The Firewall Scoop Vulnerability Desk is the part of the Firewall Scoop newsroom that covers software flaws, vendor advisories and patches. It is a newsroom desk, not a single person. Sections: Vulnerabilities. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 59 articles so far. See the editorial policy or report an error.
A high-severity vulnerability in PhpSpreadsheet enables attackers to trigger denial of service or access local files via crafted spreadsheet XML inputs.
An unauthenticated denial-of-service flaw in Django REST Framework versions below 3.18.2 allows attackers to exhaust server resources using crafted HTTP headers.
Attackers can read local files on unpatched OrbiTeam BSCW Server instances by manipulating theme parameters without any login credentials.
A high-severity flaw in Lotus versions up to 0.10.2 allows attackers to forge API keys using only known prefixes, potentially altering usage metrics and billing records for affected organizations.
The open-source DevGuard platform aggregates six security checks and syncs findings with developer tools to streamline software supply chain risk management.
Researchers observed an operator using an unauthenticated Flowise server to harvest credentials and attempt workflow hijacking via simulated nodes.
The PHP project released patches for four major versions after identifying two critical flaws and observing CVE IDs circulating online ahead of schedule.
A CVSS 9.9 vulnerability in Oracle Trusted Answer Search 26.1 allows low-privileged network attackers to take over the system via Oracle Net.
Self-managed GitLab users must update immediately to fix a critical integer overflow bug allowing remote code execution without login credentials.
A critical remote code execution flaw in Oracle WebCenter Content allows unauthenticated attackers to seize control of affected servers without credentials.
A CVSS 9.9 flaw in Oracle Essbase allows low-privileged attackers to seize full control via HTTP, exposing environments running version 21.8.3.0.0 to immediate compromise.
Two critical vulnerabilities in PHP allow attackers to execute code remotely without credentials, affecting all web-serving deployments using supported versions.
Attackers can trigger remote code execution or file deletion via object injection flaws in Duplicator and Duplicator Pro versions prior to the latest releases.
A stack-based buffer overflow in the batchupg feature of this router model permits arbitrary code execution via authenticated HTTP requests.
An authenticated command injection vulnerability in Totolink X2000R firmware allows attackers to execute arbitrary code on the device via crafted HTTP requests.
Federal agencies face strict deadlines to fix four chained flaws in Plex Media Server, including high-severity file write and SSRF issues.
Authenticated attackers can execute arbitrary code via stack-based buffer overflows in the Totolink X2000R web interface. No patch is currently available.
A critical flaw in IBM DataStage 5.4.0.0 allows anonymous callers to poison tenant data and collapse encryption boundaries without authentication.
A low-severity cross-user cache issue in the retired Apache Cocoon framework exposes multi-user apps to data leakage, with no patch planned.
A critical remote command injection flaw in unsupported DrayTek routers has a public exploit, though a limited patch is available for the affected version.
A stack-based buffer overflow in Advantech ADAM-3600 units prior to version 2.8.5.0 enables authenticated attackers to execute arbitrary code via long file paths.
Attackers exploit a high-severity DLL sideloading flaw in Siemens Software Center to deploy remote access trojans via trusted installers.
Attackers are actively exploiting a chain of four vulnerabilities in Plex Media Server to install cryptominers and proxy software on unpatched systems.
A high-severity flaw in Craft CMS allows logged-in users to execute arbitrary code by abusing the Twig group filter without proper safeguards.