A security vulnerability has been identified in specific older versions of PHP, the core software that runs most dynamic, interactive websites. The affected versions are PHP 8.2 releases older than 8.2.31, 8.3 releases older than 8.3.31, 8.4 releases older than 8.4.21, and 8.5 releases older than 8.5.6.The flaw exists in PHP's SOAP extension, a ...
Continue reading
A security flaw has been found in the WordPress plugin "SAML Single Sign On – SSO Login", a tool used to let users log in to WordPress sites via single sign-on services. All versions of the plugin up to and including 5.4.4 are affected by this issue.The flaw stems from a coding error that causes the plugin to incorrectly mark failed login ...
Continue reading
DD-WRT is a popular open-source firmware used in many wireless routers, which are commonly used to manage network access for websites and other online services you may host. A stack-based buffer overflow vulnerability has been found in this firmware.
This flaw affects an internal buffer used by DD-WRT’s UPnP feature, a tool that lets devices on ...
Continue reading
We are alerting you to a security vulnerability affecting Langflow, a low-code tool some hosting clients use to build and manage applications on their accounts.
This issue is an inclusion of functionality from an untrusted control sphere flaw, which allows anyone with internet access to run unauthorized, unapproved code on systems where vulnerable ...
Continue reading
