Aggregator

CVE-2022-50992 | Weaver Network e-cology up to 10.51 XmlRpcServlet Interface path traversal

VulDB Recent Entries
2 months ago
A vulnerability was found in Weaver Network e-cology up to 10.51. It has been declared as critical. Affected by this vulnerability is the function WorkflowService.getAttachment/WorkflowService.LoadTemplateProp of the component XmlRpcServlet Interface. Such manipulation leads to path traversal. This vulnerability is listed as CVE-2022-50992. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-50993 | Weaver E-office up to 10.0_20221200 OfficeServer.php unrestricted upload

VulDB Recent Entries
2 months ago
A vulnerability, which was classified as critical, was found in Weaver E-office up to 10.0_20221200. The impacted element is an unknown function of the file OfficeServer.php. Executing a manipulation can lead to unrestricted upload. The identification of this vulnerability is CVE-2022-50993. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.
vuldb.com

CVE-2025-71284 | Synway SMG Gateway Management Software 2025-07-11 RADIUS Configuration Endpoint /en/9-2radius.php os command injection

VulDB Recent Entries
2 months ago
A vulnerability, which was classified as critical, has been found in Synway SMG Gateway Management Software 2025-07-11. The affected element is an unknown function of the file /en/9-2radius.php of the component RADIUS Configuration Endpoint. Performing a manipulation of the argument radius_address/radius_address2/shared_secret2/source_ip/timeout/retry results in os command injection. This vulnerability was named CVE-2025-71284. The attack may be initiated remotely. There is no available exploit.
vuldb.com

Imperva Customers Protected Against CVE-2026-41940 in cPanel & WHM

Security Boulevard
2 months ago

What is CVE-2026-41940? CVE-2026-41940 is a critical authentication bypass vulnerability affecting cPanel & WHM, including DNSOnly, in versions after 11.40. The flaw, discovered by WatchTowr Labs, exists in the login flow and allows unauthenticated remote attackers to gain unauthorized access to the control panel. The vulnerability carries a CVSS 3.1 score of 9.8 and is […]

The post Imperva Customers Protected Against CVE-2026-41940 in cPanel & WHM appeared first on Blog.

The post Imperva Customers Protected Against CVE-2026-41940 in cPanel & WHM appeared first on Security Boulevard.

Gabi Sharadin

Microsoft Windows 11 April 2026 Security Update Breaks Third-Party Backup Applications

Cyber Security News
2 months ago

Microsoft’s April 2026 cumulative security update for Windows 11 is causing significant disruptions for users relying on third-party backup software, triggering an MS-DEFCON level 3 advisory from security patch analyst Susan Bradley at AskWoody. The problematic update, KB5083769, applies to Windows 11 versions 24H2 and 25H2 (OS Builds 26200.8246 and 26100.8246), released on April 14, […]

The post Microsoft Windows 11 April 2026 Security Update Breaks Third-Party Backup Applications appeared first on Cyber Security News.

Guru Baran

One compromise, a thousand victims: why ransomware is turning to supply chain attacks

Ransomware.org
2 months ago

With an extortion toll running to tens of billions of dollars, few experts would dispute that ransomware is the most consequential cybercrime business model yet devised. But even the most successful business doesn’t stand still, which is why it shouldn’t surprise us that ransomware has recently started evolving in ways that signal an important shift. […]

The post One compromise, a thousand victims: why ransomware is turning to supply chain attacks appeared first on Ransomware.org.

John E. Dunn

Managed ad