Aggregator

观点 | 以信息安全保障国家经济安全

中国信息安全
2 months ago
习近平总书记强调，“我们要坚决维护我国发展利益，积极防范各种风险，确保国家经济安全”，“要维护国家数据安全，保护个人信息和商业秘密”。在全球数字经济高速发展、数字要素成为核心生产资料的时代背景下，保障信息安全已成为捍卫经济安全的必然要求。

New cPanel and WHM Flaws Enable Code Execution, DoS Attacks

Cyber Security News
2 months ago

cPanel has disclosed three critical security vulnerabilities tracked as CVE-2026-29201, CVE-2026-29202, and CVE-2026-29203 affecting its widely deployed cPanel & WHM web hosting control panel and WP Squared (WP2) platform. The flaws, patched on May 8, 2026, expose servers to arbitrary file reads, Perl code injection, and denial-of-service (DoS) attacks, making immediate patching essential for hosting […]

The post New cPanel and WHM Flaws Enable Code Execution, DoS Attacks appeared first on Cyber Security News.

Guru Baran

INC

Dark Feed IO
2 months ago

You must login to view this content

cohenido

INC

Dark Feed IO
2 months ago

You must login to view this content

cohenido

CVE-2022-46364

CVE Trends
2 months ago
Currently trending CVE - Hype Score: 2 - A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. 

CVE-2025-54123

CVE Trends
2 months ago
Currently trending CVE - Hype Score: 2 - Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middleware functionality in Hoverfly is vulnerable to command injection vulnerability at `/api/v2/hoverfly/middleware` endpoint due to insufficient validation and sanitization in user input. The ...

CVE-2023-37466

CVE Trends
2 months ago
Currently trending CVE - Hype Score: 4 - vm2 is an advanced vm/sandbox for Node.js. The library contains critical security issues and should not be used for production. The maintenance of the project has been discontinued. In vm2 for versions up to 3.9.19, `Promise` handler sanitization can be bypassed with the ...

CVE-2025-6554

CVE Trends
2 months ago
Currently trending CVE - Hype Score: 2 - Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

CVE-2014-0166 | WordPress up to 3.7.1/3.8.1 Authentication Cookies pluggable.php wp_validate_auth_cookie improper authentication (Nessus ID 73485 / ID 12914)

Vuldb Updates
2 months ago
A vulnerability classified as problematic has been found in WordPress up to 3.7.1/3.8.1. The affected element is the function wp_validate_auth_cookie of the file wp-includes/pluggable.php of the component Authentication Cookies Handler. This manipulation causes improper authentication. This vulnerability is registered as CVE-2014-0166. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2014-0165 | WordPress up to 3.7.1/3.8.1 Plupload publish_post access control (Nessus ID 73471 / ID 12914)

Vuldb Updates
2 months ago
A vulnerability, which was classified as problematic, has been found in WordPress up to 3.7.1/3.8.1. This affects an unknown function of the component Plupload. Performing a manipulation of the argument publish_post results in improper access controls. This vulnerability is reported as CVE-2014-0165. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.
vuldb.com

CVE-2014-2126 | Cisco ASA up to 9.1 ASDM access control (cisco-sa-20140409-asa / Nessus ID 73533)

Vuldb Updates
2 months ago
A vulnerability was found in Cisco ASA up to 9.1. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component ASDM Handler. This manipulation causes improper access controls. The identification of this vulnerability is CVE-2014-2126. It is possible to initiate the attack remotely. There is no exploit available. To fix this issue, it is recommended to deploy a patch.
vuldb.com

Managed ad