Search InfoSecNexus
Search published blog posts, CVE notes, guides, and live briefings.
Security intelligence
High-priority vulnerabilities, exploitation notes, and mitigation guidance.
SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls....
Read briefing
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer...
Read briefing
WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is...
Read briefing Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of...
Read briefing PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution.
Read briefing PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution.
Read briefing Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE...
Read briefing Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may...
Read briefing Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter...
Read briefing Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on...
Read briefing