A security flaw has been found in the Mailgun for WordPress plugin, affecting all versions up to and including 2.2.0. The issue is caused by the plugin not properly checking user-submitted data, which lets unauthenticated attackers send requests to Mailgun's services using your website's stored Mailgun API key, without needing to log in to your ...
Continue reading
A security flaw has been identified in TrueConf Server. The issue is a missing authentication check for a critical server function, meaning no valid login is required to access this sensitive feature.
If you run TrueConf Server on your hosting account, an attacker with network access to your server’s 4307/TCP port could exploit this gap to run ...
Continue reading
A code injection vulnerability has been identified in TrueConf Server, a service some customers may run on their hosting accounts. This flaw poses a security risk for anyone using this software as part of their hosted setup.The vulnerability can be exploited by an unauthorized remote attacker who has network access to your server's 4307/TCP port. ...
Continue reading
A security flaw has been identified in the Zimbra Collaboration Suite (ZCS), a popular tool used for email, calendar, and team collaboration features on many hosted websites. This flaw is classified as an operating system command injection vulnerability, a type of security gap that lets unauthorized users run commands on the computer system that ...
Continue reading
