We’re reaching out to share news of a security vulnerability identified in Metabase, a common tool many of our hosting clients use for database analytics and reporting tied to their websites.
The flaw is a SQL injection issue, which allows an unauthenticated remote attacker (someone with no existing login access to your Metabase instance) to ...
Continue reading
Microsoft has identified a security flaw in a core Windows system component called the Ancillary Function Driver for WinSock, which handles network and internet connection functions for Windows devices.
This is a "use-after-free" type of vulnerability, meaning an attacker who already has basic authorized access to the server can exploit it to gain ...
Continue reading
A security flaw has been identified in two Cisco firewall products: the Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD). This is a heap inspection vulnerability, a weakness in how the devices handle certain internal memory checks, and it can be exploited by a remote attacker with no existing login ...
Continue reading
WordPress has released version 7.0.4, a security-focused update that includes a fix for a known security issue on the platform. The WordPress team recommends updating your site as soon as possible to avoid leaving it exposed to potential threats from the unpatched flaw.You can install this update directly from your WordPress site's admin dashboard ...
Continue reading
