Several critical vulnerabilities have recently been discovered in the Common UNIX Printing System (CUPS), which is widely used in Linux and other UNIX-like operating systems. These vulnerabilities increase the system’s potential security threats, including vulnerabilities that could allow remote code…
A serious security vulnerability has been discovered in The Events Calendar plugin, one of the popular WordPress plugins. This vulnerability is of the SQL injection type and has the number CVE-2024-8275. The vulnerability affects all versions of the plugin 6.6.4…
Apache Tomcat is the most widely used Java servlet in the world (A Java servlet is a software component written in the Java programming language that allows interaction with web servers (such as Apache Tomcat). Servlets are dynamic web applications…
Central Asia has become the target of a new malicious Android malware campaign called Ajina.Banker. This malware was discovered in May 2024. Ajina.Banker has been distributed to users since November 2023, and researchers have identified about 1,400 unique variants of…
🌐 The International Telecommunication Union (ITU) announced the Global Cybersecurity Index 2024 rating.⚠️ This rating evaluates the development of countries in the field of cyber security. Countries are no longer ranked, but divided into five groups according to the level…
Kibana, a popular data visualization and exploration tool used with Elasticsearch, has identified two critical vulnerabilities affecting it.The vulnerabilities, CVE-2024-37288 and CVE-2024-37285, allow attackers to execute arbitrary code by nullifying YAML serialization.The flaws have been rated as High severity, highlighting…
Veeam Software, a leading provider of backup, recovery, and data management solutions, has announced the discovery and remediation of several critical and critical vulnerabilities in multiple products.These vulnerabilities pose potential risks to users of Veeam Backup & Replication, Veeam ONE,…
Cybersecurity researchers have discovered another critical security flaw in the LiteSpeed Cache plugin for WordPress that could allow unauthenticated users to take control of arbitrary accounts.Tracked as CVE-2024-44000 (CVSS score: 7.5), the vulnerability affects versions of the LiteSpeed Cache plugin…
💻 Vulnerability discovered in WordPress’ GiveWP fundraising plugin that exposes over 100,000 websites to remote code execution attacks.This vulnerability, tracked as CVE-2024-5932 () (CVSS score: 10.0), affects all versions of the GiveWP plugin prior to version 3.14.2.🧑💻 This information is…