A security vulnerability has been identified in the NGINX JavaScript feature, a tool some websites use to add custom, dynamic functionality. This flaw only affects sites that meet two specific conditions: the js_fetch_proxy setting is configured to use at least one value controlled by website visitors (such as data from HTTP request headers, URL ...
Continue reading
A security flaw has been identified in MariaDB server versions 3.3.18 and 3.4.8. MariaDB is a community-developed fork of MySQL, a common database system many websites use to store content, user information, and other important data. This flaw lets malicious user input slip past a standard built-in security tool that is supposed to block it from ...
Continue reading
A security vulnerability has been identified in the SAML Single Sign On (SSO Login) plugin for WordPress, impacting all versions up to and including 5.4.4.
The flaw is an authentication bypass bug that lets unauthenticated attackers skip the plugin's normal login verification process entirely. This means someone without a valid account for your ...
Continue reading
A security vulnerability has been found in the JCE Editor extension, an add-on for Joomla, a popular tool for building and managing websites.
The flaw lets people who do not have an account or login for your Joomla site create their own editor profiles for the JCE extension. This access allows them to upload and run PHP code on your website.
Being ...
Continue reading
