CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.

-
seclists.org
Improper Authentication (CWE-287) CVE-2024-33897
Full Disclosure mailing list archives From: Moritz Abrell via Fulldisclosure <fulldisclosure () seclists org> Date: Sun, 11 Aug 2024 19:49:16 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advi ... Read more

-
seclists.org
Execution with Unnecessary Privileges (CWE-250) CVE-2024-33894
Full Disclosure mailing list archives From: Moritz Abrell via Fulldisclosure <fulldisclosure () seclists org> Date: Sun, 11 Aug 2024 19:48:32 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advi ... Read more

-
seclists.org
Use of Hard-coded Cryptographic Key (CWE-321) CVE-2024-33895
Full Disclosure mailing list archives From: Moritz Abrell via Fulldisclosure <fulldisclosure () seclists org> Date: Sun, 11 Aug 2024 19:48:04 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advi ... Read more

-
seclists.org
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) CVE-2024-33896
Full Disclosure mailing list archives From: Moritz Abrell via Fulldisclosure <fulldisclosure () seclists org> Date: Sun, 11 Aug 2024 19:47:30 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advi ... Read more

-
seclists.org
Cleartext Storage of Sensitive Information in a Cookie (CWE-315) CVE-2024-33892
Full Disclosure mailing list archives From: Moritz Abrell via Fulldisclosure <fulldisclosure () seclists org> Date: Sun, 11 Aug 2024 19:46:57 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advi ... Read more

-
seclists.org
Improper Neutralization of Input During Web Page Generation (CWE-79) CVE-2024-33893
Full Disclosure mailing list archives From: Moritz Abrell via Fulldisclosure <fulldisclosure () seclists org> Date: Sun, 11 Aug 2024 19:46:22 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advi ... Read more

-
seclists.org
Dovecot CVE-2024-23185: Very large headers can cause resource exhaustion when parsing message
Full Disclosure mailing list archives From: Aki Tuomi via Fulldisclosure <fulldisclosure () seclists org> Date: Wed, 14 Aug 2024 14:13:42 +0300 (EEST) Affected product: Dovecot IMAP Server Internal re ... Read more

-
seclists.org
CVE-2024-23184: Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU intensive
Full Disclosure mailing list archives From: Aki Tuomi via Fulldisclosure <fulldisclosure () seclists org> Date: Wed, 14 Aug 2024 14:13:42 +0300 (EEST) Affected product: Dovecot IMAP Server Internal re ... Read more

-
Cybersecurity News
10,000+ WordPress Sites at Risk: Critical File Deletion Flaw Found in InPost Plugins
A critical vulnerability, tracked as CVE-2024-6500 (CVSS 10), has been uncovered in two popular WordPress plugins, InPost PL and InPost for WooCommerce, leaving over 10,000 websites susceptible to com ... Read more

-
Cybersecurity News
EDRKillShifter: A New EDR-Killing Tool in Ransomware Attack
High-level overview of the loader execution process | Image: SophosSophos researchers have discovered a new threat: EDRKillShifter, a sophisticated tool designed to dismantle endpoint detection and re ... Read more