This vulnerability, identified as CVE-2024-45791, affects all versions of Apache HertzBeat released before version 1.6.1. The issue arises from the exposure of sensitive tokens through HTTP GET requests containing query strings. This flaw could allow attackers to gain unauthorized access…

A new security vulnerability has been identified in GitHub’s Command Line Interface (CLI) that could allow attackers to execute malicious commands on a user’s system via remote code execution (RCE). This vulnerability, identified as CVE-2024-32002, affects versions of GitHub CLI…

A newly discovered critical vulnerability in the Laravel framework, identified as CVE-2024-52301, has raised significant concerns among web developers. This vulnerability potentially allows attackers to gain unauthorized access to applications built on Laravel, threatening the security of data and system…

A recently discovered critical security vulnerability in one of WordPress’s most popular plugins, Really Simple Security, has put more than 4 million websites at risk of potential hacking attacks. This major vulnerability has raised significant concerns among plugin users. The…

GoIssue is a new, sophisticated phishing tool targeting GitHub users, allowing hackers to collect email addresses from GitHub profiles and launch large-scale phishing attacks. This tool poses a serious threat to GitHub users, especially developers and organizations. Uncovered by cybersecurity…

Fortinet has released security updates for several of its products—FortiOS, FortiAnalyzer, FortiManager, and FortiClient for Windows. If these vulnerabilities are not patched, attackers could gain full control of the compromised systems. One of the most severe vulnerabilities, identified as CVE-2024-47575,…

SAP (Systems, Applications, and Products in Data Processing) is an international company and a leader in corporate software, offering integrated solutions to automate and manage business processes. Founded in Germany in 1972, SAP is now one of the largest producers…

Hackers are currently exploiting a critical vulnerability in Veeam Backup & Replication software to distribute a new ransomware strain called “Frag.” This vulnerability, tracked as CVE-2024-40711, allows unauthenticated remote code execution. It has a severity score of 9.8 out of…

WSO2 announced the discovery of critical vulnerabilities in its “API Manager” and “Identity Server” products. These vulnerabilities allow bypassing authentication mechanisms or resetting user passwords. This situation can particularly put high-level accounts, such as administrators, at risk. The risk could…

A critical security vulnerability has been identified in D-Link NAS (Network-Attached Storage) devices. If exploited, this vulnerability could allow attackers to execute malicious code on the devices, posing a serious threat to system and data security. The vulnerability, identified as…