A security flaw has been identified and fixed in MariaDB, a popular open-source database system used by many websites to store user data, site content, and other critical information.
The issue impacts MariaDB versions 3.3.18 and 3.4.8. If a site running one of these versions takes input from visitors (like form submissions, search queries, or ...
Continue reading
A security flaw has been identified in the Single Sign On For TNG plugin for WordPress, impacting all versions up to and including 2.0.0. This flaw allows anyone who does not have a login for your WordPress site to reset the password for any existing user on the site, including administrator accounts. If an attacker exploits this vulnerability, ...
Continue reading
A security flaw has been found in the FormGent plugin for WordPress, a tool some site owners use to handle form submissions and file uploads, impacting all versions up to and including 1.9.2. The issue exists because a public API endpoint the plugin uses to manage uploaded files does not require any login or verification to access, which lets ...
Continue reading
A security flaw has been identified in Cisco Secure Firewall Management Center, a tool many organizations use to manage Cisco firewall systems that protect their networks and hosted services.
The issue stems from a password that is hard-coded, or embedded directly into the software’s code rather than being set by an administrator. An attacker ...
Continue reading
