A security flaw has been identified in FastNetMon Community Edition, affecting all versions up to 1.2.9, specifically in its Juniper router integration plugin. This is an OS command injection vulnerability, meaning unsanitized data passed to the plugin's logging script could be used to run unauthorized, potentially malicious commands on the server ...
Continue reading
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extension's object deduplication mechanism stores pointers to PHP objects in a global map without incrementing their reference counts. When an apache:Map node contains duplicate keys, processing the second entry overwrites the first in ...
Continue reading
DD-WRT is a popular open-source firmware installed on many third-party network routers, some of which you may use to connect your devices to your hosting service. A security vulnerability has been identified in this firmware: it contains a stack-based buffer overflow flaw, a type of coding weakness that can be exploited to run unauthorized, ...
Continue reading
A security vulnerability has been identified in the Langflow application, a tool some of our customers deploy on their hosted websites. This flaw is categorized as an inclusion of functionality from an untrusted control sphere issue.
In practical terms, this vulnerability allows unauthorized remote users to run any custom code they choose on ...
Continue reading
