A security flaw has been identified in FastNetMon Community Edition, up to and including version 1.2.9, specifically in its Juniper router integration feature. This is a command injection vulnerability: the tool’s logging function takes input from external command lines and inserts it directly into system commands without checking for malicious ...
Continue reading
Twig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass vulnerability when using a SourcePolicyInterface that allows attackers with template rendering capabilities to pass arbitrary PHP callables to sort, filter, map, and reduce filters. Attackers can exploit the runtime check that fails to use the current template source to bypass ...
Continue reading
PHP is the core software that powers most dynamic websites and web applications, including content management systems, e-commerce stores, and custom web tools. A security flaw has been identified in specific, unpatched versions of PHP: 8.2 releases older than 8.2.31, 8.3 releases older than 8.3.31, 8.4 releases older than 8.4.21, and 8.5 releases ...
Continue reading
A security flaw has been identified in the SAML Single Sign On – SSO Login plugin for WordPress, a tool used to let users log in to websites with a single shared set of credentials. The issue affects all versions of the plugin up to and including 5.4.4.The vulnerability lets attackers completely bypass the plugin’s login verification process. ...
Continue reading
