SonicWall SSLVPN access control flaw is now exploited in attacks
SonicWall is warning that a recently fixed access control flaw tracked as CVE-2024-40766 in SonicOS is now "potentially" exploited in attacks, urging admins to apply patches as soon as possible.
SonicWall is warning that a recently fixed access control flaw tracked as... [more]
Microsoft Office 2024 to disable ActiveX controls by default
After Office 2024 launches in October, Microsoft will disable ActiveX controls by default in Word, Excel, PowerPoint, and Visio client apps.
After Office 2024 launches in October, Microsoft will disable ActiveX controls... [more]
LiteSpeed Cache bug exposes 6 million WordPress sites to takeover attacks
Yet, another critical severity vulnerability has been discovered in LiteSpeed Cache, a caching plugin for speeding up user browsing in over 6 million WordPress sites.
Yet, another critical severity vulnerability has been discovered in LiteSpeed... [more]
Cisco warns of backdoor admin account in Smart Licensing Utility
Cisco has removed a backdoor account in the Cisco Smart Licensing Utility (CSLU) that can be used to log into unpatched systems with administrative privileges.
Cisco has removed a backdoor account in the Cisco Smart Licensing Utility (CSLU)... [more]
D-Link says it is not fixing four RCE flaws in DIR-846W routers
D-Link is warning that four remote code execution (RCE) flaws impacting all hardware and firmware versions of its DIR-846W router will not be fixed as the products are no longer supported.
D-Link is warning that four remote code execution (RCE) flaws impacting all... [more]
-
SonicWall SSLVPN access control flaw is now exploited in attacks
-
Microsoft Office 2024 to disable ActiveX controls by default
-
LiteSpeed Cache bug exposes 6 million WordPress sites to takeover attacks
-
Cisco warns of backdoor admin account in Smart Licensing Utility
-
D-Link says it is not fixing four RCE flaws in DIR-846W routers