI agents capable of discovering and exploiting obscure vulnerabilities are emerging alongside developers producing vast amounts of...
https://security-tracker.debian.org/tracker/DSA-6275-1
https://security-tracker.debian.org/tracker/DSA-6274-1
https://security-tracker.debian.org/tracker/DSA-6273-1
<article data-history-node-id="7707" about="/en/alerts-advisories/freepbx-security-advisory-av26-474" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block...
A critical vulnerability in the Funnel Builder plugin for WordPress is being actively exploited to inject malicious...
The tech company that maintains the hotel check-in system set its cloud storage to public, allowing anyone...