CVE-2024-32124 – FortiIsolator Improper Access Control Logging Vulnerability

CVE ID : CVE-2024-32124 Published : July 18, 2025, 8:15 a.m. | 1 hour, 24 minutes ago Description : An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may allow a remote authenticated read-only attacker to alter logs via a crafted HTTP request. Severity: 4.3 | MEDIUM Visit the […]

CVE-2024-27779 – FortiSandbox FortiIsolator Insufficient Session Expiration Vulnerability

CVE ID : CVE-2024-27779 Published : July 18, 2025, 8:15 a.m. | 1 hour, 24 minutes ago Description : An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4.0 all versions, 3.2 all versions and FortiIsolator version 2.4 and below, 2.3 all versions, 2.2 all versions, 2.1 all versions, […]

BIND 9 Vulnerabilities Expose Organizations to Cache Poisoning and DoS Attacks

BIND 9 Vulnerabilities Expose Organizations to Cache Poisoning and DoS Attacks Two critical vulnerabilities in the BIND 9 DNS resolver software are affecting organizations worldwide, with potential cache poisoning and denial-of-service attacks. The vulnerabilities, identified as … Read more Published Date: Jul 18, 2025 (3 hours, 20 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-40777 […]

New Cisco Bugs Rated CVSS 10.0, Patch Immediately

New Cisco Bugs Rated CVSS 10.0, Patch Immediately Cisco has issued a new security advisory warning of newly discovered vulnerabilities in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC), revealing serious security flaw … Read more Published Date: Jul 18, 2025 (1 hour, 33 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-20337 […]

CVE-2025-7438 – MasterStudy LMS Pro WordPress Arbitrary File Upload Vulnerability

CVE ID : CVE-2025-7438 Published : July 18, 2025, 7:15 a.m. | 19 minutes ago Description : The MasterStudy LMS Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the ‘install_and_activate_plugin’ function in all versions up to, and including, 4.7.9. This makes it possible for authenticated attackers, with […]

CVE-2025-7643 – WordPress Attachment Manager Remote File Deletion Vulnerability

CVE ID : CVE-2025-7643 Published : July 18, 2025, 6:15 a.m. | 1 hour, 19 minutes ago Description : The Attachment Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handle_actions() function in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to […]

CVE-2025-6719 – WordPress Terms Descriptions Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-6719 Published : July 18, 2025, 6:15 a.m. | 1 hour, 19 minutes ago Description : The Terms descriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, […]

CVE-2025-6718 – B1.lt WordPress SQL Injection

CVE ID : CVE-2025-6718 Published : July 18, 2025, 6:15 a.m. | 1 hour, 19 minutes ago Description : The B1.lt plugin for WordPress is vulnerable to SQL Injection due to a missing capability check on the b1_run_query AJAX action in all versions up to, and including, 2.2.56. This makes it possible for authenticated attackers, with Subscriber-level […]