A security vulnerability has been identified in the SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress. All versions of the plugin up to and including 3.9.7 are affected by a flaw that allows unauthenticated attackers to bypass login security and take over user accounts on sites running the ...
Continue reading
A security vulnerability has been identified in the Arista VeloCloud Orchestrator On-Prem platform, a tool many organizations use to manage their cloud and network infrastructure. This flaw is a command injection issue, which allows a remote, unauthorized user to send malicious commands to the system.If exploited, this vulnerability would let an ...
Continue reading
A security flaw has been identified in Fortinet FortiOS, a system used to manage network and hosting infrastructure for many online services. This flaw creates a risk of sensitive private information being exposed to people who are not authorized to access it.To take advantage of this specific flaw, an attacker would first need to have already ...
Continue reading
MyCERT has released advisory MA-1471.072026 concerning Microsoft SharePoint hardening after new exploitations. The advisory was published on 20 July 2026 at 9:43 am.The advisory focuses on strengthening the security of Microsoft SharePoint deployments in response to recent exploitation attempts. It emphasizes the importance of hardening measures ...
Continue reading
