A security flaw has been found in the Wishlist Member plugin for WordPress, affecting all versions up to and including 3.34.1. This flaw allows people who do not have any existing login access to your site to take over any existing WordPress account on your site, including administrator accounts that have full control over your site’s content ...
Continue reading
A security vulnerability has been found in Metabase, a data analytics tool many website owners use to track, analyze, and report on their site's data. This flaw is a database security issue that allows unauthenticated remote attackers (people who do not have your Metabase login credentials) to inject harmful custom database commands into your ...
Continue reading
A security flaw has been identified in the Windows Ancillary Function Driver for WinSock, a built-in Windows component that supports network functionality for programs running on Windows servers.
This issue is classified as a use-after-free vulnerability. An attacker who already has authorized access to your Windows server could exploit this flaw ...
Continue reading
A security vulnerability has been identified in two Cisco network security products: the Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD).
The flaw could be exploited by an unauthenticated, remote attacker — meaning someone without authorized access to the device, connecting from an external location — ...
Continue reading
